Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2009
October

CVEs published in October 2009

357 vulnerabilities, 96 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

broadcom anti-virus, anti-virus for the enterprise, etrust antivirus +24 more +26 moreUnspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for...CVE-2009-35879.3 HighOctober 13, 2009
adobe acrobat, acrobat and reader, acrobat reader +2 moreHeap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9...CVE-2009-3459In KEVPublic exploitEPSS 86.5%9.3 HighOctober 13, 2009
linux kernelThe d_delete function in fs/ecryptfs/inode.c in eCryptfs in the Linux kernel 2.6.31 allows local...CVE-2009-29084.9 MediumOctober 13, 2009
springsource application management suite, hyperic hq, tc server +2 moreCross-site scripting (XSS) vulnerability in the Alerts list feature in the web interface in...CVE-2009-2898Public exploit3.5 LowOctober 13, 2009
springsource application management suite, hyperic hq, tc server +2 moreMultiple cross-site scripting (XSS) vulnerabilities in hq/web/common/GenericError.jsp in the...CVE-2009-28974.3 MediumOctober 13, 2009
apache http server, portable runtime +1 moreThe Solaris pollset feature in the Event Port backend in poll/unix/port.c in the Apache Portable...CVE-2009-2699EPSS 14.2%7.5 HighOctober 13, 2009
hp cm8050 mfp, cm8060 mfp, color laserjet 3000n +32 more +34 moreMultiple cross-site scripting (XSS) vulnerabilities in Jetdirect and the Embedded Web Server (EWS...CVE-2009-2684Public exploit4.3 MediumOctober 13, 2009
ksplayer ksp sound playerStack-based buffer overflow in KSP Sound Player 2009 R2 and R2.1 allows remote attackers to...CVE-2009-3670Public exploit9.3 HighOctober 11, 2009
foobla com foobla suggestionsSQL injection vulnerability in the foobla Suggestions (com_foobla_suggestions) component 1.5.11...CVE-2009-3669Public exploit7.5 HighOctober 11, 2009
promosi-web ardguestCross-site scripting (XSS) vulnerability in ardguest.php in Ardguest 1.8 allows remote attackers...CVE-2009-36684.3 MediumOctober 11, 2009
adsdxSQL injection vulnerability in admin/index.php in AdsDX 3.05 allows remote attackers to execute...CVE-2009-3667Public exploit7.5 HighOctober 11, 2009
nullam blogCross-site scripting (XSS) vulnerability in index.php in Nullam Blog 0.1.2 allows remote...CVE-2009-3666Public exploit4.3 MediumOctober 11, 2009
nullam blogMultiple SQL injection vulnerabilities in index.php in Nullam Blog 0.1.2 allow remote attackers...CVE-2009-3665Public exploit7.5 HighOctober 11, 2009
nullam blogMultiple directory traversal vulnerabilities in index.php in Nullam Blog 0.1.2 allow remote...CVE-2009-3664Public exploit7.5 HighOctober 11, 2009
jasper httpdxFormat string vulnerability in the h_readrequest function in http.c in httpdx Web Server 1.4...CVE-2009-3663Public exploitEPSS 14.6%10.0 HighOctober 11, 2009
filecopa-ftpserver ftp serverFileCopa FTP Server 5.01 allows remote attackers to cause a denial of service (server hang) via a...CVE-2009-3662Public exploit5.0 MediumOctober 11, 2009
blueconstantmedia com djcatalogMultiple SQL injection vulnerabilities in the DJ-Catalog (com_djcatalog) component for Joomla!...CVE-2009-3661Public exploit6.8 MediumOctober 11, 2009
efrontlearning efrontPHP remote file inclusion vulnerability in libraries/database.php in Efront 3.5.4 and earlier,...CVE-2009-3660Public exploit6.8 MediumOctober 11, 2009
stanback bs counterSQL injection vulnerability in file/stats.php in BS Counter 2.5.3 allows remote attackers to...CVE-2009-3659Public exploit7.5 HighOctober 11, 2009
djangoproject djangoDjango Regex Algorithmic Complexity Causes Denial of ServiceCVE-2009-3695Fix available5.0 MediumOctober 10, 2009
aol superbuddy activex controlUse-after-free vulnerability in the Sb.SuperBuddy.1 ActiveX control (sb.dll) in America Online ...CVE-2009-3658Public exploit8.8 HighOctober 9, 2009
tim nelson shared sign-onSession fixation vulnerability in Shared Sign-On 5.x and 6.x, a module for Drupal, allows remote...CVE-2009-36575.8 MediumOctober 9, 2009
tim nelson shared sign-onCross-site request forgery (CSRF) vulnerability in Shared Sign-On 5.x and 6.x, a module for...CVE-2009-36566.8 MediumOctober 9, 2009
solarwinds serv-u file serverRhino Software Serv-U 7.0.0.1 through 8.2.0.3 allows remote attackers to cause a denial of...CVE-2009-36555.0 MediumOctober 9, 2009
