Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: November 2009

42 records · 1 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2009-3733
    45Plan

    Directory traversal vulnerability in VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138 on Linux, VMware ESXi 3.

    MediumCVSS 5.0WeaponizedEPSS 83%

    vmware · esxNov 2, 2009

  • CVE-2009-3837
    47Plan

    Stack-based buffer overflow in Eureka Email 2.2q allows remote POP3 servers to execute arbitrary code via a long error message.

    CriticalCVSS 9.3WeaponizedEPSS 32%

    eureka-email · eureka emailNov 2, 2009

  • CVE-2009-3031
    51Plan

    Stack-based buffer overflow in the BrowseAndSaveFile method in the Altiris eXpress NS ConsoleUtilities ActiveX control 6.0.0.1846 in AeXNSCo

    CriticalCVSS 9.3WeaponizedEPSS 45%

    symantec · altiris deployment solutionNov 3, 2009

  • CVE-2009-3720
    28Monitor

    The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allow

    MediumCVSS 5.0No exploitEPSS 27%

    python · pythonNov 3, 2009

  • CVE-2009-3853
    48Plan

    Stack-based buffer overflow in the client acceptor daemon (CAD) scheduler in the client in IBM Tivoli Storage Manager (TSM) 5.3 before 5.3.6

    CriticalCVSS 9.3WeaponizedEPSS 36%

    ibm · tivoli storage managerNov 4, 2009

  • CVE-2009-3859
    40Plan

    Buffer overflow in eEye Retina WiFi Scanner 1.0.8.68, as used in Retina Network Security Scanner 5.10.14, allows user-assisted remote attack

    CriticalCVSS 9.3Proof of conceptEPSS 11%

    eeye · retina wifi scannerNov 4, 2009

  • CVE-2009-3861
    40Plan

    Stack-based buffer overflow in SafeNet SoftRemote 10.8.5 (Build 2) and 10.3.5 (Build 6), and possibly other versions before 10.8.9, allows l

    MediumCVSS 6.9WeaponizedEPSS 3%

    safenet-inc · softremoteNov 4, 2009

  • CVE-2009-3864
    37Monitor

    The Java Update functionality in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22 and JDK and JRE 6 before

    HighCVSS 7.5No exploitEPSS 22%

    sun · jdkNov 5, 2009

  • CVE-2009-3867
    59Plan

    Stack-based buffer overflow in the HsbParser.getSoundBank function in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before

    CriticalCVSS 9.3WeaponizedEPSS 73%

    sun · jdkNov 5, 2009

  • CVE-2009-3869
    57Plan

    Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE

    CriticalCVSS 9.3WeaponizedEPSS 65%

    sun · jdkNov 5, 2009

  • CVE-2009-2685
    63This week

    Stack-based buffer overflow in the login form in the management web server in HP Power Manager allows remote attackers to execute arbitrary

    CriticalCVSS 10.0WeaponizedEPSS 76%

    hp · power managerNov 6, 2009

  • CVE-2009-3555
    65This week

    The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in th

    CriticalCVSS 9.8Proof of conceptEPSS 87%

    apache · http serverNov 9, 2009

  • CVE-2009-3726
    35Monitor

    The nfs4_proc_lock function in fs/nfs/nfs4proc.c in the NFSv4 client in the Linux kernel before 2.6.31-rc4 allows remote NFS servers to caus

    HighCVSS 7.8Proof of conceptEPSS 12%

    linux · linux kernelNov 9, 2009

  • CVE-2009-1928
    40Plan

    Stack consumption vulnerability in the LDAP service in Active Directory on Microsoft Windows 2000 SP4, Server 2003 SP2, and Server 2008 Gold

    HighCVSS 7.8No exploitEPSS 30%

    microsoft · windows 2000Nov 11, 2009

  • CVE-2009-2512
    48Plan

    The Web Services on Devices API (WSDAPI) in Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 does not properly process the head

    CriticalCVSS 9.8No exploitEPSS 31%

    microsoft · windows server 2008Nov 11, 2009

  • CVE-2009-2514
    51Plan

    win32k.sys in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not correctly parse font code during constr

    CriticalCVSS 9.3WeaponizedEPSS 47%

    microsoft · windows 2000Nov 11, 2009

  • CVE-2009-2523
    48Plan

    The License Logging Server (llssrv.exe) in Microsoft Windows 2000 SP4 allows remote attackers to execute arbitrary code via an RPC message c

    CriticalCVSS 10.0No exploitEPSS 26%

    microsoft · windows 2000Nov 11, 2009

  • CVE-2009-3127
    45Plan

    Microsoft Office Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, Open XML File Format Converter for Mac, and Office Excel Viewer

    CriticalCVSS 9.3No exploitEPSS 25%

    microsoft · compatibility pack word excel powerpointNov 11, 2009

  • CVE-2009-3128
    44Plan

    Microsoft Office Excel 2002 SP3 and 2003 SP3, and Office Excel Viewer 2003 SP3, does not properly parse the Excel file format, which allows

    CriticalCVSS 9.3No exploitEPSS 24%

    microsoft · compatibility pack word excel powerpointNov 11, 2009

  • CVE-2009-3129
    86Now

    Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Offic

    HighCVSS 7.8KEVWeaponizedEPSS 84%

    microsoft · excelNov 11, 2009

  • CVE-2009-3135
    48Plan

    Stack-based buffer overflow in Microsoft Office Word 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, Open XML File Format Converter for

