# CVEs published 2009-08-06 25 CVEs were published on August 6, 2009: 0 critical, 0 high. Days are UTC. - [CVE-2008-6911](https://cve.now/CVE-2008-6911.md): SQL injection vulnerability in the authenticateUser function in includes/authentication.inc.php in BrewBlogger (BB) 2.1.0.1, when magic\_quot (no CVSS) - [CVE-2008-6909](https://cve.now/CVE-2008-6909.md): Services 5.x before 5.x-0.92 and 6.x before 6.x-0.13, a module for Drupal, does not sign all required data in requests, which has unspecifie (no CVSS) - [CVE-2008-6910](https://cve.now/CVE-2008-6910.md): Services 5.x before 5.x-0.92 and 6.x before 6.x-0.13, a module for Drupal, does not use timeouts for signed requests, which allows remote at (no CVSS) - [CVE-2008-6905](https://cve.now/CVE-2008-6905.md): Cross-site request forgery (CSRF) vulnerability in index.php in BabbleBoard 1.1.6 allows remote authenticated users to hijack the authentica (no CVSS) - [CVE-2008-6906](https://cve.now/CVE-2008-6906.md): Cross-site scripting (XSS) vulnerability in index.php in BabbleBoard 1.1.6 allows remote attackers to inject arbitrary web script or HTML vi (no CVSS) - [CVE-2008-6907](https://cve.now/CVE-2008-6907.md): Multiple SQL injection vulnerabilities in checkuser.php in 2532designs 2532|Gigs 1.2.2 Stable, when magic\_quotes\_gpc is disabled, allow remo (no CVSS) - [CVE-2008-6908](https://cve.now/CVE-2008-6908.md): Services 5.x before 5.x-0.92 and 6.x before 6.x-0.13, a module for Drupal, uses an insecure hash when signing requests, which allows remote (no CVSS) - [CVE-2009-1726](https://cve.now/CVE-2009-1726.md): Heap-based buffer overflow in ColorSync in Apple Mac OS X 10.4.11 and 10.5 before 10.5.8 allows remote attackers to execute arbitrary code o (no CVSS) - [CVE-2009-1727](https://cve.now/CVE-2009-1727.md): Incomplete blacklist vulnerability in CoreTypes in Apple Mac OS X 10.5 before 10.5.8 makes it easier for user-assisted remote attackers to e (no CVSS) - [CVE-2009-1728](https://cve.now/CVE-2009-1728.md): Stack-based buffer overflow in Image RAW in Apple Mac OS X 10.5 before 10.5.8, and 10.4 before Digital Camera RAW Compatibility Update 2.6, (no CVSS) - [CVE-2009-2188](https://cve.now/CVE-2009-2188.md): Buffer overflow in ImageIO in Apple Mac OS X 10.5 before 10.5.8, and Safari before 4.0.3, allows remote attackers to execute arbitrary code (no CVSS) - [CVE-2009-2190](https://cve.now/CVE-2009-2190.md): launchd in Apple Mac OS X 10.5 before 10.5.8 allows remote attackers to cause a denial of service (individual service outage) by making many (no CVSS) - [CVE-2009-2191](https://cve.now/CVE-2009-2191.md): Format string vulnerability in Login Window in Apple Mac OS X 10.4.11 and 10.5 before 10.5.8 allows attackers to execute arbitrary code or c (no CVSS) - [CVE-2009-2192](https://cve.now/CVE-2009-2192.md): MobileMe in Apple Mac OS X 10.5 before 10.5.8 does not properly delete credentials upon signout from the preference pane, which makes it eas (no CVSS) - [CVE-2009-2193](https://cve.now/CVE-2009-2193.md): Buffer overflow in the kernel in Apple Mac OS X 10.5 before 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of se (no CVSS) - [CVE-2009-2194](https://cve.now/CVE-2009-2194.md): Apple Mac OS X 10.5 before 10.5.8 does not properly share file descriptors over local sockets, which allows local users to cause a denial of (no CVSS) - [CVE-2009-0151](https://cve.now/CVE-2009-0151.md): The screen saver in Dock in Apple Mac OS X 10.5 before 10.5.8 does not prevent four-finger Multi-Touch gestures, which allows physically pro (no CVSS) - [CVE-2009-1723](https://cve.now/CVE-2009-1723.md): CFNetwork in Apple Mac OS X 10.5 before 10.5.8 places an incorrect URL in a certificate warning in certain 302 redirection scenarios, which (no CVSS) - [CVE-2009-2412](https://cve.now/CVE-2009-2412.md): Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable Utility library (aka APR-util) 0.9.x and 1.3 (no CVSS) - [CVE-2009-2625](https://cve.now/CVE-2009-2625.md): XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0 (no CVSS, xerces:xercesImpl) - [CVE-2008-6904](https://cve.now/CVE-2008-6904.md): Multiple unspecified vulnerabilities in Sophos SAVScan 4.33.0 for Linux, and possibly other products and versions, allow remote attackers to (no CVSS) - [CVE-2008-6900](https://cve.now/CVE-2008-6900.md): Unrestricted file upload vulnerability in "Add Pen/Author Name" feature in addpen.php in AvailScript Article Script allows remote authentica (no CVSS) - [CVE-2008-6901](https://cve.now/CVE-2008-6901.md): Multiple directory traversal vulnerabilities in 2532designs 2532|Gigs 1.2.2 Stable, when register\_globals is enabled and magic\_quotes\_gpc is (no CVSS) - [CVE-2008-6902](https://cve.now/CVE-2008-6902.md): Unrestricted file upload vulnerability in upload\_flyer.php in 2532designs 2532|Gigs 1.2.2 Stable allows remote attackers to execute arbitrar (no CVSS) - [CVE-2008-6903](https://cve.now/CVE-2008-6903.md): Sophos Anti-Virus for Windows before 7.6.3, Anti-Virus for Windows NT/9x before 4.7.18, Anti-Virus for OS X before 4.9.18, Anti-Virus for Li (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2009-08-06 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.