2009 CVE Vulnerabilities
5,054 CVEs published in 2009.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2009-2094 | — | — | 0.2% | Aug 13, 2009 | Unspecified vulnerability in IBM WebSphere Commerce 6.0 Enterprise before 6.0.0.8, when trace is enabled, allows local u... |
| CVE-2009-2093 | — | — | 1.3% | Aug 13, 2009 | SQL injection vulnerability in the console in IBM WebSphere Partner Gateway (WPG) Enterprise 6.0 before FP8, 6.1 before ... |
| CVE-2009-2092 | — | — | 1.5% | Aug 13, 2009 | IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.5 does not properly read the portletServingEnabled parameter in ... |
| CVE-2009-2091 | — | — | 1.3% | Aug 13, 2009 | The System Management/Repository component in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.5 on z/OS uses wea... |
| CVE-2009-2090 | — | — | 2.6% | Aug 13, 2009 | Unspecified vulnerability in wsadmin in the System Management/Repository component in IBM WebSphere Application Server (... |
| CVE-2009-2089 | — | — | 1.3% | Aug 13, 2009 | The Migration component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5, when traci... |
| CVE-2009-2088 | — | — | 2.4% | Aug 13, 2009 | The Servlet Engine/Web Container component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and 7.0 before ... |
| CVE-2009-2087 | — | — | 0.2% | Aug 13, 2009 | The Web Services functionality in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5, in ... |
| CVE-2009-2086 | — | — | — | Aug 13, 2009 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2009-1900. Reason: This candidate is a duplicate of... |
| CVE-2009-2085 | — | — | 2.4% | Aug 13, 2009 | The Security component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5 does not pro... |
| CVE-2009-0907 | — | — | — | Aug 13, 2009 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2009-1899. Reason: This candidate is a duplicate of... |
| CVE-2009-0906 | — | — | 1.2% | Aug 13, 2009 | The Service Component Architecture (SCA) feature pack for IBM WebSphere Application Server (WAS) SCA 1.0 before 1.0.0.3 ... |
| CVE-2009-2762 | — | — | 19.6% | Aug 13, 2009 | wp-login.php in WordPress 2.8.3 and earlier allows remote attackers to force a password reset for the first user in the ... |
| CVE-2009-2761 | — | — | 0.4% | Aug 13, 2009 | Unquoted Windows search path vulnerability in the scheduler (sched.exe) in Avira AntiVir, AntiVir Premium, Premium Secur... |
| CVE-2009-2200 | — | — | 2.4% | Aug 12, 2009 | WebKit in Apple Safari before 4.0.3 does not properly restrict the URL scheme of the pluginspage attribute of an EMBED e... |
| CVE-2009-2199 | — | — | 2.6% | Aug 12, 2009 | Incomplete blacklist vulnerability in WebKit in Apple Safari before 4.0.3, as used on iPhone OS before 3.1, iPhone OS be... |
| CVE-2009-2196 | — | — | 4.9% | Aug 12, 2009 | Unspecified vulnerability in Apple Safari 4 before 4.0.3 allows remote web servers to place an arbitrary web site in the... |
| CVE-2009-2195 | — | — | 13.3% | Aug 12, 2009 | Buffer overflow in WebKit in Apple Safari before 4.0.3 allows remote attackers to execute arbitrary code or cause a deni... |
| CVE-2009-2496 | — | — | 29.5% | Aug 12, 2009 | Heap-based buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2003 SP3, Off... |
| CVE-2009-2494 | CRITICAL | 9.8 | 42.3% | Aug 12, 2009 | The Active Template Library (ATL) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and S... |
| CVE-2009-1930 | — | — | 41.4% | Aug 12, 2009 | The Telnet service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server ... |
| CVE-2009-1929 | — | — | 34.5% | Aug 12, 2009 | Heap-based buffer overflow in the Microsoft Terminal Services Client ActiveX control running RDP 6.1 on Windows XP SP2, ... |
| CVE-2009-1924 | — | — | 8.8% | Aug 12, 2009 | Integer overflow in the Windows Internet Name Service (WINS) component for Microsoft Windows 2000 SP4 allows remote WINS... |
| CVE-2009-1923 | — | — | 24.7% | Aug 12, 2009 | Heap-based buffer overflow in the Windows Internet Name Service (WINS) component for Microsoft Windows 2000 SP4 and Serv... |
| CVE-2009-1922 | — | — | 1.3% | Aug 12, 2009 | The Message Queuing (aka MSMQ) service for Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP2, and Vista Gold does not ... |
Check if your code is affected by 2009 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now