# CVEs published 2009-09-04

12 CVEs were published on September 4, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-2697](https://cve.now/CVE-2009-2697.md): The Red Hat build script for the GNOME Display Manager (GDM) before 2.16.0-56 on Red Hat Enterprise Linux (RHEL) 5 omits TCP Wrapper support (no CVSS)
- [CVE-2009-2946](https://cve.now/CVE-2009-2946.md): Eval injection vulnerability in scripts/uscan.pl before Rev 1984 in devscripts allows remote attackers to execute arbitrary Perl code via cr (no CVSS)
- [CVE-2009-3081](https://cve.now/CVE-2009-3081.md): SQL injection vulnerability in index.php in Uiga Church Portal allows remote attackers to execute arbitrary SQL commands via the month param (no CVSS)
- [CVE-2009-3082](https://cve.now/CVE-2009-3082.md): SQL injection vulnerability in wcategory.php in Snow Hall Silurus System 1.0 allows remote attackers to execute arbitrary SQL commands via t (no CVSS)
- [CVE-2009-3068](https://cve.now/CVE-2009-3068.md): Unrestricted file upload vulnerability in the RoboHelpServer Servlet (robohelp/server) in Adobe RoboHelp Server 8 allows remote attackers to (no CVSS)
- [CVE-2008-7161](https://cve.now/CVE-2008-7161.md): Fortinet FortiGuard Fortinet FortiGate-1000 3.00 build 040075,070111 allows remote attackers to bypass URL filtering via fragmented GET or P (no CVSS)
- [CVE-2008-7162](https://cve.now/CVE-2008-7162.md): Buffer overflow in Hero Super Player 3000 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code v (no CVSS)
- [CVE-2008-7163](https://cve.now/CVE-2008-7163.md): Directory traversal vulnerability in mods/Integrated/index.php in SineCMS 2.3.5 and earlier, when register\_globals is enabled, allows remote (no CVSS)
- [CVE-2008-7164](https://cve.now/CVE-2008-7164.md): Multiple unspecified vulnerabilities in Shareaza before 2.3.1.0 have unknown impact and attack vectors related to "very important security f (no CVSS)
- [CVE-2008-7165](https://cve.now/CVE-2008-7165.md): Cross-site request forgery in cp06\_wifi\_m\_nocifr.cgi in the administrator panel in TELECOM ITALIA Alice Gate2 Plus Wi-Fi allows remote attac (no CVSS)
- [CVE-2008-7166](https://cve.now/CVE-2008-7166.md): Buffer overflow in the web interface in BitTorrent 6.0.1 (build 7859) and earlier, and uTorrent 1.7.6 (build 7859) and earlier, allows remot (no CVSS)
- [CVE-2009-2521](https://cve.now/CVE-2009-2521.md): Stack consumption vulnerability in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 7.0 allows remote authentica (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-09-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.