# CVEs published 2009-09-17

13 CVEs were published on September 17, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2008-7240](https://cve.now/CVE-2008-7240.md): Directory traversal vulnerability in include/unverified.inc.php in Linux Web Shop (LWS) php User Base 1.3beta allows remote attackers to inc (no CVSS)
- [CVE-2008-7241](https://cve.now/CVE-2008-7241.md): Cross-site request forgery (CSRF) vulnerability in PunBB before 1.2.17 allows remote attackers to hijack the authentication of unspecified u (no CVSS)
- [CVE-2008-7242](https://cve.now/CVE-2008-7242.md): Multiple cross-site scripting (XSS) vulnerabilities in MODx CMS 0.9.6.1 and 0.9.6.1p1 allo remote attackers to inject arbitrary web script o (no CVSS)
- [CVE-2008-7243](https://cve.now/CVE-2008-7243.md): Cross-site request forgery (CSRF) vulnerability in page 34 in MODx CMS 0.9.6.1 and 0.9.6.1p1 allows remote attackers to hijack the authentic (no CVSS)
- [CVE-2009-3229](https://cve.now/CVE-2009-3229.md): The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, and 8.2 before 8.2.14 allows remote authenticated users to cause (no CVSS)
- [CVE-2009-3230](https://cve.now/CVE-2009-3230.md): The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, 8.2 before 8.2.14, 8.1 before 8.1.18, 8.0 before 8.0.22, and 7.4 (no CVSS)
- [CVE-2009-3231](https://cve.now/CVE-2009-3231.md): The core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP authentication with anonymous binds, allows (no CVSS)
- [CVE-2009-3232](https://cve.now/CVE-2009-3232.md): pam-auth-update for PAM, as used in Ubuntu 8.10 and 9.4, and Debian GNU/Linux, does not properly handle an "empty selection" for system auth (no CVSS)
- [CVE-2009-3233](https://cve.now/CVE-2009-3233.md): changetrack 4.3 allows local users to execute arbitrary commands via CRLF sequences and shell metacharacters in a filename in a directory th (no CVSS)
- [CVE-2009-3234](https://cve.now/CVE-2009-3234.md): Buffer overflow in the perf\_copy\_attr function in kernel/perf\_counter.c in the Linux kernel 2.6.31-rc1 allows local users to cause a denial (no CVSS)
- [CVE-2009-3235](https://cve.now/CVE-2009-3235.md): Multiple stack-based buffer overflows in the Sieve plugin in Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, as derived from Cyrus libsieve, (no CVSS)
- [CVE-2009-3236](https://cve.now/CVE-2009-3236.md): The form library in Horde Application Framework 3.2 before 3.2.5 and 3.3 before 3.3.5; Groupware 1.1 before 1.1.6 and 1.2 before 1.2.4; and (no CVSS)
- [CVE-2009-3237](https://cve.now/CVE-2009-3237.md): Multiple cross-site scripting (XSS) vulnerabilities in Horde Application Framework 3.2 before 3.2.5 and 3.3 before 3.3.5; Groupware 1.1 befo (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-09-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.