2009 CVE Vulnerabilities
5,054 CVEs published in 2009.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2009-3463 | — | — | 6.1% | Nov 4, 2009 | Array index error in Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via craf... |
| CVE-2009-0306 | — | — | 3.9% | Nov 4, 2009 | Buffer overflow in the IBM Lotus Notes Intellisync ActiveX control in lnresobject.dll in BlackBerry Desktop Manager in R... |
| CVE-2009-3852 | — | — | 1.7% | Nov 3, 2009 | Unspecified vulnerability in the XML component in IBM Runtimes for Java Technology 5.0.0 before SR10 has unknown impact ... |
| CVE-2009-3851 | — | — | 0.4% | Nov 3, 2009 | Trusted Extensions in Sun Solaris 10 interferes with the operation of the xscreensaver-demo command for the XScreenSaver... |
| CVE-2009-3720 | — | — | 27.9% | Nov 3, 2009 | The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and o... |
| CVE-2009-3299 | — | — | 2.3% | Nov 3, 2009 | Cross-site scripting (XSS) vulnerability in the resume blocktype in Mahara before 1.0.13, and 1.1.x before 1.1.7, allows... |
| CVE-2009-3298 | — | — | 2.3% | Nov 3, 2009 | Mahara before 1.0.13, and 1.1.x before 1.1.7, allows remote authenticated institution administrators to reset a site adm... |
| CVE-2009-3031 | — | — | 45.4% | Nov 3, 2009 | Stack-based buffer overflow in the BrowseAndSaveFile method in the Altiris eXpress NS ConsoleUtilities ActiveX control 6... |
| CVE-2009-3839 | — | — | 2.9% | Nov 2, 2009 | Unspecified vulnerability in the Solaris Trusted Extensions Policy configuration in Sun Solaris 10, and OpenSolaris snv_... |
| CVE-2009-3838 | — | — | 6.2% | Nov 2, 2009 | Stack-based buffer overflow in Pegasus Mail (PMail) 4.41 and possibly 4.51 allows remote POP3 servers to cause a denial ... |
| CVE-2009-3837 | — | — | 32.1% | Nov 2, 2009 | Stack-based buffer overflow in Eureka Email 2.2q allows remote POP3 servers to execute arbitrary code via a long error m... |
| CVE-2009-3836 | — | — | 0.9% | Nov 2, 2009 | ArubaOS 3.3.1.x, 3.3.2.x, RN 3.1.x, 3.4.x, and 3.3.2.x-FIPS on the Aruba Mobility Controller allows remote attackers to ... |
| CVE-2009-3835 | — | — | 1.0% | Nov 2, 2009 | SQL injection vulnerability in the JShop (com_jshop) component for Joomla! allows remote attackers to execute arbitrary ... |
| CVE-2009-3834 | — | — | 1.2% | Nov 2, 2009 | SQL injection vulnerability in the Photoblog (com_photoblog) component alpha 3 and alpha 3a for Joomla! allows remote at... |
| CVE-2009-3833 | — | — | 1.3% | Nov 2, 2009 | Cross-site scripting (XSS) vulnerability in index.php in TFTgallery 0.13 allows remote attackers to inject arbitrary web... |
| CVE-2009-3733 | — | — | 83.4% | Nov 2, 2009 | Directory traversal vulnerability in VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138 on L... |
| CVE-2009-3636 | — | — | 2.0% | Nov 2, 2009 | Cross-site scripting (XSS) vulnerability in the Install Tool subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.... |
| CVE-2009-3635 | — | — | 2.1% | Nov 2, 2009 | The Install Tool subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.... |
| CVE-2009-3634 | — | — | 2.0% | Nov 2, 2009 | Cross-site scripting (XSS) vulnerability in the Frontend Login Box (aka felogin) subcomponent in TYPO3 4.2.0 through 4.2... |
| CVE-2009-3633 | — | — | 0.9% | Nov 2, 2009 | Cross-site scripting (XSS) vulnerability in the t3lib_div::quoteJSvalue API function in TYPO3 4.0.13 and earlier, 4.1.x ... |
| CVE-2009-3632 | — | — | 1.6% | Nov 2, 2009 | SQL injection vulnerability in the traditional frontend editing feature in the Frontend Editing subcomponent in TYPO3 4.... |
| CVE-2009-3631 | — | — | 2.9% | Nov 2, 2009 | The Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta... |
| CVE-2009-3630 | — | — | 2.0% | Nov 2, 2009 | The Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta... |
| CVE-2009-3629 | — | — | 1.5% | Nov 2, 2009 | Multiple cross-site scripting (XSS) vulnerabilities in the Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x befor... |
| CVE-2009-3628 | — | — | 1.1% | Nov 2, 2009 | The Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta... |
Check if your code is affected by 2009 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now