# CVEs published 2009-12-30 30 CVEs were published on December 30, 2009: 0 critical, 0 high. Days are UTC. - [CVE-2008-7249](https://cve.now/CVE-2008-7249.md): Buffer overflow in Squid Analysis Report Generator (Sarg) 2.2.3.1, and probably later, allows user-assisted remote attackers to execute arbi (no CVSS) - [CVE-2008-7250](https://cve.now/CVE-2008-7250.md): Cross-site scripting (XSS) vulnerability in Squid Analysis Report Generator (Sarg) 2.2.4 allows remote attackers to inject arbitrary web scr (no CVSS) - [CVE-2009-4470](https://cve.now/CVE-2009-4470.md): SQL injection vulnerability in boardrule.php in DVBBS 2.0 allows remote attackers to execute arbitrary SQL commands via the groupboardid par (no CVSS) - [CVE-2009-4471](https://cve.now/CVE-2009-4471.md): Multiple PHP remote file inclusion vulnerabilities in FreeSchool 1.1.0 and earlier allow remote attackers to execute arbitrary PHP code via (no CVSS) - [CVE-2009-4472](https://cve.now/CVE-2009-4472.md): Multiple PHP remote file inclusion vulnerabilities in PHPope 1.0.0 and earlier allow remote attackers to execute arbitrary PHP code via a UR (no CVSS) - [CVE-2009-4473](https://cve.now/CVE-2009-4473.md): Multiple cross-site scripting (XSS) vulnerabilities in WorkArea/ContentDesigner/ekformsiframe.aspx in Ektron CMS400.NET 7.6.1.53 and 7.6.6.4 (no CVSS) - [CVE-2009-4474](https://cve.now/CVE-2009-4474.md): SQL injection vulnerability in the Mike de Boer zoom (com\_zoom) component 2.0 for Mambo allows remote attackers to execute arbitrary SQL com (no CVSS) - [CVE-2009-4475](https://cve.now/CVE-2009-4475.md): SQL injection vulnerability in the Joomlub (com\_joomlub) component for Joomla! allows remote attackers to execute arbitrary SQL commands via (no CVSS) - [CVE-2009-4476](https://cve.now/CVE-2009-4476.md): Stack-based buffer overflow in HAURI ViRobot Desktop 5.5 before 2009-09-28.00 allows remote attackers to execute arbitrary code via unspecif (no CVSS) - [CVE-2009-4477](https://cve.now/CVE-2009-4477.md): SQL injection vulnerability in page.html in Xstate Real Estate 1.0 allows remote attackers to execute arbitrary SQL commands via the pid par (no CVSS) - [CVE-2009-4478](https://cve.now/CVE-2009-4478.md): Multiple cross-site scripting (XSS) vulnerabilities in Xstate Real Estate 1.0 allow remote attackers to inject arbitrary web script or HTML (no CVSS) - [CVE-2009-4479](https://cve.now/CVE-2009-4479.md): LDAP3A.exe in MailSite 8.0.4 allows remote attackers to cause a denial of service (heap memory corruption and daemon crash) via unspecified (no CVSS) - [CVE-2009-4480](https://cve.now/CVE-2009-4480.md): Buffer overflow in the web service in AzeoTech DAQFactory 5.77 might allow remote attackers to execute arbitrary code via unspecified vector (no CVSS) - [CVE-2009-4482](https://cve.now/CVE-2009-4482.md): Buffer overflow in MediaServer.exe in TVersity 1.6 allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrate (no CVSS) - [CVE-2009-4483](https://cve.now/CVE-2009-4483.md): Unspecified vulnerability in LDAP3A.exe in MailSite 8.0.4 allows remote attackers to cause a denial of service (daemon crash) via unknown ve (no CVSS) - [CVE-2009-4484](https://cve.now/CVE-2009-4484.md): Multiple stack-based buffer overflows in the CertDecoder::GetName function in src/asn.cpp in TaoCrypt in yaSSL before 1.9.9, as used in mysq (no CVSS) - [CVE-2009-4469](https://cve.now/CVE-2009-4469.md): Multiple cross-site scripting (XSS) vulnerabilities in pagenumber.inc.php in phpPowerCards 2.0 allow remote attackers to inject arbitrary we (no CVSS) - [CVE-2009-4459](https://cve.now/CVE-2009-4459.md): Redmine 0.8.7 and earlier uses the title tag before defining the character encoding in a meta tag, which allows remote attackers to conduct (no CVSS) - [CVE-2009-4460](https://cve.now/CVE-2009-4460.md): Multiple cross-site scripting (XSS) vulnerabilities in Auto-Surf Traffic Exchange Script 1.1 allow remote attackers to inject arbitrary web (no CVSS) - [CVE-2009-4461](https://cve.now/CVE-2009-4461.md): Multiple cross-site scripting (XSS) vulnerabilities in FlatPress 0.909 allow remote attackers to inject arbitrary web script or HTML via the (no CVSS) - [CVE-2009-4462](https://cve.now/CVE-2009-4462.md): Stack-based buffer overflow in the NetBiterConfig utility (NetBiterConfig.exe) 1.3.0 for Intellicom NetBiter WebSCADA allows remote attacker (no CVSS) - [CVE-2009-4463](https://cve.now/CVE-2009-4463.md): Intellicom NetBiter WebSCADA devices use default passwords for the HICP network configuration service, which makes it easier for remote atta (no CVSS) - [CVE-2009-4464](https://cve.now/CVE-2009-4464.md): Cross-site scripting (XSS) vulnerability in searchadvance.asp in Active Business Directory 2 allows remote attackers to inject arbitrary web (no CVSS) - [CVE-2009-4465](https://cve.now/CVE-2009-4465.md): DeluxeBB 1.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain user (no CVSS) - [CVE-2009-4466](https://cve.now/CVE-2009-4466.md): DeluxeBB 1.3 allows remote attackers to obtain sensitive information via a crafted page parameter to misc.php, which reveals the installatio (no CVSS) - [CVE-2009-4467](https://cve.now/CVE-2009-4467.md): misc.php in DeluxeBB 1.3 allows remote attackers to register accounts without a valid email address via a valemail action with the valmem se (no CVSS) - [CVE-2009-4468](https://cve.now/CVE-2009-4468.md): Cross-site scripting (XSS) vulnerability in misc.php in DeluxeBB 1.3 allows remote attackers to inject arbitrary web script or HTML via the (no CVSS) - [CVE-2009-4456](https://cve.now/CVE-2009-4456.md): SQL injection vulnerability in news\_detail.php in Green Desktiny 2.3.1, and possibly earlier versions, allows remote attackers to execute ar (no CVSS) - [CVE-2009-4457](https://cve.now/CVE-2009-4457.md): Multiple unspecified vulnerabilities in the Vsftpd Webmin module before 1.3b for the Vsftpd server have unknown impact and attack vectors re (no CVSS) - [CVE-2009-4458](https://cve.now/CVE-2009-4458.md): Multiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.5.2 and 2.6.0rc2, and possibly other versions, allow remote attackers to in (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2009-12-30 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.