2009 CVE Vulnerabilities
5,054 CVEs published in 2009.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2009-1954 | — | — | 1.3% | Jun 8, 2009 | Unspecified vulnerability in portmapper (aka portmap) in IBM AIX 5.3 allows attackers to cause a denial of service (daem... |
| CVE-2009-1953 | — | — | 0.9% | Jun 8, 2009 | IBM FileNet Content Manager 4.0, 4.0.1, and 4.5, as used in IBM WebSphere Application Server (WAS) and Oracle BEA WebLog... |
| CVE-2009-1419 | — | — | 1.8% | Jun 8, 2009 | Unspecified vulnerability in HP Discovery & Dependency Mapping Inventory (DDMI) 2.0.0 through 2.52, 7.50, and 7.51 on Wi... |
| CVE-2009-0023 | — | — | 8.5% | Jun 8, 2009 | The apr_strmatch_precompile function in strmatch/apr_strmatch.c in Apache APR-util before 1.3.5 allows remote attackers ... |
| CVE-2009-1952 | — | — | 0.9% | Jun 5, 2009 | Multiple SQL injection vulnerabilities in the administrative login feature in PropertyMax Pro FREE 0.3, when magic_quote... |
| CVE-2009-1951 | — | — | 1.3% | Jun 5, 2009 | Cross-site scripting (XSS) vulnerability in index.php in PropertyMax Pro FREE 0.3 allows remote attackers to inject arbi... |
| CVE-2009-1950 | — | — | 1.0% | Jun 5, 2009 | SQL injection vulnerability in yorum.asp in WebEyes Guest Book 3 allows remote attackers to execute arbitrary SQL comman... |
| CVE-2009-1949 | — | — | 2.7% | Jun 5, 2009 | import_wbb1.php in Unclassified NewsBoard (UNB) 1.6.4 allows remote attackers to obtain sensitive information via a dire... |
| CVE-2009-1948 | — | — | 2.0% | Jun 5, 2009 | Multiple directory traversal vulnerabilities in forum.php in Unclassified NewsBoard (UNB) 1.6.4, when register_globals i... |
| CVE-2009-1947 | — | — | 1.0% | Jun 5, 2009 | SQL injection vulnerability in the UnbDbEncode function in unb_lib/database.lib.php in Unclassified NewsBoard (UNB) 1.6.... |
| CVE-2009-1946 | — | — | 1.9% | Jun 5, 2009 | PHP remote file inclusion vulnerability in latestposts.php in AdaptBB 1.0, when register_globals is enabled, allows remo... |
| CVE-2009-1945 | — | — | 1.0% | Jun 5, 2009 | SQL injection vulnerability in webCal3_detail.asp in WebCal 3.04 allows remote attackers to execute arbitrary SQL comman... |
| CVE-2009-1944 | — | — | 10.4% | Jun 5, 2009 | Stack-based buffer overflow in AIMP 2.51 build 330 allows remote attackers to execute arbitrary code via an MP3 file wit... |
| CVE-2009-1943 | — | — | 72.2% | Jun 5, 2009 | Stack-based buffer overflow in the IKE service (ireIke.exe) in SafeNet SoftRemote before 10.8.6 allows remote attackers ... |
| CVE-2009-1942 | — | — | 1.0% | Jun 5, 2009 | Cross-site scripting (XSS) vulnerability in the Quiz module 5.x, 6.x-2.x before 6.x-2.2, and 6.x-3.x before 6.x-3.0, a m... |
| CVE-2009-1941 | — | — | 2.3% | Jun 5, 2009 | PAD Site Scripts 3.6 stores sensitive information under the web document root with insufficient access control, which al... |
| CVE-2009-1940 | — | — | 2.0% | Jun 5, 2009 | Cross-site scripting (XSS) vulnerability in the administrator panel in the com_users core component for Joomla! 1.5.x th... |
| CVE-2009-1939 | — | — | 1.3% | Jun 5, 2009 | Cross-site scripting (XSS) vulnerability in the JA_Purity template for Joomla! 1.5.x through 1.5.10 allows remote attack... |
| CVE-2009-1938 | — | — | 4.3% | Jun 5, 2009 | Cross-site scripting (XSS) vulnerability in Joomla! 1.5.x through 1.5.10 allows remote attackers to inject arbitrary web... |
| CVE-2009-1937 | — | — | 1.0% | Jun 5, 2009 | Cross-site scripting (XSS) vulnerability in the comment posting feature in LightNEasy 2.2.1 "no database" (aka flat) and... |
| CVE-2009-1934 | — | — | 2.2% | Jun 5, 2009 | Cross-site scripting (XSS) vulnerability in the Reverse Proxy Plug-in in Sun Java System Web Server 6.1 before SP11 allo... |
| CVE-2009-1933 | — | — | 0.3% | Jun 5, 2009 | Kerberos in Sun Solaris 8, 9, and 10, and OpenSolaris before snv_117, does not properly manage credential caches, which ... |
| CVE-2009-1717 | — | — | 3.0% | Jun 5, 2009 | Integer overflow in Terminal in Apple Mac OS X 10.5 before 10.5.7 allows remote attackers to execute arbitrary code or c... |
| CVE-2009-1162 | — | — | 1.2% | Jun 5, 2009 | Cross-site scripting (XSS) vulnerability in the Spam Quarantine login page in Cisco IronPort AsyncOS before 6.5.2 on Ser... |
| CVE-2009-0580 | — | — | 94.4% | Jun 5, 2009 | Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when FORM authentication is used, al... |
Check if your code is affected by 2009 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now