# CVEs published 2009-12-20

4 CVEs were published on December 20, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-4029](https://cve.now/CVE-2009-4029.md): The (1) dist or (2) distcheck rules in GNU Automake 1.11.1, 1.10.3, and release branches branch-1-4 through branch-1-9, when producing a dis (no CVSS)
- [CVE-2009-4358](https://cve.now/CVE-2009-4358.md): freebsd-update in FreeBSD 8.0, 7.2, 7.1, 6.4, and 6.3 uses insecure permissions in its working directory (/var/db/freebsd-update by default) (no CVSS)
- [CVE-2009-4359](https://cve.now/CVE-2009-4359.md): Cross-site scripting (XSS) vulnerability in folder.php in the SmartMedia 0.85 Beta module for XOOPS allows remote attackers to inject arbitr (no CVSS)
- [CVE-2009-4360](https://cve.now/CVE-2009-4360.md): SQL injection vulnerability in modules/content/index.php in the Content module 0.5 for XOOPS allows remote attackers to inject arbitrary web (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-12-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.