2009 CVE Vulnerabilities
5,054 CVEs published in 2009.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2009-2144 | — | — | 2.0% | Jun 22, 2009 | SQL injection vulnerability in the FireStats plugin before 1.6.2-stable for WordPress allows remote attackers to execute... |
| CVE-2009-2143 | — | — | 2.8% | Jun 22, 2009 | PHP remote file inclusion vulnerability in firestats-wordpress.php in the FireStats plugin before 1.6.2-stable for WordP... |
| CVE-2009-2142 | — | — | 1.0% | Jun 22, 2009 | Multiple SQL injection vulnerabilities in admin/index.asp in Zip Store Chat 4.0 and 5.0 allow remote attackers to execut... |
| CVE-2009-2141 | — | — | 1.5% | Jun 22, 2009 | Multiple cross-site scripting (XSS) vulnerabilities in TBDev.NET 01-01-08 allow remote attackers to inject arbitrary web... |
| CVE-2009-2138 | — | — | 1.3% | Jun 19, 2009 | Multiple open redirect vulnerabilities in TBDev.NET 01-01-08 allow remote attackers to redirect users to arbitrary web s... |
| CVE-2009-2137 | — | — | 1.8% | Jun 19, 2009 | Memory leak in the Ultra-SPARC T2 crypto provider device driver (aka n2cp) in Sun Solaris 10, and OpenSolaris snv_54 thr... |
| CVE-2009-2136 | — | — | 2.5% | Jun 19, 2009 | Unspecified vulnerability in the TCP/IP networking stack in Sun Solaris 10, and OpenSolaris snv_01 through snv_82 and sn... |
| CVE-2009-2135 | — | — | 0.3% | Jun 19, 2009 | Multiple race conditions in the Solaris Event Port API in Sun Solaris 10 and OpenSolaris before snv_107 allow local user... |
| CVE-2009-2134 | — | — | 2.5% | Jun 19, 2009 | pivot/tb.php in Pivot 1.40.4 and 1.40.7 allows remote attackers to obtain sensitive information via an invalid url param... |
| CVE-2009-2133 | — | — | 4.1% | Jun 19, 2009 | Multiple cross-site scripting (XSS) vulnerabilities in Pivot 1.40.4 and 1.40.7 allow remote attackers to inject arbitrar... |
| CVE-2009-2132 | — | — | 1.9% | Jun 19, 2009 | Directory traversal vulnerability in global.php in 4images before 1.7.7, when magic_quotes_gpc is disabled, allows remot... |
| CVE-2009-2131 | — | — | 1.6% | Jun 19, 2009 | Cross-site scripting (XSS) vulnerability in 4images 1.7.7 and earlier allows remote authenticated users to inject arbitr... |
| CVE-2009-2130 | — | — | 2.3% | Jun 19, 2009 | Elvin 1.2.0 allows remote attackers to read the PHP source code of (1) login.ei, (2) jump_bug.ei, or (3) create_account.... |
| CVE-2009-2129 | — | — | 0.9% | Jun 19, 2009 | Cross-site request forgery (CSRF) vulnerability in login.php in Elvin 1.2.0 allows remote attackers to hijack the authen... |
| CVE-2009-2128 | — | — | 1.0% | Jun 19, 2009 | SQL injection vulnerability in close_bug.php in Elvin before 1.2.1 allows remote attackers to execute arbitrary SQL comm... |
| CVE-2009-2127 | — | — | 1.2% | Jun 19, 2009 | Cross-site scripting (XSS) vulnerability in show_activity.php in Elvin 1.2.0 allows remote attackers to inject arbitrary... |
| CVE-2009-2126 | — | — | 1.0% | Jun 19, 2009 | Cross-site scripting (XSS) vulnerability in close_bug.php in Elvin before 1.2.1 allows remote attackers to inject arbitr... |
| CVE-2009-2125 | — | — | 1.0% | Jun 19, 2009 | delete_bug.php in Elvin before 1.2.1 does not require administrative privileges, which allows remote authenticated users... |
| CVE-2009-2124 | — | — | 2.3% | Jun 19, 2009 | Directory traversal vulnerability in page.php in Elvin 1.2.0 allows remote attackers to include and execute arbitrary lo... |
| CVE-2009-2123 | — | — | 1.0% | Jun 19, 2009 | Multiple SQL injection vulnerabilities in Elvin 1.2.0 allow remote attackers to execute arbitrary SQL commands via the (... |
| CVE-2009-2122 | — | — | 2.7% | Jun 19, 2009 | SQL injection vulnerability in viewimg.php in the Paolo Palmonari Photoracer plugin 1.0 for WordPress allows remote atta... |
| CVE-2009-1692 | — | — | 4.2% | Jun 19, 2009 | WebKit before r41741, as used in Apple iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Safari, ... |
| CVE-2009-1683 | — | — | 2.9% | Jun 19, 2009 | The Telephony component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 allows remot... |
| CVE-2009-1680 | — | — | 0.4% | Jun 19, 2009 | Safari in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly clear the s... |
| CVE-2009-1679 | — | — | 0.4% | Jun 19, 2009 | The Profiles component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1, when install... |
Check if your code is affected by 2009 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now