Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2009
October

CVEs published in October 2009

357 vulnerabilities, 96 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

acoustica mp3 audio mixerHeap-based buffer overflow in Acoustica MP3 Audio Mixer 2.471 allows remote attackers to cause a...CVE-2009-3810Public exploit9.3 HighOctober 27, 2009
acoustica mp3 audio mixerAcoustica MP3 Audio Mixer 1.0 and possibly 2.471 allows remote attackers to cause a denial of...CVE-2009-3809Public exploit4.3 MediumOctober 27, 2009
kramware mixsense dj studioMixSense DJ Studio 1.0.0.1 allows remote attackers to cause a denial of service (application...CVE-2009-3808Public exploit9.3 HighOctober 27, 2009
mixvibesStack-based buffer overflow in MixVibes 7.043 Pro allows remote attackers to cause a denial of...CVE-2009-3807Public exploit9.3 HighOctober 27, 2009
dedecmsSQL injection vulnerability in feedback_js.php in DedeCMS 5.1 allows remote attackers to execute...CVE-2009-3806Public exploit7.5 HighOctober 27, 2009
gpg4wingpg2.exe in Gpg4win 2.0.1, as used in KDE Kleopatra 2.0.11, allows remote attackers to cause a...CVE-2009-3805Public exploit4.3 MediumOctober 27, 2009
runcmsMultiple SQL injection vulnerabilities in modules/forum/post.php in RunCMS 2M1 allow remote...CVE-2009-3804Public exploit6.5 MediumOctober 27, 2009
amirocms amiro.cmsMultiple cross-site scripting (XSS) vulnerabilities in Amiro.CMS 5.4.0.0 and earlier allow remote...CVE-2009-3803Public exploit4.3 MediumOctober 27, 2009
amirocms amiro.cmsAmiro.CMS 5.4.0.0 and earlier allows remote attackers to obtain sensitive information via an...CVE-2009-3802Public exploit5.0 MediumOctober 27, 2009
opendocmanSQL injection vulnerability in index.php in OpenDocMan 1.2.5 allows remote attackers to execute...CVE-2009-38017.5 HighOctober 27, 2009
derrick oswald html-parserThe decode_entities function in util.c in HTML-Parser before 3.63 allows context-dependent...CVE-2009-3627Fix available4.3 MediumOctober 27, 2009
cutepdf formmaxHeap-based buffer overflow in FormMax (formerly AcroForm) evaluation 3.5 allows remote attackers...CVE-2009-37909.3 HighOctober 26, 2009
opendocmanMultiple cross-site scripting (XSS) vulnerabilities in OpenDocMan 1.2.5 allow remote attackers to...CVE-2009-3789Public exploit4.3 MediumOctober 26, 2009
opendocmanSQL injection vulnerability in index.php in OpenDocMan 1.2.5 allows remote attackers to execute...CVE-2009-37887.5 HighOctober 26, 2009
vivvofiles.php in Vivvo CMS 4.1.5.1 allows remote attackers to conduct directory traversal attacks and...CVE-2009-3787Public exploit5.0 MediumOctober 26, 2009
moshe weitzman og vocabCross-site scripting (XSS) vulnerability in Organic Groups (OG) Vocabulary 5.x before 5.x-1.1 and...CVE-2009-37864.3 MediumOctober 26, 2009
sjoerd arendsen simplenews statisticsMultiple cross-site request forgery (CSRF) vulnerabilities in Simplenews Statistics 6.x before 6...CVE-2009-37856.8 MediumOctober 26, 2009
sjoerd arendsen simplenews statisticsOpen redirect vulnerability in Simplenews Statistics 6.x before 6.x-2.0, a module for Drupal,...CVE-2009-37846.8 MediumOctober 26, 2009
sjoerd arendsen simplenews statisticsCross-site scripting (XSS) vulnerability in Simplenews Statistics 6.x before 6.x-2.0, a module...CVE-2009-37834.3 MediumOctober 26, 2009
2bits userpointsUnspecified vulnerability in Userpoints 6.x before 6.x-1.1, a module for Drupal, allows remote...CVE-2009-37823.5 LowOctober 26, 2009
quicksketch filefieldThe filefield_file_download function in FileField 6.x-3.1, a module for Drupal, does not properly...CVE-2009-37817.5 HighOctober 26, 2009
ashok modi abuseCross-site scripting (XSS) vulnerability in Abuse 5.x before 5.x-2.1 and 6.x before 6.x-1.1...CVE-2009-37804.3 MediumOctober 26, 2009
stefan auditor vcardCross-site scripting (XSS) vulnerability in vCard 5.x before 5.x-1.4 and 6.x before 6.x-1.3, a...CVE-2009-37794.3 MediumOctober 26, 2009
adam gerson moodle courselistSQL injection vulnerability in Moodle Course List 6.x before 6.x-1.2, a module for Drupal, allows...CVE-2009-37787.5 HighOctober 26, 2009
sahanaDirectory traversal vulnerability in www/index.php in Sahana 0.6.2.2 allows remote attackers to...CVE-2009-3625Public exploit7.5 HighOctober 26, 2009
