# CVEs published 2009-09-10

55 CVEs were published on September 10, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-3164](https://cve.now/CVE-2009-3164.md): Unspecified vulnerability in the IPv6 networking stack in Sun Solaris 10, and OpenSolaris snv\_01 through snv\_82 and snv\_111 through snv\_122, (no CVSS)
- [CVE-2008-7159](https://cve.now/CVE-2008-7159.md): The silc\_asn1\_encoder function in lib/silcasn1/silcasn1\_encode.c in Secure Internet Live Conferencing (SILC) Toolkit before 1.1.8 allows rem (no CVSS)
- [CVE-2008-7160](https://cve.now/CVE-2008-7160.md): The silc\_http\_server\_parse function in lib/silchttp/silchttpserver.c in the internal HTTP server in silcd in Secure Internet Live Conferenci (no CVSS)
- [CVE-2009-2202](https://cve.now/CVE-2009-2202.md): Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and applicati (no CVSS)
- [CVE-2009-2203](https://cve.now/CVE-2009-2203.md): Buffer overflow in Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (application (no CVSS)
- [CVE-2009-2206](https://cve.now/CVE-2009-2206.md): Multiple heap-based buffer overflows in the AudioCodecs library in the CoreAudio component in Apple iPhone OS before 3.1, and iPhone OS befo (no CVSS)
- [CVE-2009-2207](https://cve.now/CVE-2009-2207.md): The MobileMail component in Apple iPhone OS 3.0 and 3.0.1, and iPhone OS 3.0 for iPod touch, lists deleted e-mail messages in Spotlight sear (no CVSS)
- [CVE-2009-2794](https://cve.now/CVE-2009-2794.md): The Exchange Support component in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, does not properly implement the "Ma (no CVSS)
- [CVE-2009-2795](https://cve.now/CVE-2009-2795.md): Heap-based buffer overflow in the Recovery Mode component in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, allows l (no CVSS)
- [CVE-2009-2796](https://cve.now/CVE-2009-2796.md): The UIKit component in Apple iPhone OS 3.0, and iPhone OS 3.0.1 for iPod touch, allows physically proximate attackers to discover a password (no CVSS)
- [CVE-2009-2797](https://cve.now/CVE-2009-2797.md): The WebKit component in Safari in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, does not remove usernames and passw (no CVSS)
- [CVE-2009-2798](https://cve.now/CVE-2009-2798.md): Heap-based buffer overflow in Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (a (no CVSS)
- [CVE-2009-2799](https://cve.now/CVE-2009-2799.md): Heap-based buffer overflow in Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (a (no CVSS)
- [CVE-2009-2815](https://cve.now/CVE-2009-2815.md): The Telephony component in Apple iPhone OS before 3.1 does not properly handle SMS arrival notifications, which allows remote attackers to c (no CVSS)
- [CVE-2009-3069](https://cve.now/CVE-2009-3069.md): Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.3 allows remote attackers to cause a denial of service ( (no CVSS)
- [CVE-2009-3070](https://cve.now/CVE-2009-3070.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 allow remote attackers to cause a denial of serv (no CVSS)
- [CVE-2009-3071](https://cve.now/CVE-2009-3071.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.2, allow remote attackers (no CVSS)
- [CVE-2009-3072](https://cve.now/CVE-2009-3072.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.3, Thunderbird before 2.0.0 (no CVSS)
- [CVE-2009-3073](https://cve.now/CVE-2009-3073.md): Unspecified vulnerability in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.3 allows remote attackers to cause a denial of servic (no CVSS)
