# CVEs published 2009-12-10

36 CVEs were published on December 10, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-0898](https://cve.now/CVE-2009-0898.md): Stack-based buffer overflow in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary c (no CVSS)
- [CVE-2009-4237](https://cve.now/CVE-2009-4237.md): Multiple cross-site scripting (XSS) vulnerabilities in TestLink before 1.8.5 allow remote attackers to inject arbitrary web script or HTML v (no CVSS)
- [CVE-2009-4238](https://cve.now/CVE-2009-4238.md): Multiple SQL injection vulnerabilities in TestLink before 1.8.5 allow remote authenticated users to execute arbitrary SQL commands via (1) t (no CVSS)
- [CVE-2009-4292](https://cve.now/CVE-2009-4292.md): Buffer overflow in the URL filtering function in Internet Initiative Japan SEIL/X1, SEIL/X2, and SEIL/B1 firmware 2.40 through 2.51 allows r (no CVSS)
- [CVE-2009-4293](https://cve.now/CVE-2009-4293.md): Internet Initiative Japan SEIL/X1, SEIL/X2, and SEIL/B1 firmware 2.30 through 2.51, when NAT is enabled, allows remote attackers to cause a (no CVSS)
- [CVE-2009-3845](https://cve.now/CVE-2009-3845.md): The port-3443 HTTP server in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary com (no CVSS)
- [CVE-2009-3846](https://cve.now/CVE-2009-3846.md): Multiple heap-based buffer overflows in ovlogin.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers (no CVSS)
- [CVE-2009-3847](https://cve.now/CVE-2009-3847.md): Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary cod (no CVSS)
- [CVE-2009-3848](https://cve.now/CVE-2009-3848.md): Stack-based buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to (no CVSS)
- [CVE-2009-3849](https://cve.now/CVE-2009-3849.md): Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute ar (no CVSS)
- [CVE-2009-4176](https://cve.now/CVE-2009-4176.md): Multiple heap-based buffer overflows in ovsessionmgr.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote atta (no CVSS)
- [CVE-2009-4177](https://cve.now/CVE-2009-4177.md): Buffer overflow in webappmon.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitr (no CVSS)
- [CVE-2009-4178](https://cve.now/CVE-2009-4178.md): Heap-based buffer overflow in OvWebHelp.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to exe (no CVSS)
- [CVE-2009-4179](https://cve.now/CVE-2009-4179.md): Stack-based buffer overflow in ovalarm.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to exec (no CVSS)
- [CVE-2009-4180](https://cve.now/CVE-2009-4180.md): Stack-based buffer overflow in snmpviewer.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to e (no CVSS)
- [CVE-2009-4181](https://cve.now/CVE-2009-4181.md): Stack-based buffer overflow in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to (no CVSS)
- [CVE-2009-3794](https://cve.now/CVE-2009-3794.md): Heap-based buffer overflow in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allows remote attackers to execute arbitrary c (no CVSS)
- [CVE-2009-3796](https://cve.now/CVE-2009-3796.md): Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 might allow attackers to execute arbitrary code via unspecified vectors, rel (no CVSS)
- [CVE-2009-3797](https://cve.now/CVE-2009-3797.md): Adobe Flash Player 10.x before 10.0.42.34 and Adobe AIR before 1.5.3 might allow attackers to execute arbitrary code via unspecified vectors (no CVSS)
- [CVE-2009-3798](https://cve.now/CVE-2009-3798.md): Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 might allow attackers to execute arbitrary code via unspecified vectors that (no CVSS)
- [CVE-2009-3799](https://cve.now/CVE-2009-3799.md): Integer overflow in the Verifier::parseExceptionHandlers function in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allows (no CVSS)
- [CVE-2009-3800](https://cve.now/CVE-2009-3800.md): Multiple unspecified vulnerabilities in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allow attackers to cause a denial of (no CVSS)
- [CVE-2009-3951](https://cve.now/CVE-2009-3951.md): Unspecified vulnerability in the Flash Player ActiveX control in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 on Windows (no CVSS)
- [CVE-2009-4262](https://cve.now/CVE-2009-4262.md): Harold Bakker's NewsScript (HB-NS) 1.3 allows remote attackers to obtain access to the admin control panel via a direct request to admin.php (no CVSS)
- [CVE-2009-4263](https://cve.now/CVE-2009-4263.md): SQL injection vulnerability in main\_forum.php in PTCPay GeN3 forum 1.3 allows remote attackers to execute arbitrary SQL commands via the cat (no CVSS)
- [CVE-2009-4264](https://cve.now/CVE-2009-4264.md): PHP remote file inclusion vulnerability in components/core/connect.php in AROUNDMe 1.1 and earlier, when register\_globals is enabled, allows (no CVSS)
- [CVE-2009-4265](https://cve.now/CVE-2009-4265.md): Stack-based buffer overflow in Ideal Administration 2009 9.7.1, and possibly other versions, allows remote attackers to execute arbitrary co (no CVSS)
- [CVE-2009-4266](https://cve.now/CVE-2009-4266.md): Cross-site scripting (XSS) vulnerability in search.php in YABSoft Advanced Image Hosting (AIH) Script 2.2, and possibly 2.3, allows remote a (no CVSS)
- [CVE-2009-4252](https://cve.now/CVE-2009-4252.md): Cross-site scripting (XSS) vulnerability in images.php in Image Hosting Script DPI 1.1 Final (1.1F) allows remote attackers to inject arbitr (no CVSS)
- [CVE-2009-4253](https://cve.now/CVE-2009-4253.md): Cross-site scripting (XSS) vulnerability in dspStats.php in PowerPhlogger 2.2.5 allows remote attackers to inject arbitrary web script or HT (no CVSS)
- [CVE-2009-4254](https://cve.now/CVE-2009-4254.md): PowerPhlogger 2.2.5 allows remote attackers to obtain sensitive information via a direct request to (1) edCss.inc.php, (2) foot.inc.php, (3) (no CVSS)
- [CVE-2009-4255](https://cve.now/CVE-2009-4255.md): Cross-site scripting (XSS) vulnerability in the You!Hostit! template 1.0.1 for Joomla! allows remote attackers to inject arbitrary web scrip (no CVSS)
- [CVE-2009-4256](https://cve.now/CVE-2009-4256.md): Multiple SQL injection vulnerabilities in cource.php in AlefMentor 2.0 and 2.2 allow remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2009-4249](https://cve.now/CVE-2009-4249.md): Multiple cross-site scripting (XSS) vulnerabilities in CutePHP CuteNews 1.4.6, when register\_globals is enabled and magic\_quotes\_gpc is disa (no CVSS)
- [CVE-2009-4250](https://cve.now/CVE-2009-4250.md): Multiple cross-site scripting (XSS) vulnerabilities in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allow remote attackers to inject (no CVSS)
- [CVE-2009-4251](https://cve.now/CVE-2009-4251.md): Stack-based buffer overflow in Jasc Paint Shop Pro 8.10 (aka Corel Paint Shop Pro) allows user-assisted remote attackers to execute arbitrar (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-12-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.