# CVEs published 2009-11-04

17 CVEs were published on November 4, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-3862](https://cve.now/CVE-2009-3862.md): The NDSD process in Novell eDirectory 8.7.3 before 8.7.3.10 ftf2 and eDirectory 8.8 before 8.8.5 ftf1 does not properly handle certain LDAP (no CVSS)
- [CVE-2009-3863](https://cve.now/CVE-2009-3863.md): Buffer overflow in the gxmim1.dll ActiveX control in Novell Groupwise Client 7.0.3.1294 allows remote attackers to cause a denial of service (no CVSS)
- [CVE-2009-3856](https://cve.now/CVE-2009-3856.md): Cross-site scripting (XSS) vulnerability in the default URI in news/ in Twilight CMS before 4.1 allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2009-3857](https://cve.now/CVE-2009-3857.md): Buffer overflow in Softonic International SciTE 1.72 allows user-assisted remote attackers to cause a denial of service (application crash) (no CVSS)
- [CVE-2009-3858](https://cve.now/CVE-2009-3858.md): Cross-site scripting (XSS) vulnerability in GejoSoft allows remote attackers to inject arbitrary web script or HTML via the PATH\_INFO to the (no CVSS)
- [CVE-2009-3859](https://cve.now/CVE-2009-3859.md): Buffer overflow in eEye Retina WiFi Scanner 1.0.8.68, as used in Retina Network Security Scanner 5.10.14, allows user-assisted remote attack (no CVSS)
- [CVE-2009-3860](https://cve.now/CVE-2009-3860.md): Multiple insecure method vulnerabilities in Idefense Labs COMRaider allow remote attackers to create or overwrite arbitrary files via the (1 (no CVSS)
- [CVE-2009-3861](https://cve.now/CVE-2009-3861.md): Stack-based buffer overflow in SafeNet SoftRemote 10.8.5 (Build 2) and 10.3.5 (Build 6), and possibly other versions before 10.8.9, allows l (no CVSS)
- [CVE-2009-0306](https://cve.now/CVE-2009-0306.md): Buffer overflow in the IBM Lotus Notes Intellisync ActiveX control in lnresobject.dll in BlackBerry Desktop Manager in Research In Motion (R (no CVSS)
- [CVE-2009-3463](https://cve.now/CVE-2009-3463.md): Array index error in Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave conten (no CVSS)
- [CVE-2009-3464](https://cve.now/CVE-2009-3464.md): Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site, rela (no CVSS)
- [CVE-2009-3465](https://cve.now/CVE-2009-3465.md): Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site, rela (no CVSS)
- [CVE-2009-3466](https://cve.now/CVE-2009-3466.md): Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via a crafted web page that triggers memory corru (no CVSS)
- [CVE-2009-3547](https://cve.now/CVE-2009-3547.md): Multiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to cause a denial of service (NULL pointer der (no CVSS)
- [CVE-2009-3853](https://cve.now/CVE-2009-3853.md): Stack-based buffer overflow in the client acceptor daemon (CAD) scheduler in the client in IBM Tivoli Storage Manager (TSM) 5.3 before 5.3.6 (no CVSS)
- [CVE-2009-3854](https://cve.now/CVE-2009-3854.md): Buffer overflow in the traditional client scheduler in the client in IBM Tivoli Storage Manager (TSM) 5.3 before 5.3.6.7 and 5.4 before 5.4. (no CVSS)
- [CVE-2009-3855](https://cve.now/CVE-2009-3855.md): Multiple unspecified vulnerabilities in the (1) UNIX and (2) Linux backup-archive clients, and the (3) OS/400 API client, in IBM Tivoli Stor (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-11-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.