# CVEs published 2009-11-16

15 CVEs were published on November 16, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-3945](https://cve.now/CVE-2009-3945.md): Unspecified vulnerability in the Front-End Editor in the com\_content component in Joomla! before 1.5.15 allows remote authenticated users, w (no CVSS)
- [CVE-2009-3946](https://cve.now/CVE-2009-3946.md): Joomla! before 1.5.15 allows remote attackers to read an extension's XML file, and thereby obtain the extension's version number, via a dire (no CVSS)
- [CVE-2009-3947](https://cve.now/CVE-2009-3947.md): Buffer overflow in the FTP service on the Tandberg MXP F7.0 allows remote attackers to cause a denial of service (process crash or device re (no CVSS)
- [CVE-2009-3948](https://cve.now/CVE-2009-3948.md): JetAudio 7.5.3 COWON Media Center allows remote attackers to cause a denial of service (memory consumption and application crash) via a long (no CVSS)
- [CVE-2009-3949](https://cve.now/CVE-2009-3949.md): cp/profile.php in VivaPrograms Infinity 2.0.5 and earlier does not require administrative authentication for the donewauthor action, which a (no CVSS)
- [CVE-2009-3950](https://cve.now/CVE-2009-3950.md): Multiple cross-site scripting (XSS) vulnerabilities in Bractus SunTrack allow remote attackers to inject arbitrary web script or HTML via th (no CVSS)
- [CVE-2009-2746](https://cve.now/CVE-2009-2746.md): Cross-site request forgery (CSRF) vulnerability in the administrative console in the Security component in IBM WebSphere Application Server (no CVSS)
- [CVE-2009-3888](https://cve.now/CVE-2009-3888.md): The do\_mmap\_pgoff function in mm/nommu.c in the Linux kernel before 2.6.31.6, when the CPU lacks a memory management unit, allows local user (no CVSS)
- [CVE-2009-3889](https://cve.now/CVE-2009-3889.md): The dbg\_lvl file for the megaraid\_sas driver in the Linux kernel before 2.6.27 has world-writable permissions, which allows local users to c (no CVSS)
- [CVE-2009-3939](https://cve.now/CVE-2009-3939.md): The poll\_mode\_io file for the megaraid\_sas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows loca (no CVSS)
- [CVE-2009-3940](https://cve.now/CVE-2009-3940.md): Unspecified vulnerability in Guest Additions in Sun xVM VirtualBox 1.6.x and 2.0.x before 2.0.12, 2.1.x, and 2.2.x, and Sun VirtualBox befor (no CVSS)
- [CVE-2009-3941](https://cve.now/CVE-2009-3941.md): Martin Lambers mpop before 1.0.19, when OpenSSL is used, does not properly handle a '\\0' character in a domain name in the (1) subject's Com (no CVSS)
- [CVE-2009-3942](https://cve.now/CVE-2009-3942.md): Martin Lambers msmtp before 1.4.19, when OpenSSL is used, does not properly handle a '\\0' character in a domain name in the (1) subject's Co (no CVSS)
- [CVE-2009-3943](https://cve.now/CVE-2009-3943.md): Microsoft Internet Explorer 6 through 6.0.2900.2180 and 7 through 7.0.6000.16711 allows remote attackers to cause a denial of service (appli (no CVSS)
- [CVE-2009-3944](https://cve.now/CVE-2009-3944.md): Research In Motion (RIM) BlackBerry Browser on the BlackBerry 8800 allows remote attackers to cause a denial of service (application hang) v (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-11-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.