# CVEs published 2009-12-03

12 CVEs were published on December 3, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-4192](https://cve.now/CVE-2009-4192.md): Directory traversal vulnerability in dialog/file\_manager.php in Interspire Knowledge Manager 5 allows remote attackers to read arbitrary fil (no CVSS)
- [CVE-2009-4193](https://cve.now/CVE-2009-4193.md): Merkaartor 0.14 allows local users to append data to arbitrary files via a symlink attack on the /tmp/merkaartor.log temporary file. (no CVSS)
- [CVE-2009-4194](https://cve.now/CVE-2009-4194.md): Directory traversal vulnerability in Golden FTP Server 4.30 Free and Professional, 4.50, and possibly other versions allows remote authentic (no CVSS)
- [CVE-2009-1566](https://cve.now/CVE-2009-1566.md): Integer overflow in Roxio Easy Media Creator 9.0.136, and Roxio Creator 2010 before SP1, might allow remote attackers to execute arbitrary c (no CVSS)
- [CVE-2009-0895](https://cve.now/CVE-2009-0895.md): Integer overflow in Novell eDirectory 8.7.3.x before 8.7.3.10 ftf2 and 8.8.x before 8.8.5.2 allows remote attackers to execute arbitrary cod (no CVSS)
- [CVE-2009-1567](https://cve.now/CVE-2009-1567.md): Multiple stack-based buffer overflows in the Lateral Arts Photobox uploader ActiveX control 1.x before 1.3, and 2.2.0.6, allow remote attack (no CVSS)
- [CVE-2009-4186](https://cve.now/CVE-2009-4186.md): Stack consumption vulnerability in Apple Safari 4.0.3 on Windows allows remote attackers to cause a denial of service (application crash) vi (no CVSS)
- [CVE-2009-4187](https://cve.now/CVE-2009-4187.md): Multiple cross-site scripting (XSS) vulnerabilities in the Gateway component in Sun Java System Portal Server 6.3.1, 7.1, and 7.2 allow remo (no CVSS)
- [CVE-2009-4188](https://cve.now/CVE-2009-4188.md): HP Operations Dashboard has a default password of j2deployer for the j2deployer account, which allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2009-4189](https://cve.now/CVE-2009-4189.md): HP Operations Manager has a default password of OvW\*busr1 for the ovwebusr account, which allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2009-4190](https://cve.now/CVE-2009-4190.md): Unspecified vulnerability in the kernel in Sun OpenSolaris 2009.06 allows remote attackers to cause a denial of service (panic) via unknown (no CVSS)
- [CVE-2009-4191](https://cve.now/CVE-2009-4191.md): Unspecified vulnerability in the kernel in Sun Solaris 10 and OpenSolaris 2009.06 on the x86-64 platform allows local users to gain privileg (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-12-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.