2009 CVE Vulnerabilities

5,054 CVEs published in 2009.

CVE IDSeverityCVSSDescription
CVE-2009-1488——Directory traversal vulnerability in admin/load.php in FunGamez RC1 allows remote attackers to include and execute arbit...
CVE-2009-1487——SQL injection vulnerability in pages/login.php in FunGamez RC1 allows remote attackers to execute arbitrary SQL commands...
CVE-2009-1486——Directory traversal vulnerability in pmscript.php in Flatchat 3.0 allows remote attackers to include and execute arbitra...
CVE-2009-1485——The logging feature in eMule Plus before 1.2e allows remote attackers to cause a denial of service (infinite loop) via u...
CVE-2009-1484——Cross-site scripting (XSS) vulnerability in the web mail interface feature in AXIGEN Mail Server 6.2.2 allows remote att...
CVE-2009-1483——Unrestricted file upload vulnerability in upload-file.php in Adam Patterson Studio Lounge Address Book 2.5, as reachable...
CVE-2009-1482——Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin 1.8.2 and earlier allow remote a...
CVE-2009-1481——SQL injection vulnerability in action.asp in PuterJam's Blog (PJBlog3) 3.0.6.170 allows remote attackers to execute arbi...
CVE-2009-1480——SQL injection vulnerability in index.php Pragyan CMS 2.6.4 allows remote attackers to execute arbitrary SQL commands via...
CVE-2009-1478——Multiple unspecified vulnerabilities in the DTrace ioctl handlers in Sun Solaris 10, and OpenSolaris before snv_114, all...
CVE-2009-1431——XFR.EXE in the Intel File Transfer service in the console in Symantec Alert Management System 2 (AMS2), as used in Syman...
CVE-2009-1430——Multiple stack-based buffer overflows in IAO.EXE in the Intel Alert Originator Service in Symantec Alert Management Syst...
CVE-2009-1429——The Intel LANDesk Common Base Agent (CBA) in Symantec Alert Management System 2 (AMS2), as used in Symantec System Cente...
CVE-2009-1428——Multiple cross-site scripting (XSS) vulnerabilities in ccLgView.exe in the Symantec Log Viewer, as used in Symantec Anti...
CVE-2009-0719——Unspecified vulnerability in useradd in HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to access arbitrary fi...
CVE-2009-1463——Static code injection vulnerability in razorCMS before 0.4 allows remote attackers to inject arbitrary PHP code into any...
CVE-2009-1462——The Security Manager in razorCMS before 0.4 does not verify the permissions of every file owned by the apache user accou...
CVE-2009-1461——Cross-site scripting (XSS) vulnerability in the Create New Page form in razorCMS 0.3 RC2 and earlier allows remote authe...
CVE-2009-1460——razorCMS before 0.4 uses weak permissions for (1) admin/core/admin_config.php, which allows local users to obtain the ad...
CVE-2009-1459——Cross-site request forgery (CSRF) vulnerability in razorCMS before 0.4 allows remote attackers to hijack the authenticat...
CVE-2009-1458——Multiple cross-site scripting (XSS) vulnerabilities in admin/index.php in razorCMS before 0.4 allow remote attackers to ...
CVE-2009-1457——Cross-site scripting (XSS) vulnerability in player.php in Nuke Evolution Xtreme 2.x allows remote attackers to inject ar...
CVE-2009-1456——Directory traversal vulnerability in admin.php in Malleo 1.2.3 allows remote authenticated administrators to include and...
CVE-2009-1455——Multiple cross-site request forgery (CSRF) vulnerabilities in WebCollab before 2.50 (aka Billy Goat) allow remote attack...
CVE-2009-1454——Cross-site scripting (XSS) vulnerability in tasks.php in WebCollab before 2.50 (aka Billy Goat) allows remote attackers ...

Check if your code is affected by 2009 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now