316solutions boostUnspecified vulnerability in Boost before 6.x-1.03, a module for Drupal, allows remote attackers...CVE-2009-36546.4 MediumOctober 9, 2009
darren oh xml sitemapCross-site scripting (XSS) vulnerability in the additional links interface in XML Sitemap 5.x-1.6...CVE-2009-36533.5 LowOctober 9, 2009
moshe weitzman organic groupsCross-site scripting (XSS) vulnerability in Organic Groups (OG) 5.x-7.x before 5.x-7.4, 5.x-8.x...CVE-2009-36523.5 LowOctober 9, 2009
mikeryan browscapCross-site scripting (XSS) vulnerability in the "Monitor browsers' feature in Browscap before 5.x...CVE-2009-36514.3 MediumOctober 9, 2009
david strauss dexCross-site scripting (XSS) vulnerability in Dex 5.x-1.0 and earlier and 6.x-1.0-rc1 and earlier,...CVE-2009-36504.3 MediumOctober 9, 2009
pbboardCross-site scripting (XSS) vulnerability in forums/index.php in Power Bulletin Board (PBBoard) 2...CVE-2009-36494.3 MediumOctober 9, 2009
apsivam service linksCross-site scripting (XSS) vulnerability in Service Links 6.x-1.0, a module for Drupal, allows...CVE-2009-36483.5 LowOctober 9, 2009
yabsoft mega file hosting scriptCross-site scripting (XSS) vulnerability in emaullinks.php in YABSoft Mega File Hosting Script ...CVE-2009-3647Public exploit4.3 MediumOctober 9, 2009
intervations navicopa web serverInterVations NaviCOPA Web Server 3.01 allows remote attackers to obtain the source code for a web...CVE-2009-3646Public exploit5.0 MediumOctober 9, 2009
joomlacache com cbresumebuilderSQL injection vulnerability in the JoomlaCache CB Resume Builder (com_cbresumebuilder) component...CVE-2009-3645Public exploit7.5 HighOctober 9, 2009
soundset com soundsetSQL injection vulnerability in the Soundset (com_soundset) component 1.0 for Joomla! allows...CVE-2009-3644Public exploit7.5 HighOctober 9, 2009
dxmsoft xm easy personal ftp serverDxmsoft XM Easy Personal FTP Server 5.8.0 allows remote attackers to cause a denial of service...CVE-2009-3643Public exploit5.0 MediumOctober 9, 2009
frontrange heatMultiple SQL injection vulnerabilities in the Call Logging feature in FrontRange HEAT 8.01 allow...CVE-2009-3642Public exploit7.5 HighOctober 9, 2009
scriptsez ultimate pollCross-site scripting (XSS) vulnerability in demo_page.php in Scriptsez Ultimate Poll allows...CVE-2009-3601Public exploit4.3 MediumOctober 8, 2009
freewebscriptz hubscriptHUBScript 1.0 allows remote attackers to obtain configuration information via a direct request to...CVE-2009-36005.0 MediumOctober 8, 2009
freewebscriptz hubscriptCross-site scripting (XSS) vulnerability in single_winner1.php in HUBScript 1.0 allows remote...CVE-2009-3599Public exploit4.3 MediumOctober 8, 2009
ecardmax.com formxpCross-site scripting (XSS) vulnerability in survey_result.php in eCardMAX FormXP 2007 allows...CVE-2009-3598Public exploit4.3 MediumOctober 8, 2009
digitaldesign cms project cmsDigitaldesign CMS 0.1 stores sensitive information under the web root with insufficient access...CVE-2009-3597Public exploit5.0 MediumOctober 8, 2009
joxtechnology ajox pollJoxTechnology Ajox Poll does not properly restrict access to admin/managepoll.php, which allows...CVE-2009-3596Public exploit7.5 HighOctober 8, 2009
vspanel vs panelSQL injection vulnerability in results.php in VS PANEL 7.5.5 allows remote attackers to execute...CVE-2009-3595Public exploit7.5 HighOctober 8, 2009
blob blog systemCross-site scripting (XSS) vulnerability in bpost.php in BLOB Blog System before 1.2 allows...CVE-2009-35944.3 MediumOctober 8, 2009
freewebscriptz freelancersMultiple cross-site scripting (XSS) vulnerabilities in Freelancers 1.0 allow remote attackers to...CVE-2009-3593Public exploit4.3 MediumOctober 8, 2009
qtmsoft x-cartCross-site scripting (XSS) vulnerability in customer/home.php in Qualiteam X-Cart allows remote...CVE-2009-3592Public exploit4.3 MediumOctober 8, 2009
ben webb dopewarsDopewars 1.5.12 allows remote attackers to cause a denial of service (segmentation fault) via a...CVE-2009-3591Public exploitFix availableEPSS 52.8%5.0 MediumOctober 8, 2009
vspanel vs panelSQL injection vulnerability in showcat.php in VS PANEL 7.3.6 allows remote attackers to execute...CVE-2009-3590Public exploit7.5 HighOctober 8, 2009
inotify incronincron 0.5.5 does not initialize supplementary groups when running a process from a user's...CVE-2009-3589Fix available4.6 MediumOctober 8, 2009
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open