# CVEs published 2009-10-13

14 CVEs were published on October 13, 2009: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2009-2684](https://cve.now/CVE-2009-2684.md): Multiple cross-site scripting (XSS) vulnerabilities in Jetdirect and the Embedded Web Server (EWS) on certain HP LaserJet and Color… (no CVSS)
- [CVE-2009-2699](https://cve.now/CVE-2009-2699.md): The Solaris pollset feature in the Event Port backend in poll/unix/port.c in the Apache Portable Runtime (APR) library before 1.3.9, as… (no CVSS)
- [CVE-2009-2897](https://cve.now/CVE-2009-2897.md): Multiple cross-site scripting (XSS) vulnerabilities in hq/web/common/GenericError.jsp in the generic exception handler in the web… (no CVSS)
- [CVE-2009-2898](https://cve.now/CVE-2009-2898.md): Cross-site scripting (XSS) vulnerability in the Alerts list feature in the web interface in SpringSource Hyperic HQ 3.2.x before 3.2.6.1… (no CVSS)
- [CVE-2009-2908](https://cve.now/CVE-2009-2908.md): The d\_delete function in fs/ecryptfs/inode.c in eCryptfs in the Linux kernel 2.6.31 allows local users to cause a denial of service… (no CVSS)
- [CVE-2009-3459](https://cve.now/CVE-2009-3459.md): Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to exe (CVSS 8.8, KEV)
- [CVE-2009-3587](https://cve.now/CVE-2009-3587.md): Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus)… (no CVSS)
- [CVE-2009-3588](https://cve.now/CVE-2009-3588.md): Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus)… (no CVSS)
- [CVE-2009-3602](https://cve.now/CVE-2009-3602.md): Unbound before 1.3.4 does not properly verify signatures for NSEC3 records, which allows remote attackers to cause secure delegations to… (no CVSS)
- [CVE-2009-3691](https://cve.now/CVE-2009-3691.md): Multiple integer overflows in setnet32.exe 3.50.0.13752 in IBM Informix Client SDK 3.0 and 3.50 and Informix Connect Runtime 3.x allow… (no CVSS)
- [CVE-2009-3692](https://cve.now/CVE-2009-3692.md): Unspecified vulnerability in the VBoxNetAdpCtl configuration tool in Sun VirtualBox 3.0.x before 3.0.8 on Solaris x86, Linux, and Mac OS X… (no CVSS)
- [CVE-2009-3693](https://cve.now/CVE-2009-3693.md): Directory traversal vulnerability in the Persits.XUpload.2 ActiveX control (XUpload.ocx) in HP LoadRunner 9.5 allows remote attackers to… (no CVSS)
- [CVE-2009-3694](https://cve.now/CVE-2009-3694.md): Directory traversal vulnerability in config/config.php in ezRecipe-Zee 91, when register\_globals is enabled, allows remote attackers to… (no CVSS)
- [CVE-2009-3695](https://cve.now/CVE-2009-3695.md): Algorithmic complexity vulnerability in the forms library in Django 1.0 before 1.0.4 and 1.1 before 1.1.1 allows remote attackers to cause… (no CVSS, django)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2009-10-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.