# CVEs published 2009-12-29

13 CVEs were published on December 29, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-4455](https://cve.now/CVE-2009-4455.md): The default configuration of Cisco ASA 5500 Series Adaptive Security Appliance (Cisco ASA) 7.0, 7.1, 7.2, 8.0, 8.1, and 8.2 allows portal tr (no CVSS)
- [CVE-2009-4454](https://cve.now/CVE-2009-4454.md): vccleaner in VideoCache 1.9.2 allows local users with Squid proxy user privileges to overwrite arbitrary files via a symlink attack on /var/ (no CVSS)
- [CVE-2009-4446](https://cve.now/CVE-2009-4446.md): Cross-site scripting (XSS) vulnerability in admin.php in phpInstantGallery 1.1 allows remote attackers to inject arbitrary web script or HTM (no CVSS)
- [CVE-2009-4447](https://cve.now/CVE-2009-4447.md): Jax Guestbook 3.5.0 allows remote attackers to bypass authentication and modify administrator settings via a direct request to admin/guestbo (no CVSS)
- [CVE-2009-4448](https://cve.now/CVE-2009-4448.md): inc/functions\_time.php in MyBB (aka MyBulletinBoard) 1.4.10, and possibly earlier versions, allows remote attackers to cause a denial of ser (no CVSS)
- [CVE-2009-4449](https://cve.now/CVE-2009-4449.md): Directory traversal vulnerability in MyBB (aka MyBulletinBoard) 1.4.10, and possibly earlier versions, when changing the user avatar from th (no CVSS)
- [CVE-2009-4450](https://cve.now/CVE-2009-4450.md): Multiple cross-site scripting (XSS) vulnerabilities in map.php in LiveZilla 3.1.8.3 allow remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2009-4451](https://cve.now/CVE-2009-4451.md): Unrestricted file upload vulnerability in upper.php in kandalf upper 0.1 allows remote attackers to execute arbitrary code by uploading a fi (no CVSS)
- [CVE-2009-4452](https://cve.now/CVE-2009-4452.md): Kaspersky Anti-Virus 5.0 (5.0.712); Antivirus Personal 5.0.x; Anti-Virus 6.0 (6.0.3.837), 7 (7.0.1.325), 2009 (8.0.0.x), and 2010 (9.0.0.463 (no CVSS)
- [CVE-2009-4453](https://cve.now/CVE-2009-4453.md): Insecure method vulnerability in SoftCab Sound Converter ActiveX control (sndConverter.ocx) 1.2 allows remote attackers to create or overwri (no CVSS)
- [CVE-2009-4444](https://cve.now/CVE-2009-4444.md): Microsoft Internet Information Services (IIS) 5.x and 6.x uses only the portion of a filename before a ; (semicolon) character to determine (no CVSS)
- [CVE-2009-4445](https://cve.now/CVE-2009-4445.md): Microsoft Internet Information Services (IIS), when used in conjunction with unspecified third-party upload applications, allows remote atta (no CVSS)
- [CVE-2009-3295](https://cve.now/CVE-2009-3295.md): The prep\_reprocess\_req function in kdc/do\_tgs\_req.c in the cross-realm referral implementation in the Key Distribution Center (KDC) in MIT K (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-12-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.