Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2009
October

CVEs published in October 2009

357 vulnerabilities, 96 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

oracle database serverUnspecified vulnerability in the PL/SQL component in Oracle Database 10.2.0.4 and 11.1.0.7 allows...CVE-2009-20016.5 MediumOctober 22, 2009
oracle database serverUnspecified vulnerability in the Authentication component in Oracle Database 11.1.0.7 allows...CVE-2009-20005.0 MediumOctober 22, 2009
oracle application serverUnspecified vulnerability in the Business Intelligence Enterprise Edition component in...CVE-2009-19994.3 MediumOctober 22, 2009
oracle industry applicationsUnspecified vulnerability in the Oracle Communications Order and Service Management component in...CVE-2009-19984.9 MediumOctober 22, 2009
oracle database serverUnspecified vulnerability in the Authentication component in Oracle Database 10.2.0.3 and 11.1.0...CVE-2009-19975.0 MediumOctober 22, 2009
oracle database serverUnspecified vulnerability in the Advanced Queuing component in Oracle Database 10.2.0.4 and 11.1...CVE-2009-19954.9 MediumOctober 22, 2009
oracle database serverUnspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 allows...CVE-2009-19946.5 MediumOctober 22, 2009
oracle database serverUnspecified vulnerability in the Application Express component in Oracle Database 3.0.1 allows...CVE-2009-19935.5 MediumOctober 22, 2009
oracle database serverUnspecified vulnerability in the Core RDBMS component in Oracle Database 9.2.0.8, 10.1.0.5, and...CVE-2009-199210.0 HighOctober 22, 2009
oracle database serverUnspecified vulnerability in the Oracle Text component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10...CVE-2009-19913.6 LowOctober 22, 2009
oracle application serverUnspecified vulnerability in the Business Intelligence Enterprise Edition component in Oracle...CVE-2009-19901.7 LowOctober 22, 2009
oracle database serverUnspecified vulnerability in the Network Authentication component in Oracle Database 9.2.0.8, 9.2...CVE-2009-198510.0 HighOctober 22, 2009
oracle database serverUnspecified vulnerability in the Network Authentication component in Oracle Database 10.1.0.5 and...CVE-2009-1979Public exploitEPSS 76.4%10.0 HighOctober 22, 2009
oracle database serverUnspecified vulnerability in the Auditing component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0...CVE-2009-19722.1 LowOctober 22, 2009
oracle database serverUnspecified vulnerability in the Data Pump component in Oracle Database 10.1.0.5, 10.2.0.3, and...CVE-2009-19713.5 LowOctober 22, 2009
oracle database serverUnspecified vulnerability in the Net Foundation Layer component in Oracle Database 9.2.0.8 and 10...CVE-2009-19655.4 MediumOctober 22, 2009
oracle database serverUnspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 allows...CVE-2009-19645.5 MediumOctober 22, 2009
oracle database serverUnspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 allows...CVE-2009-10185.5 MediumOctober 22, 2009
oracle database serverUnspecified vulnerability in the Data Mining component in Oracle Database 10.2.0.4 allows remote...CVE-2009-10076.5 MediumOctober 22, 2009
citrix xencenterwebStatic code injection vulnerability in config/writeconfig.php in the sample code in the XenServer...CVE-2009-3760Public exploit7.5 HighOctober 22, 2009
citrix xencenterwebMultiple cross-site request forgery (CSRF) vulnerabilities in sample code in the XenServer...CVE-2009-3759Public exploit8.8 HighOctober 22, 2009
citrix xencenterwebSQL injection vulnerability in login.php in sample code in the XenServer Resource Kit in Citrix...CVE-2009-3758Public exploit7.5 HighOctober 22, 2009
citrix xencenterwebMultiple cross-site scripting (XSS) vulnerabilities in sample code in the XenServer Resource Kit...CVE-2009-3757Public exploit4.3 MediumOctober 22, 2009
kreotek phpbmsphpBMS 0.96 allows remote attackers to obtain sensitive information via a direct request to (1)...CVE-2009-3756Public exploit5.0 MediumOctober 22, 2009
kreotek phpbmsMultiple cross-site scripting (XSS) vulnerabilities in phpBMS 0.96 allow remote attackers to...CVE-2009-3755Public exploit4.3 MediumOctober 22, 2009
kreotek phpbmsMultiple SQL injection vulnerabilities in phpBMS 0.96 allow remote attackers to execute arbitrary...CVE-2009-3754Public exploit7.5 HighOctober 22, 2009
