# CVEs published 2009-11-25 9 CVEs were published on November 25, 2009: 0 critical, 0 high. Days are UTC. - [CVE-2009-4076](https://cve.now/CVE-2009-4076.md): Cross-site request forgery (CSRF) vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication (no CVSS) - [CVE-2009-4077](https://cve.now/CVE-2009-4077.md): Cross-site request forgery (CSRF) vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication (no CVSS) - [CVE-2009-4078](https://cve.now/CVE-2009-4078.md): Multiple cross-site scripting (XSS) vulnerabilities in Redmine 0.8.5 and earlier allow remote attackers to inject arbitrary web script or HT (no CVSS) - [CVE-2009-4079](https://cve.now/CVE-2009-4079.md): Cross-site request forgery (CSRF) vulnerability in Redmine 0.8.5 and earlier allows remote attackers to hijack the authentication of users f (no CVSS) - [CVE-2009-4074](https://cve.now/CVE-2009-4074.md): The XSS Filter in Microsoft Internet Explorer 8 allows remote attackers to leverage the "response-changing mechanism" to conduct cross-site (no CVSS) - [CVE-2009-4075](https://cve.now/CVE-2009-4075.md): Unspecified vulnerability in the timeout mechanism in sshd in Sun Solaris 10, and OpenSolaris snv\_99 through snv\_123, allows remote attacker (no CVSS) - [CVE-2009-3033](https://cve.now/CVE-2009-3033.md): Buffer overflow in the RunCmd method in the Altiris eXpress NS Console Utilities ActiveX control in AeXNSConsoleUtilities.dll in the web con (no CVSS) - [CVE-2009-4021](https://cve.now/CVE-2009-4021.md): The fuse\_direct\_io function in fs/fuse/file.c in the fuse subsystem in the Linux kernel before 2.6.32-rc7 might allow attackers to cause a d (no CVSS) - [CVE-2009-4022](https://cve.now/CVE-2009-4022.md): Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P4, 9.5 before 9.5.2-P1, 9.6 before 9.6.1-P2, and 9.7 beta befor (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2009-11-25 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.