# CVEs published 2009-08-10

27 CVEs were published on August 10, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-2727](https://cve.now/CVE-2009-2727.md): Stack-based buffer overflow in the \_tt\_internal\_realpath function in the ToolTalk library (libtt.a) in IBM AIX 5.2.0, 5.3.0, 5.3.7 through 5 (no CVSS)
- [CVE-2008-6924](https://cve.now/CVE-2008-6924.md): Multiple cross-site scripting (XSS) vulnerabilities in register.php in eSyndiCat Directory 2.2 allow remote attackers to inject arbitrary we (no CVSS)
- [CVE-2008-6925](https://cve.now/CVE-2008-6925.md): Cross-site scripting (XSS) vulnerability in function.php in Zenphoto 1.1.7 allows remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2008-6926](https://cve.now/CVE-2008-6926.md): Directory traversal vulnerability in autoinstall4imagesgalleryupgrade.php in the Fantastico De Luxe Module for cPanel allows remote attacker (no CVSS)
- [CVE-2008-6927](https://cve.now/CVE-2008-6927.md): Multiple cross-site scripting (XSS) vulnerabilities in autoinstall4imagesgalleryupgrade.php in the Fantastico De Luxe Module for cPanel allo (no CVSS)
- [CVE-2009-2716](https://cve.now/CVE-2009-2716.md): The plugin functionality in Sun Java SE 6 before Update 15 does not properly implement version selection, which allows context-dependent att (no CVSS)
- [CVE-2009-2717](https://cve.now/CVE-2009-2717.md): The Abstract Window Toolkit (AWT) implementation in Sun Java SE 6 before Update 15 on Windows 2000 Professional does not provide a Security (no CVSS)
- [CVE-2009-2718](https://cve.now/CVE-2009-2718.md): The Abstract Window Toolkit (AWT) implementation in Sun Java SE 6 before Update 15 on X11 does not impose the intended constraint on distanc (no CVSS)
- [CVE-2009-2719](https://cve.now/CVE-2009-2719.md): The Java Web Start implementation in Sun Java SE 6 before Update 15 allows context-dependent attackers to cause a denial of service (NullPoi (no CVSS)
- [CVE-2009-2720](https://cve.now/CVE-2009-2720.md): Unspecified vulnerability in the javax.swing.plaf.synth.SynthContext.isSubregion method in the Swing implementation in Sun Java SE 6 before (no CVSS)
- [CVE-2009-2721](https://cve.now/CVE-2009-2721.md): Multiple unspecified vulnerabilities in the Provider class in Sun Java SE 5.0 before Update 20 have unknown impact and attack vectors, aka B (no CVSS)
- [CVE-2009-2722](https://cve.now/CVE-2009-2722.md): Multiple unspecified vulnerabilities in the Provider class in Sun Java SE 5.0 before Update 20 have unknown impact and attack vectors, aka B (no CVSS)
- [CVE-2009-2723](https://cve.now/CVE-2009-2723.md): Unspecified vulnerability in deserialization in the Provider class in Sun Java SE 5.0 before Update 20 has unknown impact and attack vectors (no CVSS)
- [CVE-2009-2724](https://cve.now/CVE-2009-2724.md): Race condition in the java.lang package in Sun Java SE 5.0 before Update 20 has unknown impact and attack vectors, related to a "3Y Race con (no CVSS)
- [CVE-2008-6922](https://cve.now/CVE-2008-6922.md): Multiple stack-based buffer overflows in CMailCOM.dll in CMailServer 5.4.6 allow remote attackers to execute arbitrary code via a long argum (no CVSS)
- [CVE-2008-6923](https://cve.now/CVE-2008-6923.md): SQL injection vulnerability in the content component (com\_content) 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL comman (no CVSS)
- [CVE-2009-1896](https://cve.now/CVE-2009-1896.md): The Java Web Start framework in IcedTea in OpenJDK before 1.6.0.0-20.b16.fc10 on Fedora 10, and before 1.6.0.0-27.b16.fc11 on Fedora 11, tru (no CVSS)
- [CVE-2009-2026](https://cve.now/CVE-2009-2026.md): Stack-based buffer overflow in a token searching function in the dtscore library in Data Transport Services in CA Software Delivery r11.2 C1 (no CVSS)
- [CVE-2009-2415](https://cve.now/CVE-2009-2415.md): Multiple integer overflows in memcached 1.1.12 and 1.2.2 allow remote attackers to execute arbitrary code via vectors involving length attri (no CVSS)
- [CVE-2009-2475](https://cve.now/CVE-2009-2475.md): Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, might allow context-dependent attackers to obtain sensitive informatio (no CVSS)
- [CVE-2009-2476](https://cve.now/CVE-2009-2476.md): The Java Management Extensions (JMX) implementation in Sun Java SE 6 before Update 15, and OpenJDK, does not properly enforce OpenType check (no CVSS)
- [CVE-2009-2689](https://cve.now/CVE-2009-2689.md): JDK13Services.getProviders in Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, grants full privileges to instances of u (no CVSS)
- [CVE-2009-2690](https://cve.now/CVE-2009-2690.md): The encoder in Sun Java SE 6 before Update 15, and OpenJDK, grants read access to private variables with unspecified names, which allows con (no CVSS)
- [CVE-2008-6918](https://cve.now/CVE-2008-6918.md): Unrestricted file upload vulnerability in admin/galeria.php in ThePortal2 2.2 allows remote attackers to execute arbitrary PHP code by uploa (no CVSS)
- [CVE-2008-6919](https://cve.now/CVE-2008-6919.md): profileedit.php TaskDriver 1.3 and earlier allows remote attackers to bypass authentication and gain administrative access by setting the au (no CVSS)
- [CVE-2008-6920](https://cve.now/CVE-2008-6920.md): Unrestricted file upload vulnerability in auth.php in phpEmployment 1.8 allows remote attackers to execute arbitrary code by uploading a fil (no CVSS)
- [CVE-2008-6921](https://cve.now/CVE-2008-6921.md): Unrestricted file upload vulnerability in index.php in phpAdBoard 1.8 allows remote attackers to execute arbitrary code by uploading a file (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-08-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.