# CVEs published 2009-11-04

17 CVEs were published on November 4, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-3862](https://cve.now/CVE-2009-3862.md): The NDSD process in Novell eDirectory 8.7.3 before 8.7.3.10 ftf2 and eDirectory 8.8 before 8.8.5 ftf1 does not properly handle certain… (no CVSS)
- [CVE-2009-3863](https://cve.now/CVE-2009-3863.md): Buffer overflow in the gxmim1.dll ActiveX control in Novell Groupwise Client 7.0.3.1294 allows remote attackers to cause a denial of… (no CVSS)
- [CVE-2009-3856](https://cve.now/CVE-2009-3856.md): Cross-site scripting (XSS) vulnerability in the default URI in news/ in Twilight CMS before 4.1 allows remote attackers to inject… (no CVSS)
- [CVE-2009-3857](https://cve.now/CVE-2009-3857.md): Buffer overflow in Softonic International SciTE 1.72 allows user-assisted remote attackers to cause a denial of service (application… (no CVSS)
- [CVE-2009-3858](https://cve.now/CVE-2009-3858.md): Cross-site scripting (XSS) vulnerability in GejoSoft allows remote attackers to inject arbitrary web script or HTML via the PATH\_INFO to… (no CVSS)
- [CVE-2009-3859](https://cve.now/CVE-2009-3859.md): Buffer overflow in eEye Retina WiFi Scanner 1.0.8.68, as used in Retina Network Security Scanner 5.10.14, allows user-assisted remote… (no CVSS)
- [CVE-2009-3860](https://cve.now/CVE-2009-3860.md): Multiple insecure method vulnerabilities in Idefense Labs COMRaider allow remote attackers to create or overwrite arbitrary files via the… (no CVSS)
- [CVE-2009-3861](https://cve.now/CVE-2009-3861.md): Stack-based buffer overflow in SafeNet SoftRemote 10.8.5 (Build 2) and 10.3.5 (Build 6), and possibly other versions before 10.8.9, allows… (no CVSS)
- [CVE-2009-0306](https://cve.now/CVE-2009-0306.md): Buffer overflow in the IBM Lotus Notes Intellisync ActiveX control in lnresobject.dll in BlackBerry Desktop Manager in Research In Motion… (no CVSS)
- [CVE-2009-3463](https://cve.now/CVE-2009-3463.md): Array index error in Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave… (no CVSS)
- [CVE-2009-3464](https://cve.now/CVE-2009-3464.md): Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site… (no CVSS)
- [CVE-2009-3465](https://cve.now/CVE-2009-3465.md): Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site… (no CVSS)
- [CVE-2009-3466](https://cve.now/CVE-2009-3466.md): Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via a crafted web page that triggers memory… (no CVSS)
- [CVE-2009-3547](https://cve.now/CVE-2009-3547.md): Multiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to cause a denial of service (NULL pointer… (no CVSS)
- [CVE-2009-3853](https://cve.now/CVE-2009-3853.md): Stack-based buffer overflow in the client acceptor daemon (CAD) scheduler in the client in IBM Tivoli Storage Manager (TSM) 5.3 before… (no CVSS)
- [CVE-2009-3854](https://cve.now/CVE-2009-3854.md): Buffer overflow in the traditional client scheduler in the client in IBM Tivoli Storage Manager (TSM) 5.3 before 5.3.6.7 and 5.4 before… (no CVSS)
- [CVE-2009-3855](https://cve.now/CVE-2009-3855.md): Multiple unspecified vulnerabilities in the (1) UNIX and (2) Linux backup-archive clients, and the (3) OS/400 API client, in IBM Tivoli… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2009-11-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.