2009 CVE Vulnerabilities
5,054 CVEs published in 2009.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2009-3268 | — | — | 0.8% | Sep 18, 2009 | Google Chrome 1.0.154.48 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an autom... |
| CVE-2009-3267 | — | — | 15.9% | Sep 18, 2009 | Microsoft Internet Explorer 6 through 6.0.2900.2180, and 7.0.6000.16711, allows remote attackers to cause a denial of se... |
| CVE-2009-3266 | — | — | 2.7% | Sep 18, 2009 | Opera before 10.01 does not properly restrict HTML in a (1) RSS or (2) Atom feed, which allows remote attackers to condu... |
| CVE-2009-3265 | — | — | 1.7% | Sep 18, 2009 | Cross-site scripting (XSS) vulnerability in Opera 9 and 10 allows remote attackers to inject arbitrary web script or HTM... |
| CVE-2009-3264 | — | — | 3.5% | Sep 18, 2009 | The getSVGDocument method in Google Chrome before 3.0.195.21 omits an unspecified "access check," which allows remote we... |
| CVE-2009-3263 | — | — | 1.4% | Sep 18, 2009 | Cross-site scripting (XSS) vulnerability in Google Chrome 2.x and 3.x before 3.0.195.21 allows remote attackers to injec... |
| CVE-2009-2793 | — | — | 0.5% | Sep 18, 2009 | The kernel in NetBSD, probably 5.0.1 and earlier, on x86 platforms does not properly handle a pre-commit failure of the ... |
| CVE-2009-2741 | — | — | 3.3% | Sep 18, 2009 | Unspecified vulnerability in the wberuntimeear application in the test servlet in IBM WebSphere Business Events 6.1 and ... |
| CVE-2009-3262 | — | — | 0.8% | Sep 18, 2009 | Cross-site scripting (XSS) vulnerability in the Self Service UI (SSUI) in IBM Tivoli Identity Manager (ITIM) 5.0.0.5 all... |
| CVE-2009-3261 | — | — | 1.4% | Sep 18, 2009 | update/update_0.1.2_to_0.2.php in LiveStreet 0.2 does not require administrative authentication, which allows remote att... |
| CVE-2009-3260 | — | — | 1.3% | Sep 18, 2009 | Cross-site scripting (XSS) vulnerability in LiveStreet 0.2 allows remote attackers to inject arbitrary web script or HTM... |
| CVE-2009-3259 | — | — | 1.1% | Sep 18, 2009 | Multiple SQL injection vulnerabilities in RASH Quote Management System (RQMS) 1.2.2 allow remote attackers to execute ar... |
| CVE-2009-3258 | — | — | 1.7% | Sep 18, 2009 | vtiger CRM before 5.1.0 allows remote authenticated users, with certain View privileges, to delete (1) attachments, (2) ... |
| CVE-2009-3257 | — | — | 0.9% | Sep 18, 2009 | vtiger CRM before 5.1.0 allows remote authenticated users to bypass the permissions on the (1) Account Billing Address a... |
| CVE-2009-3256 | — | — | 1.3% | Sep 18, 2009 | Cross-site scripting (XSS) vulnerability in include/ajax/blogInfo.php in LiveStreet 0.2 allows remote attackers to injec... |
| CVE-2009-3255 | — | — | 1.1% | Sep 18, 2009 | SQL injection vulnerability in RASH Quote Management System (RQMS) 1.2.2 and earlier, when magic_quotes_gpc is disabled,... |
| CVE-2009-3254 | — | — | 4.8% | Sep 18, 2009 | Multiple stack-based buffer overflows in Ultimate Player 1.56 beta allow remote attackers to execute arbitrary code via ... |
| CVE-2009-3253 | — | — | 4.9% | Sep 18, 2009 | Stack-based buffer overflow in TriceraSoft Swift Ultralite 1.032 allows remote attackers to cause a denial of service (c... |
| CVE-2009-3252 | — | — | 1.0% | Sep 18, 2009 | Multiple SQL injection vulnerabilities in news.php in Rock Band CMS 0.10 allow remote attackers to execute arbitrary SQL... |
| CVE-2009-3251 | — | — | 1.0% | Sep 18, 2009 | include/utils/ListViewUtils.php in vtiger CRM before 5.1.0 allows remote authenticated users to bypass intended access r... |
| CVE-2009-3250 | — | — | 10.9% | Sep 18, 2009 | The saveForwardAttachments procedure in the Compose Mail functionality in vtiger CRM 5.0.4 allows remote authenticated u... |
| CVE-2009-3249 | — | — | 9.6% | Sep 18, 2009 | Multiple directory traversal vulnerabilities in vtiger CRM 5.0.4 allow remote attackers to include and execute arbitrary... |
| CVE-2009-3248 | — | — | 1.3% | Sep 18, 2009 | Cross-site request forgery (CSRF) vulnerability in the RSS module in vtiger CRM 5.0.4 allows remote attackers to hijack ... |
| CVE-2009-3247 | — | — | 3.5% | Sep 18, 2009 | Cross-site scripting (XSS) vulnerability in the Activities module in vtiger CRM 5.0.4 allows remote attackers to inject ... |
| CVE-2009-3246 | — | — | 1.0% | Sep 18, 2009 | SQL injection vulnerability in spnews.php in MyBuxScript PTC-BUX allows remote attackers to execute arbitrary SQL comman... |
Check if your code is affected by 2009 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now