# CVEs published 2009-09-14

30 CVEs were published on September 14, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-2803](https://cve.now/CVE-2009-2803.md): CarbonCore in Apple Mac OS X 10.4.11 and 10.5.8 allows attackers to execute arbitrary code or cause a denial of service (memory corruption a (no CVSS)
- [CVE-2009-2804](https://cve.now/CVE-2009-2804.md): Integer overflow in ColorSync in Apple Mac OS X 10.4.11 and 10.5.8, and Safari before 4.0.4 on Windows, allows remote attackers to execute a (no CVSS)
- [CVE-2009-2805](https://cve.now/CVE-2009-2805.md): Integer overflow in CoreGraphics in Apple Mac OS X 10.4.11 and 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of (no CVSS)
- [CVE-2009-2807](https://cve.now/CVE-2009-2807.md): Heap-based buffer overflow in the USB backend in CUPS in Apple Mac OS X 10.5.8 allows local users to gain privileges via unspecified vectors (no CVSS)
- [CVE-2009-2809](https://cve.now/CVE-2009-2809.md): ImageIO in Apple Mac OS X 10.4.11 and 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (application cra (no CVSS)
- [CVE-2009-2811](https://cve.now/CVE-2009-2811.md): Incomplete blacklist vulnerability in Launch Services in Apple Mac OS X 10.5.8 allows user-assisted remote attackers to execute arbitrary co (no CVSS)
- [CVE-2009-2812](https://cve.now/CVE-2009-2812.md): Launch Services in Apple Mac OS X 10.5.8 does not properly recognize an unsafe Uniform Type Identifier (UTI) in an exported document type in (no CVSS)
- [CVE-2009-2813](https://cve.now/CVE-2009-2813.md): Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5. (no CVSS)
- [CVE-2009-2814](https://cve.now/CVE-2009-2814.md): Cross-site scripting (XSS) vulnerability in the Wiki Server in Apple Mac OS X 10.5.8 allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2009-2947](https://cve.now/CVE-2009-2947.md): Cross-site scripting (XSS) vulnerability in Xapian Omega before 1.0.16 allows remote attackers to inject arbitrary web script or HTML via un (no CVSS)
- [CVE-2009-3183](https://cve.now/CVE-2009-3183.md): Heap-based buffer overflow in w in Sun Solaris 8 through 10, and OpenSolaris before snv\_124, allows local users to gain privileges via unspe (no CVSS)
- [CVE-2008-7221](https://cve.now/CVE-2008-7221.md): Cross-site request forgery (CSRF) vulnerability in RunCMS 1.6.1 allows remote attackers to hijack the authentication of administrators for r (no CVSS)
- [CVE-2008-7222](https://cve.now/CVE-2008-7222.md): Cross-site scripting (XSS) vulnerability in system/admin.php in RunCMS 1.6.1 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2008-7223](https://cve.now/CVE-2008-7223.md): Multiple cross-site scripting (XSS) vulnerabilities in LinPHA before 1.3.3 allow remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2008-7224](https://cve.now/CVE-2008-7224.md): Buffer overflow in entity\_cache in ELinks before 0.11.4rc0 allows remote attackers to cause a denial of service (crash) via a crafted link. (no CVSS)
- [CVE-2008-7225](https://cve.now/CVE-2008-7225.md): Heap-based buffer overflow in Foxit Remote Access Server (aka WAC Server) 2.0 Build 3503 allows remote attackers to cause a denial of servic (no CVSS)
- [CVE-2008-7226](https://cve.now/CVE-2008-7226.md): SQL injection vulnerability in index.php in the Recipes module 1.3, 1.4, and possibly other versions for PHP-Nuke allows remote attackers to (no CVSS)
- [CVE-2008-7227](https://cve.now/CVE-2008-7227.md): PartialBufferOutputStream2 in GeoServer before 1.6.1 and 1.7.0-beta1 attempts to flush buffer contents even when it is handling an "in memor (no CVSS)
- [CVE-2008-7228](https://cve.now/CVE-2008-7228.md): Multiple format string vulnerabilities in White\_Dune before 0.29beta851 have unspecified impact and attack vectors, a different vulnerabilit (no CVSS)
- [CVE-2008-7229](https://cve.now/CVE-2008-7229.md): GreenSQL Firewall (greensql-fw) before 0.9.2 allows remote attackers to bypass SQL injection protection via a crafted string, possibly invol (no CVSS)
- [CVE-2008-7230](https://cve.now/CVE-2008-7230.md): Unspecified vulnerability in Small Footprint CIM Broker (SFCB) before 1.2.5 has unknown impact and attack vectors. (no CVSS)
- [CVE-2008-7231](https://cve.now/CVE-2008-7231.md): Cross-site scripting (XSS) vulnerability in Meridio Document and Records Management before 4.3 SR1 allows remote authenticated users to inje (no CVSS)
- [CVE-2008-7232](https://cve.now/CVE-2008-7232.md): Buffer overflow in the report function in xtacacsd 4.1.2 and earlier allows remote attackers to execute arbitrary code via a crafted CONNECT (no CVSS)
- [CVE-2008-7233](https://cve.now/CVE-2008-7233.md): Unspecified vulnerability in the E-Business Application client, as used in Oracle Application Server 1.1.8.26 and E-Business Suite 11.5.10.2 (no CVSS)
- [CVE-2008-7234](https://cve.now/CVE-2008-7234.md): Unspecified vulnerability in the Oracle BPEL Worklist Application component in Oracle Application Server 10.1.2.2 and 10.1.3.3 allows remote (no CVSS)
- [CVE-2008-7235](https://cve.now/CVE-2008-7235.md): Unspecified vulnerability in the Oracle Forms component in Oracle Application Server 10.1.2.2 and E-Business Suite 12.0.3 allows remote atta (no CVSS)
- [CVE-2008-7236](https://cve.now/CVE-2008-7236.md): Unspecified vulnerability in the Oracle JDeveloper component in Oracle Application Server 10.1.2.2 and 10.1.3.1 allows remote attackers to a (no CVSS)
- [CVE-2008-7237](https://cve.now/CVE-2008-7237.md): Unspecified vulnerability in the Oracle Internet Directory component in Oracle Application Server 9.0.4.3 and 10.1.2.2 allows remote authent (no CVSS)
- [CVE-2008-7238](https://cve.now/CVE-2008-7238.md): Multiple unspecified vulnerabilities in Oracle E-Business Suite 12.0.3 allow (1) local users to affect confidentiality and integrity via unk (no CVSS)
- [CVE-2008-7239](https://cve.now/CVE-2008-7239.md): Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10.2 allow remote attackers to affect confidentiality via unknown vecto (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-09-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.