# CVEs published 2009-10-22 62 CVEs were published on October 22, 2009: 0 critical, 0 high. Days are UTC. - [CVE-2009-1007](https://cve.now/CVE-2009-1007.md): Unspecified vulnerability in the Data Mining component in Oracle Database 10.2.0.4 allows remote authenticated users to affect confidentiali (no CVSS) - [CVE-2009-1018](https://cve.now/CVE-2009-1018.md): Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 allows remote authenticated users to affect confide (no CVSS) - [CVE-2009-1964](https://cve.now/CVE-2009-1964.md): Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 allows remote authenticated users to affect confide (no CVSS) - [CVE-2009-1965](https://cve.now/CVE-2009-1965.md): Unspecified vulnerability in the Net Foundation Layer component in Oracle Database 9.2.0.8 and 10.1.0.5 allows remote attackers to affect co (no CVSS) - [CVE-2009-1971](https://cve.now/CVE-2009-1971.md): Unspecified vulnerability in the Data Pump component in Oracle Database 10.1.0.5, 10.2.0.3, and 11.1.0.7 allows remote authenticated users t (no CVSS) - [CVE-2009-1972](https://cve.now/CVE-2009-1972.md): Unspecified vulnerability in the Auditing component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote au (no CVSS) - [CVE-2009-1979](https://cve.now/CVE-2009-1979.md): Unspecified vulnerability in the Network Authentication component in Oracle Database 10.1.0.5 and 10.2.0.4 allows remote attackers to affect (no CVSS) - [CVE-2009-1985](https://cve.now/CVE-2009-1985.md): Unspecified vulnerability in the Network Authentication component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.4 allows remot (no CVSS) - [CVE-2009-1990](https://cve.now/CVE-2009-1990.md): Unspecified vulnerability in the Business Intelligence Enterprise Edition component in Oracle Application Server 10.1.3.4.1 allows local use (no CVSS) - [CVE-2009-1991](https://cve.now/CVE-2009-1991.md): Unspecified vulnerability in the Oracle Text component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.4 allows remote authentic (no CVSS) - [CVE-2009-1992](https://cve.now/CVE-2009-1992.md): Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.2.0.8, 10.1.0.5, and 10.2.0.4 allows remote attackers to affect c (no CVSS) - [CVE-2009-1993](https://cve.now/CVE-2009-1993.md): Unspecified vulnerability in the Application Express component in Oracle Database 3.0.1 allows remote authenticated users to affect confiden (no CVSS) - [CVE-2009-1994](https://cve.now/CVE-2009-1994.md): Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 allows remote authenticated users to affect confidenti (no CVSS) - [CVE-2009-1995](https://cve.now/CVE-2009-1995.md): Unspecified vulnerability in the Advanced Queuing component in Oracle Database 10.2.0.4 and 11.1.0.7 allows remote authenticated users to af (no CVSS) - [CVE-2009-1997](https://cve.now/CVE-2009-1997.md): Unspecified vulnerability in the Authentication component in Oracle Database 10.2.0.3 and 11.1.0.7 allows remote attackers to affect confide (no CVSS) - [CVE-2009-1998](https://cve.now/CVE-2009-1998.md): Unspecified vulnerability in the Oracle Communications Order and Service Management component in Oracle Industry Applications 2.8.0, 6.2.0, (no CVSS) - [CVE-2009-1999](https://cve.now/CVE-2009-1999.md): Unspecified vulnerability in the Business Intelligence Enterprise Edition component in unspecified Oracle Application Server versions allows (no CVSS) - [CVE-2009-2000](https://cve.now/CVE-2009-2000.md): Unspecified vulnerability in the Authentication component in Oracle Database 11.1.0.7 allows remote attackers to affect confidentiality via (no CVSS) - [CVE-2009-2001](https://cve.now/CVE-2009-2001.md): Unspecified vulnerability in the PL/SQL component in Oracle Database 10.2.0.4 and 11.1.0.7 allows remote authenticated users to affect confi (no CVSS) - [CVE-2009-2002](https://cve.now/CVE-2009-2002.md): Unspecified vulnerability in the WebLogic Portal component in BEA Product Suite 8.1.6, 9.2.3, 10.0.1, 10.2.1, and 10.3.1.0.0 allows remote a (no CVSS) - [CVE-2009-3392](https://cve.now/CVE-2009-3392.md): Unspecified