Archive
October 2009
Vulnerabilities first published in this month (UTC), newest first.
137 results · Clear filters · Feed
-
Unscored —CVE-2009-3744 Public exploit
rep_serv.exe 6.3.1.3 in the server in EMC RepliStor allows remote attackers to cause a denial of service via a crafted …
-
Unscored —CVE-2009-3621 Public exploit
net/unix/af_unix.c in the Linux kernel 2.6.31.4 and earlier allows local users to cause a denial of service (system han…
-
Unscored —CVE-2009-3730 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the ReqWeb Help feature (aka the Web Client Help system) in IBM …
-
Unscored —
Array index error in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might al…
-
Unscored —
Buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 might allow attacker…
-
Unscored —
Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 allow attackers to cause a de…
-
Unscored —
The swiotlb functionality in the r8169 driver in drivers/net/r8169.c in the Linux kernel before 2.6.27.22 allows remote…
-
Unscored —CVE-2009-3704 Public exploit
ZoIPer 2.22, and possibly other versions before 2.24 Library 5324, allows remote attackers to cause a denial of service…
-
Unscored —CVE-2009-3709 Public exploit
Stack-based buffer overflow in the Meta Content Optimizer in Konae Technologies Alleycode HTML Editor 2.21 allows user-…
-
Unscored —
VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware Workstation 7.0 befo…
-
Unscored —CVE-2009-3715 Public exploit
Multiple SQL injection vulnerabilities in scr_login.php in MCshoutbox 1.1, when magic_quotes_gpc is disabled, allow rem…
-
Unscored —CVE-2009-3714 Public exploit
Cross-site scripting (XSS) vulnerability in admin_login.php in MCshoutbox 1.1 allows remote attackers to inject arbitra…
-
Unscored —CVE-2009-3705 Public exploit
PHP remote file inclusion vulnerability in debugger.php in Achievo before 1.4.0 allows remote attackers to execute arbi…
-
Unscored —CVE-2009-3713 Public exploit
SQL injection vulnerability in fichero.php in MorcegoCMS 1.7.6 and earlier allows remote attackers to execute arbitrary…
-
Unscored —CVE-2009-3717 Public exploit
Heap-based buffer overflow in LucVil PatPlayer 3.9 allows remote attackers to cause a denial of service (crash) or exec…
-
Unscored —CVE-2009-3712 Public exploit
Multiple SQL injection vulnerabilities in Ebay Clone 2009 allow remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2009-3719 Public exploit
Cross-site scripting (XSS) vulnerability in comment.asp in Battle Blog 1.25 and 1.30 build 2 allows remote attackers to…
-
Unscored —CVE-2009-3718 Public exploit
SQL injection vulnerability in admin/authenticate.asp in Battle Blog 1.25 and 1.30 build 2 allows remote attackers to e…
-
Unscored —CVE-2009-3710 Public exploit
RioRey RIOS 4.6.6 and 4.7.0 uses an undocumented, hard-coded username (dbadmin) and password (sq!us3r) for an SSH tunne…
-
Unscored —CVE-2009-3708 Public exploit
Stack-based buffer overflow in the Meta Content Optimizer in Konae Technologies Alleycode HTML Editor 2.21 allows user-…
-
Unscored —CVE-2009-3716 Public exploit
Unrestricted file upload vulnerability in admin.php in MCshoutbox 1.1 allows remote authenticated users to execute arbi…
-
Unscored —
Stack-based buffer overflow in the h_handlepeer function in http.cpp in httpdx 1.4, and possibly 1.4.3, allows remote a…
-
Unscored —CVE-2009-3281 Public exploit
The vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 does not use correct file permissions, which allo…
-
Unscored —CVE-2009-2733 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Achievo before 1.4.0 allow remote attackers to inject arbitrary …
-
Unscored —CVE-2009-2734 Public exploit
SQL injection vulnerability in the get_employee function in classweekreport.inc in Achievo before 1.4.0 allows remote a…
-
Unscored —
Stack-based buffer overflow in libcsa.a (aka the calendar daemon library) in IBM AIX 5.x through 5.3.10 and 6.x through…
-
High 8.8
Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 allows remote attackers to execute a…
-
Unscored —
Integer overflow in the CryptoAPI component in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 …
-
Unscored —
Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC do not properly process …
-
Unscored —
Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 do not properly validate fields in SMBv2 packet…
-
Unscored —CVE-2009-3694 Public exploit
Directory traversal vulnerability in config/config.php in ezRecipe-Zee 91, when register_globals is enabled, allows rem…
-
Unscored —CVE-2009-3691 Public exploit
Multiple integer overflows in setnet32.exe 3.50.0.13752 in IBM Informix Client SDK 3.0 and 3.50 and Informix Connect Ru…
-
Unscored —CVE-2009-3692 Public exploit
Unspecified vulnerability in the VBoxNetAdpCtl configuration tool in Sun VirtualBox 3.0.x before 3.0.8 on Solaris x86, …
-
Unscored —
Directory traversal vulnerability in the Persits.XUpload.2 ActiveX control (XUpload.ocx) in HP LoadRunner 9.5 allows re…
-
High 8.8
Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows re…
KEV May 20, 2026 -
Unscored —CVE-2009-2898 Public exploit
Cross-site scripting (XSS) vulnerability in the Alerts list feature in the web interface in SpringSource Hyperic HQ 3.2…
-
Unscored —CVE-2009-2684 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Jetdirect and the Embedded Web Server (EWS) on certain HP LaserJ…
-
Unscored —CVE-2009-3660 Public exploit
PHP remote file inclusion vulnerability in libraries/database.php in Efront 3.5.4 and earlier, when register_globals is…
-
Unscored —CVE-2009-3661 Public exploit
Multiple SQL injection vulnerabilities in the DJ-Catalog (com_djcatalog) component for Joomla! allow remote attackers t…
-
Unscored —CVE-2009-3667 Public exploit
SQL injection vulnerability in admin/index.php in AdsDX 3.05 allows remote attackers to execute arbitrary SQL commands …