Aaron Sigel CUPS - 'kerberos' Cross-Site Scripting
remote multiple 80 CVE-2009-2820;OSVDB-59854

Andrew Horton CuteNews 1.4.6 editnews Module - doeditnews Action Admin Moderation Bypass
webapps php CVE-2009-4174;OSVDB-60779

Andrew Horton CuteNews 1.4.6 - 'index.php' Cross-Site Request Forgery (New User Creation)
webapps php CVE-2009-4173;OSVDB-60636

Andrew Horton CuteNews 1.4.6 - 'result' Cross-Site Scripting
webapps php CVE-2009-4250;OSVDB-60910

Andrew Horton CuteNews 1.4.6 - 'search.php' Multiple Cross-Site Scripting Vulnerabilities
webapps php CVE-2009-4249;OSVDB-60909

Andrew Horton CuteNews 1.4.6 - 'from_date_day' Full Path Disclosure
webapps php CVE-2009-4175;OSVDB-60637

Andrew Horton CuteNews 1.4.6 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
webapps php CVE-2009-4172;OSVDB-60635

Juan Galiana Lara WordPress MU 1.2.2 < 1.3.1 - '/wp-includes/wpmu-functions.php' Cross-Site Scripting
webapps php

Fernando Arnaboldi WordPress Core 2.0 < 2.7.1 - 'admin.php' Module Configuration Security Bypass
webapps php

Andrew Horton CuteNews and UTF-8 CuteNews - Multiple Vulnerabilities
webapps php CVE-2009-4250;CVE-2009-4249;CVE-2009-4175;CVE-2009-4173;CVE-2009-4172;OSVDB-60637;OSVDB-60636;OSVDB-60635

Akira Fujita Linux Kernel 2.6.x - Ext4 'move extents' ioctl Privilege Escalation
local linux CVE-2009-4131;OSVDB-60867

Ralf Haferkamp OpenLDAP 2.3.39 - MODRDN Remote Denial of Service
dos multiple 389

Fernando Russ Blender 2.49b - '.blend' Remote Command Execution
remote multiple

Richard H. Brain Apache mod_perl - 'Apache::Status' / 'Apache2::Status' Cross-Site Scripting
remote multiple CVE-2009-0796;CVE-2009-0795;OSVDB-53289

Felipe Andres Manzano Adobe Reader / Acrobat - '.U3D' File Invalid Array Index Overflow
local multiple CVE-2009-2990

Alberto Trivero toutvirtual virtualiq pro 3.2 - Multiple Vulnerabilities
webapps jsp CVE-2009-4849;OSVDB-60084