# CVEs published 2009-08-19

21 CVEs were published on August 19, 2009: 0 critical, 0 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2009-0682](https://cve.now/CVE-2009-0682.md): vetmonnt.sys in CA Internet Security Suite r3, vetmonnt.sys before 9.0.0.184 in Internet Security Suite r4, and vetmonnt.sys before 10.0.0.2 (no CVSS)
- [CVE-2009-1884](https://cve.now/CVE-2009-1884.md): Off-by-one error in the bzinflate function in Bzip2.xs in the Compress-Raw-Bzip2 module before 2.018 for Perl allows context-dependent attac (no CVSS)
- [CVE-2009-2055](https://cve.now/CVE-2009-2055.md): Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service (session reset) via a BGP UPDATE message with an inval (CVSS 5.9, KEV)
- [CVE-2009-2627](https://cve.now/CVE-2009-2627.md): Insecure method vulnerability in the Acer LunchApp (aka AcerCtrls.APlunch) ActiveX control in acerctrl.ocx allows remote attackers to execut (no CVSS)
- [CVE-2009-2740](https://cve.now/CVE-2009-2740.md): kmxIds.sys before 7.3.1.18 in CA Host-Based Intrusion Prevention System (HIPS) 8.1 allows remote attackers to cause a denial of service (sys (no CVSS)
- [CVE-2009-2857](https://cve.now/CVE-2009-2857.md): The kernel in Sun Solaris 8, 9, and 10, and OpenSolaris before snv\_103, does not properly handle interaction between the filesystem and virt (CVSS 5.5)
- [CVE-2009-2858](https://cve.now/CVE-2009-2858.md): Memory leak in the Security component in IBM DB2 8.1 before FP18 on Unix platforms allows attackers to cause a denial of service (memory con (no CVSS)
- [CVE-2009-2859](https://cve.now/CVE-2009-2859.md): IBM DB2 8.1 before FP18 allows attackers to obtain unspecified access via a das command. (no CVSS)
- [CVE-2009-2860](https://cve.now/CVE-2009-2860.md): Unspecified vulnerability in db2jds in IBM DB2 8.1 before FP18 allows remote attackers to cause a denial of service (service crash) via "mal (no CVSS)
- [CVE-2008-7004](https://cve.now/CVE-2008-7004.md): Buffer overflow in Electronic Logbook (ELOG) before 2.7.1 has unknown impact and attack vectors, possibly related to elog.c. (no CVSS)
- [CVE-2008-7005](https://cve.now/CVE-2008-7005.md): include/modules/top/1-random\_quote.php in Minb Is Not a Blog (minb) 0.1.0 allows remote attackers to execute arbitrary PHP code via the quot (no CVSS)
- [CVE-2008-7006](https://cve.now/CVE-2008-7006.md): Free PHP VX Guestbook 1.06 allows remote attackers to bypass authentication and download a backup of the database via a direct request to ad (no CVSS)
- [CVE-2008-7007](https://cve.now/CVE-2008-7007.md): Free PHP VX Guestbook 1.06 allows remote attackers to bypass authentication and gain administrative access by setting the (1) admin\_name and (no CVSS)
- [CVE-2008-7008](https://cve.now/CVE-2008-7008.md): HyperStop Web Host Directory 1.2 allows remote attackers to bypass authentication and download a database backup via a direct request to adm (no CVSS)
- [CVE-2008-7009](https://cve.now/CVE-2008-7009.md): Buffer overflow in multiscan.exe in Check Point ZoneAlarm Security Suite 7.0.483.000 and 8.0.020.000 allows local users to execute arbitrary (no CVSS)
- [CVE-2008-7010](https://cve.now/CVE-2008-7010.md): Skalfa Software SkaLinks Exchange Script 1.5 allows remote attackers to add new administrators and gain privileges via a direct request to a (no CVSS)
- [CVE-2008-7011](https://cve.now/CVE-2008-7011.md): The Unreal engine, as used in Unreal Tournament 3 1.3, Unreal Tournament 2003 and 2004, Dead Man's Hand, Pariah, WarPath, Postal2, and Shado (no CVSS)
- [CVE-2008-7012](https://cve.now/CVE-2008-7012.md): courier/1000@/api\_error\_email.html (aka "error reporting page") in Accellion File Transfer Appliance FTA\_7\_0\_178, and possibly other version (no CVSS)
- [CVE-2008-7013](https://cve.now/CVE-2008-7013.md): NetService.dll in Baidu Hi IM allows remote servers to cause a denial of service (client crash) via a crafted login response that triggers a (no CVSS)
- [CVE-2008-7014](https://cve.now/CVE-2008-7014.md): fhttpd 0.4.2 allows remote attackers to cause a denial of service (crash) via an Authorization HTTP header with an invalid character after t (no CVSS)
- [CVE-2008-7015](https://cve.now/CVE-2008-7015.md): Unreal engine 3, as used in Unreal Tournament 3 1.3, Frontlines: Fuel of War 1.1.1, and other products, allows remote attackers to cause a d (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-08-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.