# CVEs published 2009-10-13

14 CVEs were published on October 13, 2009: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2009-2684](https://cve.now/CVE-2009-2684.md): Multiple cross-site scripting (XSS) vulnerabilities in Jetdirect and the Embedded Web Server (EWS) on certain HP LaserJet and Color LaserJet (no CVSS)
- [CVE-2009-2699](https://cve.now/CVE-2009-2699.md): The Solaris pollset feature in the Event Port backend in poll/unix/port.c in the Apache Portable Runtime (APR) library before 1.3.9, as used (no CVSS)
- [CVE-2009-2897](https://cve.now/CVE-2009-2897.md): Multiple cross-site scripting (XSS) vulnerabilities in hq/web/common/GenericError.jsp in the generic exception handler in the web interface (no CVSS)
- [CVE-2009-2898](https://cve.now/CVE-2009-2898.md): Cross-site scripting (XSS) vulnerability in the Alerts list feature in the web interface in SpringSource Hyperic HQ 3.2.x before 3.2.6.1, 4. (no CVSS)
- [CVE-2009-2908](https://cve.now/CVE-2009-2908.md): The d\_delete function in fs/ecryptfs/inode.c in eCryptfs in the Linux kernel 2.6.31 allows local users to cause a denial of service (kernel (no CVSS)
- [CVE-2009-3459](https://cve.now/CVE-2009-3459.md): Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to exe (CVSS 8.8, KEV)
- [CVE-2009-3587](https://cve.now/CVE-2009-3587.md): Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7 (no CVSS)
- [CVE-2009-3588](https://cve.now/CVE-2009-3588.md): Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7 (no CVSS)
- [CVE-2009-3602](https://cve.now/CVE-2009-3602.md): Unbound before 1.3.4 does not properly verify signatures for NSEC3 records, which allows remote attackers to cause secure delegations to be (no CVSS)
- [CVE-2009-3691](https://cve.now/CVE-2009-3691.md): Multiple integer overflows in setnet32.exe 3.50.0.13752 in IBM Informix Client SDK 3.0 and 3.50 and Informix Connect Runtime 3.x allow remot (no CVSS)
- [CVE-2009-3692](https://cve.now/CVE-2009-3692.md): Unspecified vulnerability in the VBoxNetAdpCtl configuration tool in Sun VirtualBox 3.0.x before 3.0.8 on Solaris x86, Linux, and Mac OS X a (no CVSS)
- [CVE-2009-3693](https://cve.now/CVE-2009-3693.md): Directory traversal vulnerability in the Persits.XUpload.2 ActiveX control (XUpload.ocx) in HP LoadRunner 9.5 allows remote attackers to cre (no CVSS)
- [CVE-2009-3694](https://cve.now/CVE-2009-3694.md): Directory traversal vulnerability in config/config.php in ezRecipe-Zee 91, when register\_globals is enabled, allows remote attackers to incl (no CVSS)
- [CVE-2009-3695](https://cve.now/CVE-2009-3695.md): Algorithmic complexity vulnerability in the forms library in Django 1.0 before 1.0.4 and 1.1 before 1.1.1 allows remote attackers to cause a (no CVSS, django)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-10-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.