vulnerability in the Agile Engineering Data Management (EDM) component in Oracle E-Business Suite 6.1.0.0 allows remote attacker (no CVSS) - [CVE-2009-3393](https://cve.now/CVE-2009-3393.md): Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to (no CVSS) - [CVE-2009-3395](https://cve.now/CVE-2009-3395.md): Unspecified vulnerability in the AutoVue component in Oracle E-Business Suite 19.3.2 allows remote attackers to affect availability via unkn (no CVSS) - [CVE-2009-3396](https://cve.now/CVE-2009-3396.md): Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.0, 9.1, 9.2.3, 10.0.1, and 10.3 allows remote attackers to (no CVSS) - [CVE-2009-3397](https://cve.now/CVE-2009-3397.md): Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6 and 12.1.1 allows remote atta (no CVSS) - [CVE-2009-3399](https://cve.now/CVE-2009-3399.md): Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 7.0.6 and 8.1.5 allows remote attackers to affect integrity, (no CVSS) - [CVE-2009-3400](https://cve.now/CVE-2009-3400.md): Unspecified vulnerability in the Oracle Advanced Benefits component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.1 allows remote a (no CVSS) - [CVE-2009-3401](https://cve.now/CVE-2009-3401.md): Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.1 all (no CVSS) - [CVE-2009-3402](https://cve.now/CVE-2009-3402.md): Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.1 allows rem (no CVSS) - [CVE-2009-3403](https://cve.now/CVE-2009-3403.md): Unspecified vulnerability in the JRockit component in BEA Product Suite R27.6.4: JRE/JDK, 1.4.2, 5, and, and 6 allows remote attackers to af (no CVSS) - [CVE-2009-3404](https://cve.now/CVE-2009-3404.md): Unspecified vulnerability in the PeopleSoft PeopleTools & Enterprise Portal component in Oracle PeopleSoft Enterprise and JD Edwards Enterpr (no CVSS) - [CVE-2009-3405](https://cve.now/CVE-2009-3405.md): Unspecified vulnerability in the JD Edwards Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.98.1.4 allows rem (no CVSS) - [CVE-2009-3406](https://cve.now/CVE-2009-3406.md): Unspecified vulnerability in the JD Edwards Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.98.2.1 allows rem (no CVSS) - [CVE-2009-3407](https://cve.now/CVE-2009-3407.md): Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.2.3 and 10.1.4.2 allows remote attackers to affect integ (no CVSS) - [CVE-2009-3408](https://cve.now/CVE-2009-3408.md): Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10 allows remote attackers to a (no CVSS) - [CVE-2009-3409](https://cve.now/CVE-2009-3409.md): Unspecified vulnerability in the PeopleSoft Enterprise HCM (TAM) component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 9.0 (no CVSS) - [CVE-2009-3747](https://cve.now/CVE-2009-3747.md): Cross-site scripting (XSS) vulnerability in index.php in TBmnetCMS 1.0 allows remote attackers to inject arbitrary web script or HTML via th (no CVSS) - [CVE-2009-3748](https://cve.now/CVE-2009-3748.md): Multiple cross-site scripting (XSS) vulnerabilities in the Web Administrator in Websense Personal Email Manager 7.1 before Hotfix 4 and Emai (no CVSS) - [CVE-2009-3749](https://cve.now/CVE-2009-3749.md): The Web Administrator service (STEMWADM.EXE) in Websense Personal Email Manager 7.1 before Hotfix 4 and Email Security 7.1 before Hotfix 4 a (no CVSS) - [CVE-2009-3750](https://cve.now/CVE-2009-3750.md): SQL injection vulnerability in read.php in ToyLog 0.1 allows remote attackers to execute arbitrary SQL commands via the idm parameter. (no CVSS) - [CVE-2009-3751](https://cve.now/CVE-2009-3751.md): Cross-site scripting (XSS) vulnerability in home.php in Opial 1.0 allows remote attackers to inject arbitrary web script or HTML via the gen (no CVSS) - [CVE-2009-3752](https://cve.now/CVE-2009-3752.md): SQL injection vulnerability in home.