2009 CVE Vulnerabilities
5,054 CVEs published in 2009.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2009-2626 | — | — | 8.3% | Dec 1, 2009 | The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific ... |
| CVE-2009-4121 | — | — | 0.6% | Dec 1, 2009 | Multiple cross-site request forgery (CSRF) vulnerabilities in Quick.CMS 2.4 and Quick.CMS.Lite 2.4 allow remote attacker... |
| CVE-2009-4120 | — | — | 1.0% | Dec 1, 2009 | Multiple cross-site request forgery (CSRF) vulnerabilities in Quick.Cart 3.4 allow remote attackers to hijack the authen... |
| CVE-2009-4119 | — | — | 1.3% | Dec 1, 2009 | Cross-site scripting (XSS) vulnerability in Feed Element Mapper module 5.x before 5.x-1.3, 6.x before 6.x-1.3, and 6.x-2... |
| CVE-2009-4118 | — | — | 2.5% | Dec 1, 2009 | The StartServiceCtrlDispatcher function in the cvpnd service (cvpnd.exe) in Cisco VPN client for Windows before 5.0.06.0... |
| CVE-2009-4117 | — | — | 7.8% | Dec 1, 2009 | Multiple stack-based buffer overflows in pdf_shade4.c in MuPDF before commit 20091125231942, as used in SumatraPDF befor... |
| CVE-2009-4116 | — | — | 2.0% | Nov 30, 2009 | Multiple directory traversal vulnerabilities in CutePHP CuteNews 1.4.6, when magic_quotes_gpc is disabled, allow remote ... |
| CVE-2009-4115 | — | — | 2.0% | Nov 30, 2009 | Multiple static code injection vulnerabilities in the Categories module in CutePHP CuteNews 1.4.6 allow remote authentic... |
| CVE-2009-4114 | — | — | 0.8% | Nov 30, 2009 | kl1.sys in Kaspersky Anti-Virus 2010 9.0.0.463, and possibly other versions before 9.0.0.736, does not properly validate... |
| CVE-2009-4113 | — | — | 1.3% | Nov 30, 2009 | Static code injection vulnerability in the Categories module in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allo... |
| CVE-2009-4112 | — | — | 11.5% | Nov 30, 2009 | Cacti 0.8.7e and earlier allows remote authenticated administrators to gain privileges by modifying the "Data Input Meth... |
| CVE-2009-4030 | — | — | 0.4% | Nov 30, 2009 | MySQL 5.1.x before 5.1.41 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM tabl... |
| CVE-2009-4028 | — | — | 1.8% | Nov 30, 2009 | The vio_verify_callback function in viosslfactories.c in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41, when OpenSSL... |
| CVE-2009-4019 | — | — | 16.3% | Nov 30, 2009 | mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors during execution of cert... |
| CVE-2009-4110 | — | — | 1.7% | Nov 29, 2009 | Cross-site scripting (XSS) vulnerability in the search functionality in DotNetNuke 4.8 through 5.1.4 allows remote attac... |
| CVE-2009-4109 | — | — | 1.2% | Nov 29, 2009 | The install wizard in DotNetNuke 4.0 through 5.1.4 does not prevent anonymous users from accessing functionality related... |
| CVE-2009-4108 | — | — | 2.4% | Nov 29, 2009 | XM Easy Personal FTP Server 5.8.0 allows remote authenticated users to cause a denial of service (crash) by uploading or... |
| CVE-2009-4107 | — | — | 4.8% | Nov 29, 2009 | Buffer overflow in Invisible Browsing 5.0.52 allows user-assisted remote attackers to execute arbitrary code via a craft... |
| CVE-2009-4106 | — | — | 2.4% | Nov 29, 2009 | Unrestricted file upload vulnerability in admintools/editpage-2.php in Agoko CMS 0.4 and earlier allows remote attackers... |
| CVE-2009-4105 | — | — | 3.5% | Nov 29, 2009 | TYPSoft FTP Server 1.10 allows remote authenticated users to cause a denial of service (crash) by sending an APPE (appen... |
| CVE-2009-4104 | — | — | 2.1% | Nov 29, 2009 | SQL injection vulnerability in Lyften Designs LyftenBloggie (com_lyftenbloggie) component 1.0.4 for Joomla! allows remot... |
| CVE-2009-4103 | — | — | 2.4% | Nov 29, 2009 | Buffer overflow in Robo-FTP 3.6.17, and possibly other versions, allows remote FTP servers to cause a denial of service ... |
| CVE-2009-4102 | — | — | 3.4% | Nov 29, 2009 | Sage 1.4.3 and earlier extension for Firefox performs certain operations with chrome privileges, which allows remote att... |
| CVE-2009-4101 | — | — | 3.6% | Nov 29, 2009 | infoRSS 1.1.4.2 and earlier extension for Firefox performs certain operations with chrome privileges, which allows remot... |
| CVE-2009-4100 | — | — | 3.9% | Nov 29, 2009 | Yoono extension before 6.1.1 for Firefox performs certain operations with chrome privileges, which allows user-assisted ... |
Check if your code is affected by 2009 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now