# CVEs published 2009-08-07

15 CVEs were published on August 7, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-0668](https://cve.now/CVE-2009-0668.md): Unspecified vulnerability in Zope Object Database (ZODB) before 3.8.2, when certain Zope Enterprise Objects (ZEO) database sharing is enable (no CVSS, zodb3)
- [CVE-2009-0669](https://cve.now/CVE-2009-0669.md): Zope Object Database (ZODB) before 3.8.2, when certain Zope Enterprise Objects (ZEO) database sharing is enabled, allows remote attackers to (no CVSS, zodb3)
- [CVE-2009-2411](https://cve.now/CVE-2009-2411.md): Multiple integer overflows in the libsvn\_delta library in Subversion before 1.5.7, and 1.6.x before 1.6.4, allow remote authenticated users (no CVSS)
- [CVE-2008-6912](https://cve.now/CVE-2008-6912.md): Zeeways SHAADICLONE 2.0 allows remote attackers to bypass authentication and gain administrative privileges via a direct request to admin/ho (no CVSS)
- [CVE-2008-6913](https://cve.now/CVE-2008-6913.md): Unrestricted file upload vulnerability in editresume\_next.php in Zeeways ZEEJOBSITE 2.0 allows remote authenticated users to execute arbitra (no CVSS)
- [CVE-2008-6914](https://cve.now/CVE-2008-6914.md): Unrestricted file upload vulnerability in viewprofile.php in Zeeways ZEEPROPERTY 1.0 allows remote authenticated users to execute arbitrary (no CVSS)
- [CVE-2008-6915](https://cve.now/CVE-2008-6915.md): Cross-site scripting (XSS) vulnerability in view\_prop\_details.php in Zeeways ZEEPROPERTY 1.0 allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2008-6916](https://cve.now/CVE-2008-6916.md): Siemens SpeedStream 5200 with NetPort Software 1.1 allows remote attackers to bypass authentication via an invalid Host header, possibly inv (no CVSS)
- [CVE-2008-6917](https://cve.now/CVE-2008-6917.md): SQL injection vulnerability in admin.php in Exocrew ExoPHPDesk 1.2 Final allows remote attackers to execute arbitrary SQL commands via the u (no CVSS)
- [CVE-2009-2666](https://cve.now/CVE-2009-2666.md): socket.c in fetchmail before 6.3.11 does not properly handle a '\\0' character in a domain name in the subject's Common Name (CN) field of an (no CVSS)
- [CVE-2009-2711](https://cve.now/CVE-2009-2711.md): XScreenSaver in Sun Solaris 9 and 10, OpenSolaris before snv\_120, and X11 6.4.1 for Solaris 8, when the Xorg or Xnewt server is used, allows (no CVSS)
- [CVE-2009-2712](https://cve.now/CVE-2009-2712.md): Sun Java System Access Manager 6.3 2005Q1, 7.0 2005Q4, and 7.1; and OpenSSO Enterprise 8.0; when AMConfig.properties enables the debug flag, (no CVSS)
- [CVE-2009-2713](https://cve.now/CVE-2009-2713.md): The CDCServlet component in Sun Java System Access Manager 7.0 2005Q4 and 7.1, when Cross Domain Single Sign On (CDSSO) is enabled, does not (no CVSS)
- [CVE-2009-2714](https://cve.now/CVE-2009-2714.md): Unspecified vulnerability in Sun VirtualBox 3.0.0 and 3.0.2 allows guest OS users to cause a denial of service (host OS reboot) via unknown (no CVSS)
- [CVE-2009-2715](https://cve.now/CVE-2009-2715.md): Sun VirtualBox 2.2 through 3.0.2 r49928 allows guest OS users to cause a denial of service (Linux host OS reboot) via a sysenter instruction (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-08-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.