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the genres\_parent paramet (no CVSS) - [CVE-2009-3753](https://cve.now/CVE-2009-3753.md): Unrestricted file upload vulnerability in Opial 1.0 allows remote attackers to execute arbitrary code by uploading a file with an executable (no CVSS) - [CVE-2009-3754](https://cve.now/CVE-2009-3754.md): Multiple SQL injection vulnerabilities in phpBMS 0.96 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to m (no CVSS) - [CVE-2009-3755](https://cve.now/CVE-2009-3755.md): Multiple cross-site scripting (XSS) vulnerabilities in phpBMS 0.96 allow remote attackers to inject arbitrary web script or HTML via the PAT (no CVSS) - [CVE-2009-3756](https://cve.now/CVE-2009-3756.md): phpBMS 0.96 allows remote attackers to obtain sensitive information via a direct request to (1) footer.php, (2) header.php, (3) the show act (no CVSS) - [CVE-2009-3757](https://cve.now/CVE-2009-3757.md): Multiple cross-site scripting (XSS) vulnerabilities in sample code in the XenServer Resource Kit in Citrix XenCenterWeb allow remote attacke (no CVSS) - [CVE-2009-3758](https://cve.now/CVE-2009-3758.md): SQL injection vulnerability in login.php in sample code in the XenServer Resource Kit in Citrix XenCenterWeb allows remote attackers to exec (no CVSS) - [CVE-2009-3759](https://cve.now/CVE-2009-3759.md): Multiple cross-site request forgery (CSRF) vulnerabilities in sample code in the XenServer Resource Kit in Citrix XenCenterWeb allow remote (no CVSS) - [CVE-2009-3760](https://cve.now/CVE-2009-3760.md): Static code injection vulnerability in config/writeconfig.php in the sample code in the XenServer Resource Kit in Citrix XenCenterWeb allows (no CVSS) - [CVE-2009-2911](https://cve.now/CVE-2009-2911.md): SystemTap 1.0, when the --unprivileged option is used, does not properly restrict certain data sizes, which allows local users to (1) cause (no CVSS) - [CVE-2009-2940](https://cve.now/CVE-2009-2940.md): The pygresql module 3.8.1 and 4.0 for Python does not properly support the PQescapeStringConn function, which might allow remote attackers t (no CVSS, pygresql) - [CVE-2009-2942](https://cve.now/CVE-2009-2942.md): The mysql-ocaml bindings 1.0.4 for MySQL do not properly support the mysql\_real\_escape\_string function, which might allow remote attackers t (no CVSS) - [CVE-2009-2943](https://cve.now/CVE-2009-2943.md): The postgresql-ocaml bindings 1.5.4, 1.7.0, and 1.12.1 for PostgreSQL libpq do not properly support the PQescapeStringConn function, which m (no CVSS) - [CVE-2009-3746](https://cve.now/CVE-2009-3746.md): XScreenSaver in Sun Solaris 10, when the accessibility feature is enabled, allows physically proximate attackers to obtain sensitive informa (no CVSS) - [CVE-2008-3684](https://cve.now/CVE-2008-3684.md): Heap-based buffer overflow in aws\_tmxn.exe in the Admin Agent service in the server in EMC Documentum ApplicationXtender Workflow, possibly (no CVSS) - [CVE-2008-3685](https://cve.now/CVE-2008-3685.md): Directory traversal vulnerability in aws\_tmxn.exe in the Admin Agent service in the server in EMC Documentum ApplicationXtender Workflow, po (no CVSS) - [CVE-2009-1479](https://cve.now/CVE-2009-1479.md): Directory traversal vulnerability in client/desktop/default.htm in Boxalino before 09.05.25-0421 allows remote attackers to read arbitrary f (no CVSS) - [CVE-2009-3620](https://cve.now/CVE-2009-3620.md): The ATI Rage 128 (aka r128) driver in the Linux kernel before 2.6.31-git11 does not properly verify Concurrent Command Engine (CCE) state in (no CVSS) - [CVE-2009-3621](https://cve.now/CVE-2009-3621.md): net/unix/af\_unix.c in the Linux kernel 2.6.31.4 and earlier allows local users to cause a denial of service (system hang) by creating an abs (no CVSS) - [CVE-2009-3744](https://cve.now/CVE-2009-3744.md): rep\_serv.exe 6.3.1.3 in the server in EMC RepliStor allows remote attackers to cause a denial of service via a crafted packet to TCP port 71 (no CVSS) - [CVE-2009-3745](https://cve.now/CVE-2009-3745.md): Cross-site scripting (XSS) vulnerability in the help pages in IBM Rational AppScan Enterprise Edition 5.5.0.2 allows remote attackers to inj (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2009-10-22 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.