2009 CVE Vulnerabilities
5,054 CVEs published in 2009.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2009-4167 | — | — | 1.1% | Dec 2, 2009 | Unspecified vulnerability in the Automatic Base Tags for RealUrl (lt_basetag) extension 1.0.0 for TYPO3 allows remote at... |
| CVE-2009-4166 | — | — | 1.0% | Dec 2, 2009 | SQL injection vulnerability in the Trips (mchtrips) extension 2.0.0 for TYPO3 allows remote attackers to execute arbitra... |
| CVE-2009-4165 | — | — | 1.0% | Dec 2, 2009 | SQL injection vulnerability in the simple Glossar (simple_glossar) extension 1.0.3 and earlier for TYPO3 allows remote a... |
| CVE-2009-4164 | — | — | 0.9% | Dec 2, 2009 | Cross-site scripting (XSS) vulnerability in the simple Glossar (simple_glossar) extension 1.0.3 and earlier for TYPO3 al... |
| CVE-2009-4163 | — | — | 1.0% | Dec 2, 2009 | SQL injection vulnerability in the TW Productfinder (tw_productfinder) extension 0.0.2 and earlier for TYPO3 allows remo... |
| CVE-2009-4162 | — | — | 0.3% | Dec 2, 2009 | Unspecified vulnerability in the DB Integration (wfqbe) extension 1.3.1 and earlier for TYPO3 allows local users to exec... |
| CVE-2009-4161 | — | — | 0.8% | Dec 2, 2009 | Cross-site scripting (XSS) vulnerability in the [AN] Search it! (an_searchit) extension 2.4.1 and earlier for TYPO3 allo... |
| CVE-2009-4160 | — | — | 1.2% | Dec 2, 2009 | Unspecified vulnerability in the Simple download-system with counter and categories (kk_downloader) extension 1.2.1 and ... |
| CVE-2009-4159 | — | — | 0.8% | Dec 2, 2009 | Cross-site scripting (XSS) vulnerability in the newsletter configuration feature in the backend module in the Direct Mai... |
| CVE-2009-4158 | — | — | 1.1% | Dec 2, 2009 | SQL injection vulnerability in the Calendar Base (cal) extension before 1.2.1 for TYPO3 allows remote attackers to execu... |
| CVE-2009-4157 | — | — | 1.2% | Dec 2, 2009 | Multiple cross-site scripting (XSS) vulnerabilities in index.php in the ProofReader (com_proofreader) component 1.0 RC9 ... |
| CVE-2009-4156 | — | — | 2.1% | Dec 2, 2009 | PHP remote file inclusion vulnerability in modules/pms/index.php in Ciamos CMS 0.9.5 and earlier allows remote attackers... |
| CVE-2009-4155 | — | — | 0.9% | Dec 2, 2009 | Multiple SQL injection vulnerabilities in Eshopbuilde CMS allow remote attackers to execute arbitrary SQL commands via t... |
| CVE-2009-4154 | — | — | 2.9% | Dec 2, 2009 | Directory traversal vulnerability in includes/feedcreator.class.php in Elxis CMS allows remote attackers to read arbitra... |
| CVE-2009-4153 | — | — | 1.2% | Dec 2, 2009 | Unspecified vulnerability in the XMLAccess component in IBM WebSphere Portal 6.1.x before 6.1.0.3 has unknown impact and... |
| CVE-2009-4152 | — | — | 1.1% | Dec 2, 2009 | Cross-site scripting (XSS) vulnerability in the Collaboration component in IBM WebSphere Portal 6.1.x before 6.1.0.3 all... |
| CVE-2009-4151 | — | — | 1.8% | Dec 2, 2009 | Session fixation vulnerability in html/Elements/SetupSessionCookie in Best Practical Solutions RT 3.0.0 through 3.6.9 an... |
| CVE-2009-4027 | — | — | 2.3% | Dec 2, 2009 | Race condition in the mac80211 subsystem in the Linux kernel before 2.6.32-rc8-next-20091201 allows remote attackers to ... |
| CVE-2009-4026 | — | — | 3.1% | Dec 2, 2009 | The mac80211 subsystem in the Linux kernel before 2.6.32-rc8-next-20091201 allows remote attackers to cause a denial of ... |
| CVE-2009-3585 | — | — | 2.7% | Dec 2, 2009 | Session fixation vulnerability in html/Elements/SetupSessionCookie in Best Practical Solutions RT 3.0.0 through 3.6.9 an... |
| CVE-2009-2686 | — | — | 0.4% | Dec 2, 2009 | Unspecified vulnerability in HP NonStop G06.12.00 through G06.32.00, H06.08.00 through H06.18.01, and J06.04.00 through ... |
| CVE-2009-4150 | — | — | 0.4% | Dec 2, 2009 | dasauto in IBM DB2 8 before FP18, 9.1 before FP8, 9.5 before FP4, and 9.7 before FP1 permits execution by unprivileged u... |
| CVE-2009-4055 | — | — | 2.8% | Dec 2, 2009 | rtp.c in Asterisk Open Source 1.2.x before 1.2.37, 1.4.x before 1.4.27.1, 1.6.0.x before 1.6.0.19, and 1.6.1.x before 1.... |
| CVE-2009-3672 | — | — | 71.8% | Dec 2, 2009 | Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory that (1) were not properly initialized or... |
| CVE-2009-4128 | — | — | 0.6% | Dec 1, 2009 | GNU GRand Unified Bootloader (GRUB) 2 1.97 only compares the submitted portion of a password with the actual password, w... |
Check if your code is affected by 2009 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now