- [CVE-2009-3074](https://cve.now/CVE-2009-3074.md): Unspecified vulnerability in the JavaScript engine in Mozilla Firefox before 3.0.14 allows remote attackers to cause a denial of service (me (no CVSS)
- [CVE-2009-3075](https://cve.now/CVE-2009-3075.md): Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.2, Thunderbird before 2. (no CVSS)
- [CVE-2009-3076](https://cve.now/CVE-2009-3076.md): Mozilla Firefox before 3.0.14 does not properly implement certain dialogs associated with the (1) pkcs11.addmodule and (2) pkcs11.deletemodu (no CVSS)
- [CVE-2009-3077](https://cve.now/CVE-2009-3077.md): Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, does not properly manage pointers for the columns (aka TreeColumns) of a XUL tree ele (no CVSS)
- [CVE-2009-3078](https://cve.now/CVE-2009-3078.md): Visual truncation vulnerability in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, allows remote attackers to trigger a vertical scro (no CVSS)
- [CVE-2009-3079](https://cve.now/CVE-2009-3079.md): Unspecified vulnerability in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, allows remote attackers to execute arbitrary JavaScript (no CVSS)
- [CVE-2009-3163](https://cve.now/CVE-2009-3163.md): Multiple format string vulnerabilities in lib/silcclient/command.c in Secure Internet Live Conferencing (SILC) Toolkit before 1.1.10, and SI (no CVSS)
- [CVE-2009-3051](https://cve.now/CVE-2009-3051.md): Multiple format string vulnerabilities in lib/silcclient/client\_entry.c in Secure Internet Live Conferencing (SILC) Toolkit before 1.1.10, a (no CVSS)
- [CVE-2009-3146](https://cve.now/CVE-2009-3146.md): Cross-site scripting (XSS) vulnerability in search\_advance.php in ArticleFriend Script allows remote attackers to inject arbitrary web scrip (no CVSS)
- [CVE-2009-3147](https://cve.now/CVE-2009-3147.md): Cross-site scripting (XSS) vulnerability in showproduct.php in ReviewPost Pro vB3 allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2009-3148](https://cve.now/CVE-2009-3148.md): Multiple SQL injection vulnerabilities in PortalXP Teacher Edition 1.2 allow remote attackers to execute arbitrary SQL commands via the id p (no CVSS)
- [CVE-2009-3149](https://cve.now/CVE-2009-3149.md): Directory traversal vulnerability in \_css/js.php in Elgg 1.5, when magic\_quotes\_gpc is disabled, allows remote attackers to read arbitrary f (no CVSS)
- [CVE-2009-3150](https://cve.now/CVE-2009-3150.md): SQL injection vulnerability in index.php in Multi Website 1.5 allows remote attackers to execute arbitrary SQL commands via the Browse param (no CVSS)
- [CVE-2009-3151](https://cve.now/CVE-2009-3151.md): Directory traversal vulnerability in actions/downloadFile.php in Ultrize TimeSheet 1.2.2 allows remote attackers to read arbitrary files via (no CVSS)
- [CVE-2009-3152](https://cve.now/CVE-2009-3152.md): Multiple cross-site scripting (XSS) vulnerabilities in becommunity/community/index.php in NTSOFT BBS E-Market Professional allow remote atta (no CVSS)
- [CVE-2009-3153](https://cve.now/CVE-2009-3153.md): Multiple cross-site scripting (XSS) vulnerabilities in x10 MP3 Search engine 1.6.5 allow remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2009-3154](https://cve.now/CVE-2009-3154.md): SQL injection vulnerability in the Almond Classifieds (com\_aclassf) component 7.5 for Joomla! allows remote attackers to execute arbitrary S (no CVSS)
- [CVE-2009-3155](https://cve.now/CVE-2009-3155.md): Cross-site scripting (XSS) vulnerability in gmap.php in the Almond Classifieds (com\_aclassf) component 7.5 for Joomla! allows remote attacke (no CVSS)
