# CVEs published 2009-10-28

14 CVEs were published on October 28, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-3639](https://cve.now/CVE-2009-3639.md): The mod\_tls module in ProFTPD before 1.3.2b, and 1.3.3 before 1.3.3rc2, when the dNSNameRequired TLS option is enabled, does not properly ha (no CVSS)
- [CVE-2009-3641](https://cve.now/CVE-2009-3641.md): Snort before 2.8.5.1, when the -v option is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted (no CVSS)
- [CVE-2009-3700](https://cve.now/CVE-2009-3700.md): Buffer overflow in sgLog.c in squidGuard 1.3 and 1.4 allows remote attackers to cause a denial of service (application hang or loss of block (no CVSS)
- [CVE-2009-3826](https://cve.now/CVE-2009-3826.md): Multiple buffer overflows in squidGuard 1.4 allow remote attackers to bypass intended URL blocking via a long URL, related to (1) the relati (no CVSS)
- [CVE-2009-3816](https://cve.now/CVE-2009-3816.md): Multiple cross-site scripting (XSS) vulnerabilities in Activities pages in the Mobile subsystem in IBM Lotus Connections 2.5.0.0 allow remot (no CVSS)
- [CVE-2009-3817](https://cve.now/CVE-2009-3817.md): PHP remote file inclusion vulnerability in doc/releasenote.php in the BookLibrary (com\_booklibrary) component 1.0 for Joomla! allows remote (no CVSS)
- [CVE-2009-3818](https://cve.now/CVE-2009-3818.md): Unspecified vulnerability in the session handling feature in freeCap CAPTCHA (sr\_freecap) extension 1.2.0 and earlier for TYPO3 has unknown (no CVSS, sjbr/sr-freecap)
- [CVE-2009-3819](https://cve.now/CVE-2009-3819.md): Unspecified vulnerability in the Random Images (maag\_randomimage) extension 1.6.4 and earlier for TYPO3 allows remote attackers to execute a (no CVSS)
- [CVE-2009-3820](https://cve.now/CVE-2009-3820.md): SQL injection vulnerability in the Flagbit Filebase (fb\_filebase) extension 0.1.0 for TYPO3 allows remote attackers to execute arbitrary SQL (no CVSS)
- [CVE-2009-3821](https://cve.now/CVE-2009-3821.md): Cross-site scripting (XSS) vulnerability in the Apache Solr Search (solr) extension 1.0.0 for TYPO3 allows remote attackers to inject arbitr (no CVSS, apache-solr-for-typo3/solr)
- [CVE-2009-3822](https://cve.now/CVE-2009-3822.md): PHP remote file inclusion vulnerability in Fiji Web Design Ajax Chat (com\_ajaxchat) component 1.0 for Joomla! allows remote attackers to exe (no CVSS)
- [CVE-2009-3823](https://cve.now/CVE-2009-3823.md): Directory traversal vulnerability in myhtml.php in Mobilelib GOLD 3.0, when magic\_quotes\_gpc is enabled, allows remote attackers to read arb (no CVSS)
- [CVE-2009-3824](https://cve.now/CVE-2009-3824.md): Directory traversal vulnerability in include/processor.php in Greenwood PHP Content Manager 0.3.2 allows remote attackers to include and exe (no CVSS)
- [CVE-2009-3825](https://cve.now/CVE-2009-3825.md): Multiple directory traversal vulnerabilities in GenCMS 2006 allow remote attackers to include and execute arbitrary local files via a .. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-10-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.