# CVEs published 2009-11-03

6 CVEs were published on November 3, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-3031](https://cve.now/CVE-2009-3031.md): Stack-based buffer overflow in the BrowseAndSaveFile method in the Altiris eXpress NS ConsoleUtilities ActiveX control 6.0.0.1846 in AeXNSCo (no CVSS)
- [CVE-2009-3298](https://cve.now/CVE-2009-3298.md): Mahara before 1.0.13, and 1.1.x before 1.1.7, allows remote authenticated institution administrators to reset a site administrator password (no CVSS)
- [CVE-2009-3299](https://cve.now/CVE-2009-3299.md): Cross-site scripting (XSS) vulnerability in the resume blocktype in Mahara before 1.0.13, and 1.1.x before 1.1.7, allows remote attackers to (no CVSS)
- [CVE-2009-3720](https://cve.now/CVE-2009-3720.md): The updatePosition function in lib/xmltok\_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allow (no CVSS)
- [CVE-2009-3851](https://cve.now/CVE-2009-3851.md): Trusted Extensions in Sun Solaris 10 interferes with the operation of the xscreensaver-demo command for the XScreenSaver application, which (no CVSS)
- [CVE-2009-3852](https://cve.now/CVE-2009-3852.md): Unspecified vulnerability in the XML component in IBM Runtimes for Java Technology 5.0.0 before SR10 has unknown impact and attack vectors, (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-11-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.