    CriticalCVSS 9.3No exploitEPSS 35%

    microsoft · officeNov 11, 2009

  • CVE-2009-3130
    46Plan

    Heap-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allo

    CriticalCVSS 9.3No exploitEPSS 28%

    microsoft · compatibility pack word excel powerpointNov 11, 2009

  • CVE-2009-3131
    44Plan

    Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Offic

    CriticalCVSS 9.3No exploitEPSS 24%

    microsoft · compatibility pack word excel powerpointNov 11, 2009

  • CVE-2009-3132
    45Plan

    Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Offic

    CriticalCVSS 9.3No exploitEPSS 25%

    microsoft · compatibility pack word excel powerpointNov 11, 2009

  • CVE-2009-3133
    44Plan

    Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to execute

    CriticalCVSS 9.3No exploitEPSS 24%

    microsoft · compatibility pack word excel powerpointNov 11, 2009

  • CVE-2009-3134
    45Plan

    Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Offic

    CriticalCVSS 9.3No exploitEPSS 25%

    microsoft · compatibility pack word excel powerpointNov 11, 2009

  • CVE-2009-3548
    54Plan

    The Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly earlier versions uses a blank default passw

    HighCVSS 7.5WeaponizedEPSS 78%

    apache · tomcatNov 12, 2009

  • CVE-2009-3676
    38Monitor

    The SMB client in the kernel in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB servers and man-in-the-middle attackers to

    HighCVSS 7.1No exploitEPSS 34%

    microsoft · windows 7Nov 13, 2009

  • CVE-2009-3943
    24Monitor

    Microsoft Internet Explorer 6 through 6.0.2900.2180 and 7 through 7.0.6000.16711 allows remote attackers to cause a denial of service (appli

    MediumCVSS 5.0No exploitEPSS 13%

    microsoft · internet explorerNov 16, 2009

  • CVE-2009-3976
    45Plan

    Buffer overflow in Labtam ProFTP 2.9 allows remote FTP servers to cause a denial of service (application crash) or execute arbitrary code vi

    CriticalCVSS 9.3WeaponizedEPSS 28%

    labtam-inc · proftpNov 18, 2009

  • CVE-2009-4006
    65This week

    Stack-based buffer overflow in the TEA decoding algorithm in RhinoSoft Serv-U FTP server 7.0.0.1, 9.0.0.5, and other versions before 9.1.0.0

    CriticalCVSS 10.0WeaponizedEPSS 82%

    solarwinds · serv-u file serverNov 20, 2009

  • CVE-2009-3843
    64This week

    HP Operations Manager 8.10 on Windows contains a "hidden account" in the XML file that specifies Tomcat users, which allows remote attackers

    CriticalCVSS 10.0WeaponizedEPSS 78%

    hp · operations managerNov 23, 2009

  • CVE-2009-4017
    24Monitor

    PHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created when handling a multipart/form-data POST re

    MediumCVSS 5.0Proof of conceptEPSS 12%

    php · phpNov 23, 2009

  • CVE-2009-3896
    23Monitor

    src/http/ngx_http_parse.c in nginx (aka Engine X) 0.1.0 through 0.4.14, 0.5.x before 0.5.38, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0

    MediumCVSS 5.0No exploitEPSS 10%

    nginx · nginxNov 24, 2009

  • CVE-2009-3898
    24Monitor

    Directory traversal vulnerability in src/http/modules/ngx_http_dav_module.c in nginx (aka Engine X) before 0.7.63, and 0.8.x before 0.8.17,

    MediumCVSS 4.9Proof of conceptEPSS 15%

    nginx · nginxNov 24, 2009

  • CVE-2009-4073
    26Monitor

    The printing functionality in Microsoft Internet Explorer 8 allows remote attackers to discover a local pathname, and possibly a local usern

    MediumCVSS 5.0No exploitEPSS 19%

    microsoft · internet explorerNov 24, 2009

  • CVE-2009-3033
    49Plan

    Buffer overflow in the RunCmd method in the Altiris eXpress NS Console Utilities ActiveX control in AeXNSConsoleUtilities.dll in the web con

    CriticalCVSS 9.3WeaponizedEPSS 39%

    symantec · altiris deployment solutionNov 25, 2009

  • CVE-2009-4074
    21Monitor

    The XSS Filter in Microsoft Internet Explorer 8 allows remote attackers to leverage the "response-changing mechanism" to conduct cross-site

    MediumCVSS 4.3No exploitEPSS 14%

    microsoft · internet explorerNov 25, 2009

  • CVE-2009-4018
    33Monitor

    The proc_open function in ext/standard/proc_open.c in PHP before 5.2.11 and 5.3.x before 5.3.1 does not enforce the (1) safe_mode_allowed_en

    HighCVSS 7.5Proof of conceptEPSS 11%

    php · phpNov 29, 2009

  • CVE-2009-4098
    40Plan

    Unrestricted file upload vulnerability in banner-edit.php in OpenX adserver 2.8.1 and earlier allows remote authenticated users with banner

    MediumCVSS 6.0WeaponizedEPSS 18%

    openx · openxNov 29, 2009

  • CVE-2009-4019
    21Monitor

    mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors during execution of certain SELECT statement

    MediumCVSS 4.0Proof of conceptEPSS 16%

    mysql · mysqlNov 30, 2009

  • CVE-2009-4112
    39Monitor

    Cacti 0.8.7e and earlier allows remote authenticated administrators to gain privileges by modifying the "Data Input Method" for the "Linux -

    CriticalCVSS 9.0Proof of conceptEPSS 11%

    cacti · cactiNov 30, 2009