# CVEs published 2009-11-02 20 CVEs were published on November 2, 2009: 0 critical, 0 high. Days are UTC. - [CVE-2009-2267](https://cve.now/CVE-2009-2267.md): VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, VMware ACE 2.5.x before 2.5.3 build 18540 (no CVSS) - [CVE-2009-3605](https://cve.now/CVE-2009-3605.md): Multiple integer overflows in Poppler 0.10.5 and earlier allow remote attackers to cause a denial of service (application crash) or possibly (no CVSS) - [CVE-2009-3624](https://cve.now/CVE-2009-3624.md): The get\_instantiation\_keyring function in security/keys/keyctl.c in the KEYS subsystem in the Linux kernel before 2.6.32-rc5 does not proper (no CVSS) - [CVE-2009-3628](https://cve.now/CVE-2009-3628.md): The Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote auth (no CVSS, typo3/cms-backend) - [CVE-2009-3629](https://cve.now/CVE-2009-3629.md): Multiple cross-site scripting (XSS) vulnerabilities in the Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x befo (no CVSS, typo3/cms-backend) - [CVE-2009-3630](https://cve.now/CVE-2009-3630.md): The Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote auth (no CVSS, typo3/cms-backend) - [CVE-2009-3631](https://cve.now/CVE-2009-3631.md): The Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2, when the DAM exte (no CVSS, typo3/cms-backend) - [CVE-2009-3632](https://cve.now/CVE-2009-3632.md): SQL injection vulnerability in the traditional frontend editing feature in the Frontend Editing subcomponent in TYPO3 4.0.13 and earlier, 4. (no CVSS) - [CVE-2009-3633](https://cve.now/CVE-2009-3633.md): Cross-site scripting (XSS) vulnerability in the t3lib\_div::quoteJSvalue API function in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x (no CVSS, typo3/cms-core) - [CVE-2009-3634](https://cve.now/CVE-2009-3634.md): Cross-site scripting (XSS) vulnerability in the Frontend Login Box (aka felogin) subcomponent in TYPO3 4.2.0 through 4.2.6 allows remote att (no CVSS) - [CVE-2009-3635](https://cve.now/CVE-2009-3635.md): The Install Tool subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote (no CVSS, typo3/cms) - [CVE-2009-3636](https://cve.now/CVE-2009-3636.md): Cross-site scripting (XSS) vulnerability in the Install Tool subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2 (no CVSS, typo3/cms-install) - [CVE-2009-3733](https://cve.now/CVE-2009-3733.md): Directory traversal vulnerability in VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138 on Linux, VMware ESXi 3. (no CVSS) - [CVE-2009-3833](https://cve.now/CVE-2009-3833.md): Cross-site scripting (XSS) vulnerability in index.php in TFTgallery 0.13 allows remote attackers to inject arbitrary web script or HTML via (no CVSS) - [CVE-2009-3834](https://cve.now/CVE-2009-3834.md): SQL injection vulnerability in the Photoblog (com\_photoblog) component alpha 3 and alpha 3a for Joomla! allows remote attackers to execute a (no CVSS) - [CVE-2009-3835](https://cve.now/CVE-2009-3835.md): SQL injection vulnerability in the JShop (com\_jshop) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the (no CVSS) - [CVE-2009-3836](https://cve.now/CVE-2009-3836.md): ArubaOS 3.3.1.x, 3.3.2.x, RN 3.1.x, 3.4.x, and 3.3.2.x-FIPS on the Aruba Mobility Controller allows remote attackers to cause a denial of se (no CVSS) - [CVE-2009-3837](https://cve.now/CVE-2009-3837.md): Stack-based buffer overflow in Eureka Email 2.2q allows remote POP3 servers to execute arbitrary code via a long error message. (no CVSS) - [CVE-2009-3838](https://cve.now/CVE-2009-3838.md): Stack-based buffer overflow in Pegasus Mail (PMail) 4.41 and possibly 4.51 allows remote POP3 servers to cause a denial of service (applicat (no CVSS) - [CVE-2009-3839](https://cve.now/CVE-2009-3839.md): Unspecified vulnerability in the Solaris Trusted Extensions Policy configuration in Sun Solaris 10, and OpenSolaris snv\_37 through snv\_125, (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2009-11-02 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.