# CVEs published 2009-12-10

36 CVEs were published on December 10, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-0898](https://cve.now/CVE-2009-0898.md): Stack-based buffer overflow in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2009-4237](https://cve.now/CVE-2009-4237.md): Multiple cross-site scripting (XSS) vulnerabilities in TestLink before 1.8.5 allow remote attackers to inject arbitrary web script or HTML… (no CVSS)
- [CVE-2009-4238](https://cve.now/CVE-2009-4238.md): Multiple SQL injection vulnerabilities in TestLink before 1.8.5 allow remote authenticated users to execute arbitrary SQL commands via (1)… (no CVSS)
- [CVE-2009-4292](https://cve.now/CVE-2009-4292.md): Buffer overflow in the URL filtering function in Internet Initiative Japan SEIL/X1, SEIL/X2, and SEIL/B1 firmware 2.40 through 2.51 allows… (no CVSS)
- [CVE-2009-4293](https://cve.now/CVE-2009-4293.md): Internet Initiative Japan SEIL/X1, SEIL/X2, and SEIL/B1 firmware 2.30 through 2.51, when NAT is enabled, allows remote attackers to cause… (no CVSS)
- [CVE-2009-3845](https://cve.now/CVE-2009-3845.md): The port-3443 HTTP server in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2009-3846](https://cve.now/CVE-2009-3846.md): Multiple heap-based buffer overflows in ovlogin.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote… (no CVSS)
- [CVE-2009-3847](https://cve.now/CVE-2009-3847.md): Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2009-3848](https://cve.now/CVE-2009-3848.md): Stack-based buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers… (no CVSS)
- [CVE-2009-3849](https://cve.now/CVE-2009-3849.md): Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute… (no CVSS)
- [CVE-2009-4176](https://cve.now/CVE-2009-4176.md): Multiple heap-based buffer overflows in ovsessionmgr.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote… (no CVSS)
- [CVE-2009-4177](https://cve.now/CVE-2009-4177.md): Buffer overflow in webappmon.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute… (no CVSS)
- [CVE-2009-4178](https://cve.now/CVE-2009-4178.md): Heap-based buffer overflow in OvWebHelp.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to… (no CVSS)
- [CVE-2009-4179](https://cve.now/CVE-2009-4179.md): Stack-based buffer overflow in ovalarm.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to… (no CVSS)
- [CVE-2009-4180](https://cve.now/CVE-2009-4180.md): Stack-based buffer overflow in snmpviewer.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to… (no CVSS)
- [CVE-2009-4181](https://cve.now/CVE-2009-4181.md): Stack-based buffer overflow in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers… (no CVSS)
- [CVE-2009-3794](https://cve.now/CVE-2009-3794.md): Heap-based buffer overflow in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2009-3796](https://cve.now/CVE-2009-3796.md): Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 might allow attackers to execute arbitrary code via unspecified vectors… (no CVSS)
- [CVE-2009-3797](https://cve.now/CVE-2009-3797.md): Adobe Flash Player 10.x before 10.0.42.34 and Adobe AIR before 1.5.3 might allow attackers to execute arbitrary code via unspecified… (no CVSS)
- [CVE-2009-3798](https://cve.now/CVE-2009-3798.md): Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 might allow attackers to execute arbitrary code via unspecified vectors… (no CVSS)
- [CVE-2009-3799](https://cve.now/CVE-2009-3799.md): Integer overflow in the Verifier::parseExceptionHandlers function in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3… (no CVSS)
- [CVE-2009-3800](https://cve.now/CVE-2009-3800.md): Multiple unspecified vulnerabilities in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allow attackers to cause a denial… (no CVSS)
- [CVE-2009-3951](https://cve.now/CVE-2009-3951.md): Unspecified vulnerability in the Flash Player ActiveX control in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 on… (no CVSS)
- [CVE-2009-4262](https://cve.now/CVE-2009-4262.md): Harold Bakker's NewsScript (HB-NS) 1.3 allows remote attackers to obtain access to the admin control panel via a direct request to… (no CVSS)
- [CVE-2009-4263](https://cve.now/CVE-2009-4263.md): SQL injection vulnerability in main\_forum.php in PTCPay GeN3 forum 1.3 allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2009-4264](https://cve.now/CVE-2009-4264.md): PHP remote file inclusion vulnerability in components/core/connect.php in AROUNDMe 1.1 and earlier, when register\_globals is enabled… (no CVSS)
- [CVE-2009-4265](https://cve.now/CVE-2009-4265.md): Stack-based buffer overflow in Ideal Administration 2009 9.7.1, and possibly other versions, allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2009-4266](https://cve.now/CVE-2009-4266.md): Cross-site scripting (XSS) vulnerability in search.php in YABSoft Advanced Image Hosting (AIH) Script 2.2, and possibly 2.3, allows remote… (no CVSS)
- [CVE-2009-4252](https://cve.now/CVE-2009-4252.md): Cross-site scripting (XSS) vulnerability in images.php in Image Hosting Script DPI 1.1 Final (1.1F) allows remote attackers to inject… (no CVSS)
- [CVE-2009-4253](https://cve.now/CVE-2009-4253.md): Cross-site scripting (XSS) vulnerability in dspStats.php in PowerPhlogger 2.2.5 allows remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2009-4254](https://cve.now/CVE-2009-4254.md): PowerPhlogger 2.2.5 allows remote attackers to obtain sensitive information via a direct request to (1) edCss.inc.php, (2) foot.inc.php… (no CVSS)
- [CVE-2009-4255](https://cve.now/CVE-2009-4255.md): Cross-site scripting (XSS) vulnerability in the You!Hostit! template 1.0.1 for Joomla! allows remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2009-4256](https://cve.now/CVE-2009-4256.md): Multiple SQL injection vulnerabilities in cource.php in AlefMentor 2.0 and 2.2 allow remote attackers to execute arbitrary SQL commands… (no CVSS)
- [CVE-2009-4249](https://cve.now/CVE-2009-4249.md): Multiple cross-site scripting (XSS) vulnerabilities in CutePHP CuteNews 1.4.6, when register\_globals is enabled and magic\_quotes\_gpc is… (no CVSS)
- [CVE-2009-4250](https://cve.now/CVE-2009-4250.md): Multiple cross-site scripting (XSS) vulnerabilities in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allow remote attackers to… (no CVSS)
- [CVE-2009-4251](https://cve.now/CVE-2009-4251.md): Stack-based buffer overflow in Jasc Paint Shop Pro 8.10 (aka Corel Paint Shop Pro) allows user-assisted remote attackers to execute… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2009-12-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.