le-web backintime, fedoraproject fedora +1 morecommon/snapshots.py in Back In Time (aka backintime) 0.9.26 changes certain permissions to 0777...CVE-2009-3611Fix available7.1 HighOctober 26, 2009
f5 nginxsrc/http/ngx_http_parse.c in nginx (aka Engine X) 0.1.0 through 0.4.14, 0.5.x before 0.5.38, 0.6...CVE-2009-3896Fix availableEPSS 10.2%5.0 MediumOctober 26, 2009
openldap, apple mac os x, fedoraproject fedora +2 morelibraries/libldap/tls_o.c in OpenLDAP 2.2 and 2.4, and possibly other versions, when OpenSSL is...CVE-2009-3767Fix available4.3 MediumOctober 23, 2009
muttmutt_ssl.c in mutt 1.5.16 and other versions before 1.5.19, when OpenSSL is used, does not verify...CVE-2009-37666.8 MediumOctober 23, 2009
muttmutt_ssl.c in mutt 1.5.19 and 1.5.20, when OpenSSL is used, does not properly handle a '\0'...CVE-2009-37656.8 MediumOctober 23, 2009
wordpressAlgorithmic complexity vulnerability in wp-trackback.php in WordPress before 2.8.5 allows remote...CVE-2009-3622Fix available4.3 MediumOctober 23, 2009
qemu, redhat enterprise linux server, enterprise linux workstation +2 moreMultiple use-after-free vulnerabilities in vnc.c in the VNC server in QEMU 0.10.6 and earlier...CVE-2009-3616Fix available9.9 CriticalOctober 23, 2009
novell suse linux, opensuse +1 moreiscsi_discovery in open-iscsi in SUSE openSUSE 10.3 through 11.1 and SUSE Linux Enterprise (SLE)...CVE-2009-1297Fix available4.4 MediumOctober 23, 2009
oracle jd edwards enterpriseone, peoplesoft enterprise +1 moreUnspecified vulnerability in the PeopleSoft Enterprise HCM (TAM) component in Oracle PeopleSoft...CVE-2009-34093.6 LowOctober 22, 2009
oracle e-business suiteUnspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business...CVE-2009-34085.1 MediumOctober 22, 2009
oracle application serverUnspecified vulnerability in the Portal component in Oracle Application Server 10.1.2.3 and 10.1...CVE-2009-34074.3 MediumOctober 22, 2009
oracle jd edwards enterpriseone, peoplesoft enterprise +1 moreUnspecified vulnerability in the JD Edwards Tools component in Oracle PeopleSoft Enterprise and...CVE-2009-34062.7 LowOctober 22, 2009
oracle jd edwards enterpriseone, peoplesoft enterprise +1 moreUnspecified vulnerability in the JD Edwards Tools component in Oracle PeopleSoft Enterprise and...CVE-2009-34054.1 MediumOctober 22, 2009
oracle jd edwards enterpriseone, peoplesoft enterprise +1 moreUnspecified vulnerability in the PeopleSoft PeopleTools & Enterprise Portal component in Oracle...CVE-2009-34044.0 MediumOctober 22, 2009
oracle bea product suiteUnspecified vulnerability in the JRockit component in BEA Product Suite R27.6.4: JRE/JDK, 1.4.2,...CVE-2009-340310.0 HighOctober 22, 2009
oracle e-business suiteUnspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business...CVE-2009-34022.1 LowOctober 22, 2009
oracle e-business suiteUnspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E...CVE-2009-34011.7 LowOctober 22, 2009
oracle e-business suiteUnspecified vulnerability in the Oracle Advanced Benefits component in Oracle E-Business Suite 11...CVE-2009-34005.5 MediumOctober 22, 2009
oracle bea product suiteUnspecified vulnerability in the WebLogic Server component in BEA Product Suite 7.0.6 and 8.1.5...CVE-2009-33994.3 MediumOctober 22, 2009
oracle e-business suiteUnspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business...CVE-2009-33974.3 MediumOctober 22, 2009
oracle bea product suiteUnspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.0, 9.1, 9.2.3,...CVE-2009-33964.3 MediumOctober 22, 2009
oracle e-business suiteUnspecified vulnerability in the AutoVue component in Oracle E-Business Suite 19.3.2 allows...CVE-2009-33955.0 MediumOctober 22, 2009
oracle e-business suiteUnspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business...CVE-2009-33934.3 MediumOctober 22, 2009
oracle e-business suiteUnspecified vulnerability in the Agile Engineering Data Management (EDM) component in Oracle E...CVE-2009-33925.4 MediumOctober 22, 2009
oracle bea product suiteUnspecified vulnerability in the WebLogic Portal component in BEA Product Suite 8.1.6, 9.2.3, 10...CVE-2009-20024.3 MediumOctober 22, 2009
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open