2009 CVE Vulnerabilities

5,054 CVEs published in 2009.

CVE IDSeverityCVSSDescription
CVE-2009-2243SQL injection vulnerability in active_appointments.asp in ASP Inline Corporate Calendar allows remote attackers to execu...
CVE-2009-2242SQL injection vulnerability in active_appointments.asp in ASP Inline Corporate Calendar allows remote attackers to execu...
CVE-2009-2241Cross-site scripting (XSS) vulnerability in search.asp in ASP Inline Corporate Calendar allows remote attackers to injec...
CVE-2009-2240Cross-site scripting (XSS) vulnerability in AD2000 free-sw leger (aka Web Conference Room Free) 1.6.4 and earlier allows...
CVE-2009-2239SQL injection vulnerability in the (1) casinobase (com_casinobase), (2) casino_blackjack (com_casino_blackjack), and (3)...
CVE-2009-2238Unrestricted file upload vulnerability in includes/shared_scripts/wysiwyg_editor/assetmanager/assetmanager.asp in DMXRea...
CVE-2009-2237Unspecified vulnerability in Views Bulk Operations 5.x-1.x before 5.x-1.4 and 6.x-1.x before 6.x-1.7, a module for Drupa...
CVE-2009-2236SQL injection vulnerability in yad-admin/login.php in Your Article Directory allows remote attackers to execute arbitrar...
CVE-2009-2235SQL injection vulnerability in page.php in Your Articles Directory allows remote attackers to execute arbitrary SQL comm...
CVE-2009-2234Multiple SQL injection vulnerabilities in admin.php in VICIDIAL Call Center Suite 2.0.5-173 allow remote attackers to ex...
CVE-2009-2233The admin interface in AWScripts.com Gallery Search Engine 1.5 allows remote attackers to bypass authentication and gain...
CVE-2009-2232SQL injection vulnerability in image.php in Softbiz Banner Ad Management Script allows remote attackers to execute arbit...
CVE-2009-2231MIDAS 1.43 allows remote attackers to bypass authentication and obtain administrative access via an admin account record...
CVE-2009-2230SQL injection vulnerability in inc/datahandlers/user.php in MyBB (aka MyBulletinBoard) before 1.4.7 allows remote authen...
CVE-2009-2229Directory traversal vulnerability in engine.php in Kasseler CMS 1.3.5 lite allows remote attackers to read arbitrary fil...
CVE-2009-2228Cross-site scripting (XSS) vulnerability in engine.php in Kasseler CMS allows remote attackers to inject arbitrary web s...
CVE-2009-2227Stack-based buffer overflow in B Labs Bopup Communication Server 3.2.26.5460 allows remote attackers to execute arbitrar...
CVE-2009-1887agent/snmp_agent.c in snmpd in net-snmp 5.0.9 in Red Hat Enterprise Linux (RHEL) 3 allows remote attackers to cause a de...
CVE-2009-1628Stack-based buffer overflow in mnet.exe in Unisys Business Information Server (BIS) 10 and 10.1 on Windows allows remote...
CVE-2009-1394Stack-based buffer overflow in Motorola Timbuktu Pro 8.6.5 on Windows allows remote attackers to execute arbitrary code ...
CVE-2009-2226Cross-site scripting (XSS) vulnerability in Let's PHP! Tree BBS 2004/11/23 and earlier allows remote attackers to inject...
CVE-2009-2225Stack-based buffer overflow in SureThing CD/DVD Labeler 5.1.616 trial version allows user-assisted remote attackers to e...
CVE-2009-2224Directory traversal vulnerability in ang/shared/flags.php in AN Guestbook 0.7.8, when register_globals is enabled, allow...
CVE-2009-2223Directory traversal vulnerability in locms/smarty.php in LightOpenCMS 0.1 allows remote attackers to include and execute...
CVE-2009-2222Directory traversal vulnerability in PHP-I-BOARD 1.2 and earlier allows remote attackers to read arbitrary files via dir...

Check if your code is affected by 2009 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now