2009 CVE Vulnerabilities
5,054 CVEs published in 2009.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2009-1902 | — | — | 13.7% | Jun 3, 2009 | The multipart processor in ModSecurity before 2.5.9 allows remote attackers to cause a denial of service (crash) via a m... |
| CVE-2009-1901 | — | — | 1.5% | Jun 3, 2009 | The Security component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35 permits "non-standard http method... |
| CVE-2009-1900 | — | — | 1.8% | Jun 3, 2009 | The Configservice APIs in the Administrative Console component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.... |
| CVE-2009-1899 | — | — | 4.3% | Jun 3, 2009 | Unspecified vulnerability in the Administrative Configservice API in the System Management/Repository component in IBM W... |
| CVE-2009-1898 | — | — | 1.4% | Jun 3, 2009 | The secure login page in the Administrative Console component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0... |
| CVE-2009-0899 | — | — | 1.6% | Jun 3, 2009 | IBM WebSphere Application Server (WAS) 6.1 through 6.1.0.24 and 7.0 through 7.0.0.4, IBM WebSphere Portal Server 5.1 thr... |
| CVE-2009-0896 | — | — | 6.7% | Jun 3, 2009 | Buffer overflow in the queue manager in IBM WebSphere MQ 6.x before 6.0.2.7 and 7.x before 7.0.1.0 allows remote attacke... |
| CVE-2009-0957 | — | — | 5.7% | Jun 2, 2009 | Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a ... |
| CVE-2009-0956 | — | — | 5.1% | Jun 2, 2009 | Apple QuickTime before 7.6.2 does not properly initialize memory before use in handling movie files, which allows remote... |
| CVE-2009-0955 | — | — | 9.5% | Jun 2, 2009 | Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application... |
| CVE-2009-0954 | — | — | 5.7% | Jun 2, 2009 | Heap-based buffer overflow in Apple QuickTime before 7.6.2 on Windows allows remote attackers to execute arbitrary code ... |
| CVE-2009-0953 | — | — | 5.4% | Jun 2, 2009 | Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a ... |
| CVE-2009-0952 | — | — | 4.8% | Jun 2, 2009 | Buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of s... |
| CVE-2009-0951 | — | — | 6.5% | Jun 2, 2009 | Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a ... |
| CVE-2009-0950 | — | — | 28.8% | Jun 2, 2009 | Stack-based buffer overflow in Apple iTunes before 8.2 allows remote attackers to execute arbitrary code or cause a deni... |
| CVE-2009-0894 | — | — | 5.7% | Jun 2, 2009 | Heap-based buffer overflow in the decoder_create function in the initialization functionality in xvidcore/src/decoder.c ... |
| CVE-2009-0893 | — | — | 6.5% | Jun 2, 2009 | Multiple heap-based buffer overflows in xvidcore/src/decoder.c in the xvidcore library in Xvid before 1.2.2, as used by ... |
| CVE-2009-0188 | — | — | 4.9% | Jun 2, 2009 | Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corr... |
| CVE-2009-0185 | — | — | 5.8% | Jun 2, 2009 | Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a ... |
| CVE-2009-1882 | — | — | 7.2% | Jun 2, 2009 | Integer overflow in the XMakeImage function in magick/xwindow.c in ImageMagick 6.5.2-8, and GraphicsMagick, allows remot... |
| CVE-2009-1881 | — | — | 1.0% | Jun 2, 2009 | Cross-site scripting (XSS) vulnerability in MT312 IMG-BBS allows remote attackers to inject arbitrary web script or HTML... |
| CVE-2009-1880 | — | — | 1.0% | Jun 2, 2009 | Cross-site scripting (XSS) vulnerability in MT312 REP-BBS allows remote attackers to inject arbitrary web script or HTML... |
| CVE-2009-3870 | — | — | — | Jun 1, 2009 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2008-3870. Reason: This candidate is a duplicate of ... |
| CVE-2009-1854 | — | — | 2.4% | Jun 1, 2009 | Million Dollar Text Links 1.0 allows remote attackers to bypass authentication and gain administrative access by setting... |
| CVE-2009-1853 | — | — | 1.0% | Jun 1, 2009 | Multiple SQL injection vulnerabilities in index.php in Kensei Board 2.0 BETA (aka 2.0.0b) and earlier allow remote attac... |
Check if your code is affected by 2009 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now