opialUnrestricted file upload vulnerability in Opial 1.0 allows remote attackers to execute arbitrary...CVE-2009-3753Public exploit7.5 HighOctober 22, 2009
opialSQL injection vulnerability in home.php in Opial 1.0 allows remote attackers to execute arbitrary...CVE-2009-3752Public exploit7.5 HighOctober 22, 2009
opialCross-site scripting (XSS) vulnerability in home.php in Opial 1.0 allows remote attackers to...CVE-2009-3751Public exploit4.3 MediumOctober 22, 2009
santostefano giovanni toylogSQL injection vulnerability in read.php in ToyLog 0.1 allows remote attackers to execute...CVE-2009-3750Public exploit7.5 HighOctober 22, 2009
websense email security, personal email manager +1 moreThe Web Administrator service (STEMWADM.EXE) in Websense Personal Email Manager 7.1 before Hotfix...CVE-2009-3749Public exploit5.0 MediumOctober 22, 2009
websense personal email manager, email security +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the Web Administrator in Websense Personal...CVE-2009-3748Public exploit4.3 MediumOctober 22, 2009
tbmnet tbmnetcmsCross-site scripting (XSS) vulnerability in index.php in TBmnetCMS 1.0 allows remote attackers to...CVE-2009-3747Public exploit4.3 MediumOctober 22, 2009
sun solarisXScreenSaver in Sun Solaris 10, when the accessibility feature is enabled, allows physically...CVE-2009-37461.9 LowOctober 22, 2009
systemtapSystemTap 1.0, when the --unprivileged option is used, does not properly restrict certain data...CVE-2009-2911Fix available1.9 LowOctober 22, 2009
ibm rational appscanCross-site scripting (XSS) vulnerability in the help pages in IBM Rational AppScan Enterprise...CVE-2009-37454.3 MediumOctober 22, 2009
emc replistorrep_serv.exe 6.3.1.3 in the server in EMC RepliStor allows remote attackers to cause a denial of...CVE-2009-3744Public exploit5.0 MediumOctober 22, 2009
linux kernel, canonical ubuntu linux, fedoraproject fedora +5 more +7 morenet/unix/af_unix.c in the Linux kernel 2.6.31.4 and earlier allows local users to cause a denial...CVE-2009-3621Public exploit5.5 MediumOctober 22, 2009
linux kernel, canonical ubuntu linux, fedoraproject fedora +5 more +7 moreThe ATI Rage 128 (aka r128) driver in the Linux kernel before 2.6.31-git11 does not properly...CVE-2009-36207.8 HighOctober 22, 2009
boxalinoDirectory traversal vulnerability in client/desktop/default.htm in Boxalino before 09.05.25-0421...CVE-2009-1479Public exploit7.5 HighOctober 22, 2009
emc documentum applicationxtender workflow managerDirectory traversal vulnerability in aws_tmxn.exe in the Admin Agent service in the server in EMC...CVE-2008-3685EPSS 12.9%10.0 HighOctober 22, 2009
emc documentum applicationxtenderHeap-based buffer overflow in aws_tmxn.exe in the Admin Agent service in the server in EMC...CVE-2008-368410.0 HighOctober 22, 2009
osgeo mapserverMultiple heap-based buffer underflows in the readPostBody function in cgiutil.c in mapserv in...CVE-2009-2281Fix available10.0 HighOctober 22, 2009
popplerInteger overflow in the create_surface_from_thumbnail_data function in glib/poppler-page.cc in...CVE-2009-3607Fix available9.3 HighOctober 21, 2009
foolabs xpdf, poppler, glyphandcog xpdfreader +2 moreInteger overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and...CVE-2009-3609Fix available4.3 MediumOctober 21, 2009
foolabs xpdf, poppler, glyphandcog xpdfreader +2 moreInteger overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4...CVE-2009-3608Fix availableEPSS 10.2%9.3 HighOctober 21, 2009
foolabs xpdf, poppler, glyphandcog xpdfreader +2 moreInteger overflow in the PSOutputDev::doImageL1Sep function in Xpdf before 3.02pl4, and Poppler 0...CVE-2009-3606Fix available9.3 HighOctober 21, 2009
foolabs xpdf, poppler, glyphandcog xpdfreader +2 moreThe Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x,...CVE-2009-3604Fix available9.3 HighOctober 21, 2009
foolabs xpdf, poppler, glyphandcog xpdfreader +2 moreInteger overflow in the SplashBitmap::SplashBitmap function in Xpdf 3.x before 3.02pl4 and...CVE-2009-3603Fix available9.3 HighOctober 21, 2009
ibm rational requisiteproMultiple cross-site scripting (XSS) vulnerabilities in the ReqWeb Help feature (aka the Web...CVE-2009-3730Public exploit4.3 MediumOctober 20, 2009
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open