# CVEs published 2009-10-06 10 CVEs were published on October 6, 2009: 0 critical, 0 high. Days are UTC. - [CVE-2009-3527](https://cve.now/CVE-2009-3527.md): Race condition in the Pipe (IPC) close function in FreeBSD 6.3 and 6.4 allows local users to cause a denial of service (crash) or gain privi (no CVSS) - [CVE-2009-3567](https://cve.now/CVE-2009-3567.md): Cross-site scripting (XSS) vulnerability in modules/tickets/functions\_ticketsui.php in Kayako SupportSuite and eSupport 3.60.04 and earlier (no CVSS) - [CVE-2009-3568](https://cve.now/CVE-2009-3568.md): Comment RSS 5.x before 5.x-2.2 and 6.x before 6.x-2.2, a module for Drupal, does not properly enforce permissions when a link is added to th (no CVSS) - [CVE-2009-3569](https://cve.now/CVE-2009-3569.md): Stack-based buffer overflow in OpenOffice.org (OOo) allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrat (no CVSS) - [CVE-2009-3570](https://cve.now/CVE-2009-3570.md): Unspecified vulnerability in OpenOffice.org (OOo) has unspecified impact and remote attack vectors, as demonstrated by a certain module in V (no CVSS) - [CVE-2009-3571](https://cve.now/CVE-2009-3571.md): Unspecified vulnerability in OpenOffice.org (OOo) has unknown impact and client-side attack vector, as demonstrated by a certain module in V (no CVSS) - [CVE-2009-3572](https://cve.now/CVE-2009-3572.md): OpenBSD 4.4, 4.5, and 4.6, when running on an i386 kernel, does not properly handle XMM exceptions, which allows local users to cause a deni (no CVSS) - [CVE-2009-3573](https://cve.now/CVE-2009-3573.md): Multiple insecure method vulnerabilities in the PDIControl.PDI.1 ActiveX control (PDIControl.dll) 2.2.3160.0 in EMC Captiva PixTools Distrib (no CVSS) - [CVE-2009-3574](https://cve.now/CVE-2009-3574.md): Tuniac 090517c allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long File1 argument in (no CVSS) - [CVE-2009-3564](https://cve.now/CVE-2009-3564.md): puppetmasterd in puppet 0.24.6 does not reset supplementary groups when it switches to a different user, which might allow local users to ac (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2009-10-06 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.