Andrea Purificato Oracle - SYS.LT.MERGEWORKSPACE Evil Cursor
local multiple

Chris Evans Python < 2.5.2 Imageop Module - 'imageop.crop()' Buffer Overflow
dos multiple CVE-2008-4864;OSVDB-50097

Maksymilian Arciemowicz Opera Web Browser 10.01 - 'dtoa()' Remote Code Execution
remote multiple CVE-2009-0689;OSVDB-61186

s4squatch Xerver 4.31/4.32 - HTTP Response Splitting
webapps multiple 80 CVE-2009-4086;OSVDB-60657

Jeremy Allison Samba 3.0.10 < 3.3.5 - Format String / Security Bypass
remote multiple

wololo LibTIFF - 'LZWDecodeCompat()' Remote Buffer Underflow
dos multiple CVE-2009-2285;OSVDB-55265

Chris Evans WebKit - 'Document()' Remote Information Disclosure
remote multiple

Marsh Ray Multiple Vendor - TLS Protocol Session Renegotiation Security
local multiple

Aaron Sigel CUPS - 'kerberos' Cross-Site Scripting
remote multiple 80 CVE-2009-2820;OSVDB-59854

Dan Kaminsky Mozilla NSS - NULL Character CA SSL Certificate Validation Security Bypass
remote multiple CVE-2009-3555;OSVDB-59970

Ralf Haferkamp OpenLDAP 2.3.39 - MODRDN Remote Denial of Service
dos multiple 389

Fernando Russ Blender 2.49b - '.blend' Remote Command Execution
remote multiple

D. Matscheko Apache Tomcat - Form Authentication 'Username' Enumeration
remote multiple

John Kew Apache Tomcat - Cookie Quote Handling Remote Information Disclosure
remote multiple

Richard H. Brain Apache mod_perl - 'Apache::Status' / 'Apache2::Status' Cross-Site Scripting
remote multiple CVE-2009-0796;CVE-2009-0795;OSVDB-53289

Felipe Andres Manzano Adobe Reader / Acrobat - '.U3D' File Invalid Array Index Overflow
local multiple CVE-2009-2990