2009 CVE Vulnerabilities
5,054 CVEs published in 2009.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2009-4065 | — | — | 1.2% | Nov 24, 2009 | Cross-site scripting (XSS) vulnerability in the settings page in the Strongarm module 6.x before 6.x-1.1 for Drupal allo... |
| CVE-2009-4064 | — | — | 1.2% | Nov 24, 2009 | Cross-site scripting (XSS) vulnerability in the Gallery Assist module 6.x before 6.x-1.7 for Drupal allows remote attack... |
| CVE-2009-4063 | — | — | 1.2% | Nov 24, 2009 | Cross-site scripting (XSS) vulnerability in the Subgroups for Organic Groups (OG) module 5.x before 5.x-4.0 and 5.x befo... |
| CVE-2009-4062 | — | — | 1.2% | Nov 24, 2009 | Multiple cross-site scripting (XSS) vulnerabilities in the Printfriendly module 6.x before 6.x-1.6 for Drupal allow remo... |
| CVE-2009-4061 | — | — | 1.2% | Nov 24, 2009 | Multiple cross-site scripting (XSS) vulnerabilities in the Agreement module 6.x before 6.x-1.2 for Drupal allow remote a... |
| CVE-2009-4060 | — | — | 2.2% | Nov 24, 2009 | SQL injection vulnerability in includes/content/viewProd.inc.php in CubeCart before 4.3.7 remote attackers to execute ar... |
| CVE-2009-4059 | — | — | 1.0% | Nov 24, 2009 | SQL injection vulnerability in the JoomClip (com_joomclip) component for Joomla! allows remote attackers to execute arbi... |
| CVE-2009-4058 | — | — | 1.0% | Nov 24, 2009 | SQL injection vulnerability in allauctions.php in Telebid Auction Script allows remote attackers to execute arbitrary SQ... |
| CVE-2009-4057 | — | — | 1.0% | Nov 24, 2009 | SQL injection vulnerability in the inertialFATE iF Portfolio Nexus (com_if_nexus) component 1.1 for Joomla! allows remot... |
| CVE-2009-4056 | — | — | 2.5% | Nov 24, 2009 | Directory traversal vulnerability in admin/popup.php in Betsy CMS 3.5 allows remote attackers to include and execute arb... |
| CVE-2009-4017 | — | — | 12.0% | Nov 24, 2009 | PHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created when handling a multipa... |
| CVE-2009-3843 | — | — | 78.8% | Nov 24, 2009 | HP Operations Manager 8.10 on Windows contains a "hidden account" in the XML file that specifies Tomcat users, which all... |
| CVE-2009-4054 | — | — | — | Nov 23, 2009 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2009-3672. Reason: This candidate is a duplicate of... |
| CVE-2009-4052 | — | — | 2.0% | Nov 23, 2009 | Multiple cross-site scripting (XSS) vulnerabilities in the JSF Widget Library Runtime in IBM Rational Application Develo... |
| CVE-2009-4051 | — | — | 6.2% | Nov 23, 2009 | Home FTP Server 1.10.1.139 allows remote attackers to cause a denial of service (daemon outage) via multiple invalid SIT... |
| CVE-2009-4050 | — | — | 7.6% | Nov 23, 2009 | Directory traversal vulnerability in get_file.php in phpMyBackupPro 2.1 allows remote attackers to read arbitrary files ... |
| CVE-2009-4049 | — | — | 1.1% | Nov 23, 2009 | Heap-based buffer overflow in aswRdr.sys (aka the TDI RDR driver) in avast! Home and Professional 4.8.1356.0 allows loca... |
| CVE-2009-4048 | — | — | 2.4% | Nov 23, 2009 | Dxmsoft XM Easy Personal FTP Server 5.8.0 allows remote authenticated users to cause a denial of service (daemon outage)... |
| CVE-2009-4047 | — | — | 1.9% | Nov 23, 2009 | Multiple cross-site scripting (XSS) vulnerabilities in PHD Help Desk 1.43 allow remote attackers to inject arbitrary web... |
| CVE-2009-3559 | — | — | 2.7% | Nov 23, 2009 | main/streams/plain_wrapper.c in PHP 5.3.x before 5.3.1 does not recognize the safe_mode_include_dir directive, which all... |
| CVE-2009-3558 | — | — | 2.1% | Nov 23, 2009 | The posix_mkfifo function in ext/posix/posix.c in PHP before 5.2.12 and 5.3.x before 5.3.1 allows context-dependent atta... |
| CVE-2009-3557 | — | — | 2.1% | Nov 23, 2009 | The tempnam function in ext/standard/file.c in PHP before 5.2.12 and 5.3.x before 5.3.1 allows context-dependent attacke... |
| CVE-2009-4046 | — | — | 1.1% | Nov 20, 2009 | Multiple SQL injection vulnerabilities in FrontAccounting (FA) 2.2.x before 2.2 RC allow remote attackers to execute arb... |
| CVE-2009-4045 | — | — | 1.1% | Nov 20, 2009 | Multiple SQL injection vulnerabilities in FrontAccounting (FA) before 2.1.7 allow remote attackers to execute arbitrary ... |
| CVE-2009-4044 | — | — | 1.4% | Nov 20, 2009 | The Web Services module 6.x for Drupal does not perform the expected access control, which allows remote attackers to ma... |
Check if your code is affected by 2009 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now