2009 CVE Vulnerabilities
5,054 CVEs published in 2009.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2009-5045 | HIGH | 7.5 | 2.3% | Nov 6, 2019 | Dump Servlet information leak in jetty before 6.1.22. |
| CVE-2009-5050 | HIGH | 7.5 | 1.7% | Nov 6, 2019 | konversation before 1.2.3 allows attackers to cause a denial of service. |
| CVE-2009-5049 | MEDIUM | 6.1 | 1.6% | Nov 6, 2019 | WebApp JSP Snoop page XSS in jetty though 6.1.21. |
| CVE-2009-5048 | MEDIUM | 6.1 | 1.6% | Nov 6, 2019 | Cookie Dump Servlet stored XSS vulnerability in jetty though 6.1.20. |
| CVE-2009-5043 | CRITICAL | 9.8 | 1.2% | Oct 31, 2019 | burn allows file names to escape via mishandled quotation marks |
| CVE-2009-5042 | CRITICAL | 9.1 | 1.1% | Oct 31, 2019 | python-docutils allows insecure usage of temporary files |
| CVE-2009-5041 | CRITICAL | 9.8 | 1.2% | Oct 31, 2019 | overkill has buffer overflow via long player names that can corrupt data on the server machine |
| CVE-2009-3887 | CRITICAL | 9.8 | 2.5% | Oct 29, 2019 | ytnef has directory traversal |
| CVE-2009-3723 | HIGH | 7.5 | 1.2% | Oct 29, 2019 | asterisk allows calls on prohibited networks |
| CVE-2009-4900 | MEDIUM | 6.1 | 1.0% | Oct 28, 2019 | pixelpost 1.7.1 has XSS |
| CVE-2009-4899 | CRITICAL | 9.8 | 1.3% | Oct 28, 2019 | pixelpost 1.7.1 has SQL injection |
| CVE-2009-5158 | — | — | 0.9% | Aug 22, 2019 | The google-analyticator plugin before 5.2.1 for WordPress has insufficient HTML sanitization for Google Analytics API te... |
| CVE-2009-5157 | — | — | 5.8% | Jun 11, 2019 | On Linksys WAG54G2 1.00.10 devices, there is authenticated command injection via shell metacharacters in the setup.cgi c... |
| CVE-2009-5156 | — | — | 10.9% | Jun 11, 2019 | An issue was discovered on ASMAX AR-804gu 66.34.1 devices. There is Command Injection via the cgi-bin/script query strin... |
| CVE-2009-5155 | — | — | 3.9% | Feb 26, 2019 | In the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/regcomp.c misparses alternatives, which al... |
| CVE-2009-5154 | — | — | 2.3% | Feb 9, 2019 | An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. There is a default password of meinsm for the admin account... |
| CVE-2009-5153 | — | — | 6.1% | Nov 21, 2018 | In Novell NetWare before 6.5 SP8, a stack buffer overflow in processing of CALLIT RPC calls in the NFS Portmapper daemon... |
| CVE-2009-5152 | — | — | 0.2% | May 11, 2018 | Absolute Computrace Agent, as distributed on certain Dell Inspiron systems through 2009, has a race condition with the D... |
| CVE-2009-5151 | — | — | 0.5% | May 11, 2018 | The stub component of Absolute Computrace Agent V70.785 executes code from a disk's inter-partition space without requir... |
| CVE-2009-5150 | — | — | 0.5% | May 11, 2018 | Absolute Computrace Agent V80.845 and V80.866 does not have a digital signature for the configuration block, which allow... |
| CVE-2009-2413 | — | — | — | Mar 5, 2018 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was... |
| CVE-2009-4267 | — | — | 1.5% | Feb 19, 2018 | The console in Apache jUDDI 3.0.0 does not properly escape line feeds, which allows remote authenticated users to spoof ... |
| CVE-2009-5144 | — | — | 0.9% | Feb 3, 2018 | mod-gnutls does not validate client certificates when "GnuTLSClientVerify require" is set in a directory context, which ... |
| CVE-2009-1193 | — | — | — | Jan 30, 2018 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. ... |
| CVE-2009-1198 | — | — | 4.2% | Oct 30, 2017 | Cross-site scripting (XSS) vulnerability in Apache jUDDI before 2.0 allows remote attackers to inject arbitrary web scri... |
Check if your code is affected by 2009 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now