# CVEs published 2009-08-20

22 CVEs were published on August 20, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-0638](https://cve.now/CVE-2009-0638.md): The Cisco Firewall Services Module (FWSM) 2.x, 3.1 before 3.1(16), 3.2 before 3.2(13), and 4.0 before 4.0(6) for Cisco Catalyst 6500 switche (no CVSS)
- [CVE-2009-2694](https://cve.now/CVE-2009-2694.md): The msn\_slplink\_process\_msg function in libpurple/protocols/msn/slplink.c in libpurple, as used in Pidgin (formerly Gaim) before 2.5.9 and A (no CVSS)
- [CVE-2009-2732](https://cve.now/CVE-2009-2732.md): The checkHTTPpassword function in http.c in ntop 3.3.10 and earlier allows remote attackers to cause a denial of service (NULL pointer deref (no CVSS)
- [CVE-2009-2912](https://cve.now/CVE-2009-2912.md): The (1) sendfile and (2) sendfilev functions in Sun Solaris 8 through 10, and OpenSolaris before snv\_110, allow local users to cause a denia (no CVSS)
- [CVE-2009-2913](https://cve.now/CVE-2009-2913.md): Cross-site scripting (XSS) vulnerability in index.php in XZero Community Classifieds 4.97.8 allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2009-2914](https://cve.now/CVE-2009-2914.md): Cross-site scripting (XSS) vulnerability in index.php in XZero Community Classifieds 4.97.8 and earlier allows remote attackers to inject ar (no CVSS)
- [CVE-2009-2881](https://cve.now/CVE-2009-2881.md): Multiple SQL injection vulnerabilities in Basilic 1.5.13 allow remote attackers to execute arbitrary SQL commands via the idAuthor parameter (no CVSS)
- [CVE-2009-2882](https://cve.now/CVE-2009-2882.md): Multiple cross-site scripting (XSS) vulnerabilities in PG MatchMaking allow remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2009-2883](https://cve.now/CVE-2009-2883.md): SQL injection vulnerability in admin/login.php in SaphpLesson 4.0, when magic\_quotes\_gpc is disabled, allows remote attackers to execute arb (no CVSS)
- [CVE-2009-2884](https://cve.now/CVE-2009-2884.md): Cross-site scripting (XSS) vulnerability in bios.php in PHP Scripts Now World's Tallest Buildings allows remote attackers to inject arbitrar (no CVSS)
- [CVE-2009-2885](https://cve.now/CVE-2009-2885.md): SQL injection vulnerability in bios.php in PHP Scripts Now World's Tallest Buildings allows remote attackers to execute arbitrary SQL comman (no CVSS)
- [CVE-2009-2886](https://cve.now/CVE-2009-2886.md): SQL injection vulnerability in bios.php in PHP Scripts Now President Bios allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2009-2887](https://cve.now/CVE-2009-2887.md): Cross-site scripting (XSS) vulnerability in bios.php in PHP Scripts Now President Bios allows remote attackers to inject arbitrary web scrip (no CVSS)
- [CVE-2009-2888](https://cve.now/CVE-2009-2888.md): SQL injection vulnerability in index.php in PHP Scripts Now Hangman allows remote attackers to execute arbitrary SQL commands via the n para (no CVSS)
- [CVE-2009-2889](https://cve.now/CVE-2009-2889.md): Cross-site scripting (XSS) vulnerability in index.php in PHP Scripts Now Hangman allows remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2009-2890](https://cve.now/CVE-2009-2890.md): Cross-site scripting (XSS) vulnerability in results.php in PHP Scripts Now Riddles allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2009-2891](https://cve.now/CVE-2009-2891.md): SQL injection vulnerability in list.php in PHP Scripts Now Riddles allows remote attackers to execute arbitrary SQL commands via the catid p (no CVSS)
- [CVE-2009-2892](https://cve.now/CVE-2009-2892.md): Multiple SQL injection vulnerabilities in header.php in Scripteen Free Image Hosting Script 2.3 allow remote attackers to execute arbitrary (no CVSS)
- [CVE-2009-2893](https://cve.now/CVE-2009-2893.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in XZero Community Classifieds 4.97.8 allow remote attackers to inject arbi (no CVSS)
- [CVE-2009-2894](https://cve.now/CVE-2009-2894.md): Multiple SQL injection vulnerabilities in Ebay Clone 2009 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter (no CVSS)
- [CVE-2009-2895](https://cve.now/CVE-2009-2895.md): SQL injection vulnerability in rss.php in Ultimate Regnow Affiliate (URA) 3.0 allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2009-2896](https://cve.now/CVE-2009-2896.md): Buffer overflow in KMplayer 2.9.4.1433 and earlier allows remote attackers to cause a denial of service (application crash) or execute arbit (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-08-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.