- [CVE-2009-3156](https://cve.now/CVE-2009-3156.md): Cross-site scripting (XSS) vulnerability in the Date Tools sub-module in the Date module 6.x before 6.x-2.3 for Drupal allows remote authent (no CVSS)
- [CVE-2009-3157](https://cve.now/CVE-2009-3157.md): Cross-site scripting (XSS) vulnerability in the Calendar module 6.x before 6.x-2.2 for Drupal allows remote authenticated users, with "creat (no CVSS)
- [CVE-2009-3158](https://cve.now/CVE-2009-3158.md): admin/files.php in simplePHPWeb 0.2 does not require authentication, which allows remote attackers to perform unspecified administrative act (no CVSS)
- [CVE-2009-3159](https://cve.now/CVE-2009-3159.md): Unspecified vulnerability in the rriDecompress function in IBM WebSphere MQ 7.0.0.0, 7.0.0.1, and 7.0.0.2 allows remote attackers to cause a (no CVSS)
- [CVE-2009-3160](https://cve.now/CVE-2009-3160.md): IBM WebSphere MQ 6.x through 6.0.2.7, 7.0.0.0, 7.0.0.1, 7.0.0.2, and 7.0.1.0, when read ahead or asynchronous message consumption is enabled (no CVSS)
- [CVE-2009-3161](https://cve.now/CVE-2009-3161.md): The server in IBM WebSphere MQ 7.0.0.1, 7.0.0.2, and 7.0.1.0 allows attackers to cause a denial of service (trap) or possibly have unspecifi (no CVSS)
- [CVE-2009-3162](https://cve.now/CVE-2009-3162.md): Cross-site scripting (XSS) vulnerability in Multi Website 1.5 allows remote attackers to inject arbitrary web script or HTML via the search (no CVSS)
- [CVE-2007-6729](https://cve.now/CVE-2007-6729.md): Cross-site scripting (XSS) vulnerability in the web management interface in the ZyXEL P-330W router allows remote attackers to inject arbitr (no CVSS)
- [CVE-2007-6730](https://cve.now/CVE-2007-6730.md): Multiple cross-site request forgery (CSRF) vulnerabilities in the web management interface in the ZyXEL P-330W router allow remote attackers (no CVSS)
- [CVE-2008-7194](https://cve.now/CVE-2008-7194.md): Unspecified vulnerability in Fujitsu Interstage HTTP Server, as used in Interstage Application Server 5.0, 7.0, 7.0.1, and 8.0.0 for Windows (no CVSS)
- [CVE-2008-7195](https://cve.now/CVE-2008-7195.md): Unspecified vulnerability in Fujitsu Interstage HTTP Server, as used in Interstage Application Server Enterprise Edition 7.0.1 for Solaris, (no CVSS)
- [CVE-2008-7196](https://cve.now/CVE-2008-7196.md): Unspecified vulnerability in metashell before 0.03 has unknown impact and attack vectors related to a "PATH execution security flaw," possib (no CVSS)
- [CVE-2008-7197](https://cve.now/CVE-2008-7197.md): Multiple unspecified vulnerabilities in G15Daemon before 1.9.4 have unknown impact and attack vectors. (no CVSS)
- [CVE-2008-7198](https://cve.now/CVE-2008-7198.md): Multiple unspecified vulnerabilities in phpns before 2.1.1beta1 have unknown impact and attack vectors. (no CVSS)
- [CVE-2008-7199](https://cve.now/CVE-2008-7199.md): Phoenix Contact FL IL 24 BK-PAC allows remote attackers to cause a denial of service (hang) via (1) unspecified manipulations as demonstrate (no CVSS)
- [CVE-2008-7200](https://cve.now/CVE-2008-7200.md): Double free vulnerability in Deliantra server engine before 2.4 has unknown impact and attack vectors. (no CVSS)
- [CVE-2008-7201](https://cve.now/CVE-2008-7201.md): Lantronix MSS485-T allows remote attackers to cause a denial of service (unstable performance and service loss) via certain vulnerability sc (no CVSS)
- [CVE-2008-7202](https://cve.now/CVE-2008-7202.md): Multiple cross-site scripting (XSS) vulnerabilities in OpenWebMail before 2.53 (Stable) allow remote attackers to inject arbitrary web scrip (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-09-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.