# CVEs published 2009-09-02 20 CVEs were published on September 2, 2009: 0 critical, 0 high. Days are UTC. - [CVE-2008-7153](https://cve.now/CVE-2008-7153.md): SQL injection vulnerability in the autoDetectRegion function in doceboCore/lib/lib.regset.php in Docebo 3.5.0.3 and earlier allows remote at (no CVSS) - [CVE-2008-7154](https://cve.now/CVE-2008-7154.md): Docebo 3.5.0.3 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) class/class.conf\_fw.php, (2) (no CVSS) - [CVE-2008-7155](https://cve.now/CVE-2008-7155.md): NetRisk 1.9.7 does not properly restrict access to admin/change\_submit.php, which allows remote attackers to change the password of arbitrar (no CVSS) - [CVE-2008-7156](https://cve.now/CVE-2008-7156.md): EkinBoard 1.1.0 and earlier, when register\_globals is enabled, allows remote attackers to bypass authorization and gain administrator privil (no CVSS) - [CVE-2008-7157](https://cve.now/CVE-2008-7157.md): Unrestricted file upload vulnerability in EkinBoard 1.1.0 and earlier allows remote attackers to execute arbitrary code by uploading an avat (no CVSS) - [CVE-2008-7158](https://cve.now/CVE-2008-7158.md): Numara FootPrints 7.5a through 7.5a1 and 8.0 through 8.0a allows remote attackers to execute arbitrary commands via shell metacharacters in (no CVSS) - [CVE-2009-0200](https://cve.now/CVE-2009-0200.md): Integer underflow in OpenOffice.org (OOo) before 3.1.1 and StarOffice/StarSuite 7, 8, and 9 might allow remote attackers to execute arbitrar (no CVSS) - [CVE-2009-0201](https://cve.now/CVE-2009-0201.md): Heap-based buffer overflow in OpenOffice.org (OOo) before 3.1.1 and StarOffice/StarSuite 7, 8, and 9 might allow remote attackers to execute (no CVSS) - [CVE-2009-2700](https://cve.now/CVE-2009-2700.md): src/network/ssl/qsslcertificate.cpp in Nokia Trolltech Qt 4.x does not properly handle a '\\0' character in a domain name in the Subject Alte (no CVSS) - [CVE-2009-2968](https://cve.now/CVE-2009-2968.md): Directory traversal vulnerability in a support component in the web interface in VMware Studio 2.0 public beta before build 1017-185256 allo (no CVSS) - [CVE-2009-3043](https://cve.now/CVE-2009-3043.md): The tty\_ldisc\_hangup function in drivers/char/tty\_ldisc.c in the Linux kernel 2.6.31-rc before 2.6.31-rc8 allows local users to cause a deni (no CVSS) - [CVE-2009-3044](https://cve.now/CVE-2009-3044.md): Opera before 10.00 does not properly handle a (1) '\\0' character or (2) invalid wildcard character in a domain name in the subject's Common (no CVSS) - [CVE-2009-3045](https://cve.now/CVE-2009-3045.md): Opera before 10.00 trusts root X.509 certificates signed with the MD2 algorithm, which makes it easier for man-in-the-middle attackers to sp (no CVSS) - [CVE-2009-3046](https://cve.now/CVE-2009-3046.md): Opera before 10.00 does not check all intermediate X.509 certificates for revocation, which makes it easier for remote SSL servers to bypass (no CVSS) - [CVE-2009-3047](https://cve.now/CVE-2009-3047.md): Opera before 10.00, when a collapsed address bar is used, does not properly update the domain name from the previously visited site to the c (no CVSS) - [CVE-2009-3048](https://cve.now/CVE-2009-3048.md): Opera before 10.00 on Linux, Solaris, and FreeBSD does not properly implement the "INPUT TYPE=file" functionality, which allows remote attac (no CVSS) - [CVE-2009-3049](https://cve.now/CVE-2009-3049.md): Opera before 10.00 does not properly display all characters in Internationalized Domain Names (IDN) in the address bar, which allows remote (no CVSS) - [CVE-2009-3050](https://cve.now/CVE-2009-3050.md): Buffer overflow in the set\_page\_size function in util.cxx in HTMLDOC 1.8.27 and earlier allows context-dependent attackers to execute arbitr (no CVSS) - [CVE-2009-2957](https://cve.now/CVE-2009-2957.md): Heap-based buffer overflow in the tftp\_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, might allow remote att (no CVSS) - [CVE-2009-2958](https://cve.now/CVE-2009-2958.md): The tftp\_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, allows remote attackers to cause a denial of service (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2009-09-02 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.