# CVEs published 2009-11-30 9 CVEs were published on November 30, 2009: 0 critical, 0 high. Days are UTC. - [CVE-2009-4112](https://cve.now/CVE-2009-4112.md): Cacti 0.8.7e and earlier allows remote authenticated administrators to gain privileges by modifying the "Data Input Method" for the "Linux - (no CVSS) - [CVE-2009-4113](https://cve.now/CVE-2009-4113.md): Static code injection vulnerability in the Categories module in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allows remote authentica (no CVSS) - [CVE-2009-4114](https://cve.now/CVE-2009-4114.md): kl1.sys in Kaspersky Anti-Virus 2010 9.0.0.463, and possibly other versions before 9.0.0.736, does not properly validate input to IOCTL 0x00 (no CVSS) - [CVE-2009-4115](https://cve.now/CVE-2009-4115.md): Multiple static code injection vulnerabilities in the Categories module in CutePHP CuteNews 1.4.6 allow remote authenticated users with appl (no CVSS) - [CVE-2009-4116](https://cve.now/CVE-2009-4116.md): Multiple directory traversal vulnerabilities in CutePHP CuteNews 1.4.6, when magic\_quotes\_gpc is disabled, allow remote authenticated users (no CVSS) - [CVE-2008-7247](https://cve.now/CVE-2008-7247.md): sql/sql\_table.cc in MySQL 5.0.x through 5.0.88, 5.1.x through 5.1.41, and 6.0 before 6.0.9-alpha, when the data home directory contains a sy (no CVSS) - [CVE-2009-4019](https://cve.now/CVE-2009-4019.md): mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors during execution of certain SELECT statement (no CVSS) - [CVE-2009-4028](https://cve.now/CVE-2009-4028.md): The vio\_verify\_callback function in viosslfactories.c in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41, when OpenSSL is used, accepts a (no CVSS) - [CVE-2009-4030](https://cve.now/CVE-2009-4030.md): MySQL 5.1.x before 5.1.41 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2009-11-30 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.