2009 CVE Vulnerabilities
5,054 CVEs published in 2009.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2009-3014 | — | — | 1.0% | Aug 31, 2009 | Mozilla Firefox 3.0.13 and earlier, 3.5, 3.6 a1 pre, and 3.7 a1 pre; SeaMonkey 1.1.17; and Mozilla 1.7.x and earlier do ... |
| CVE-2009-3013 | — | — | 1.7% | Aug 31, 2009 | Opera 9.52 and earlier, and 10.00 Beta 3 Build 1699, does not properly block data: URIs in Location headers in HTTP resp... |
| CVE-2009-3012 | — | — | 0.8% | Aug 31, 2009 | Mozilla Firefox 3.0.13 and earlier, 3.5, 3.6 a1 pre, and 3.7 a1 pre does not properly block data: URIs in Location heade... |
| CVE-2009-3011 | — | — | 0.9% | Aug 31, 2009 | Google Chrome 1.0.154.48 and earlier, 2.0.172.28, 2.0.172.37, and 3.0.193.2 Beta does not properly block data: URIs in R... |
| CVE-2009-3010 | — | — | 1.9% | Aug 31, 2009 | Mozilla Firefox 3.0.13 and earlier, 3.5, 3.6 a1 pre, and 3.7 a1 pre; SeaMonkey 1.1.17; and Mozilla 1.7.x and earlier do ... |
| CVE-2009-3008 | — | — | 0.8% | Aug 28, 2009 | K-Meleon 1.5.3 allows context-dependent attackers to spoof the address bar, via window.open with a relative URI, to show... |
| CVE-2009-3007 | — | — | 0.6% | Aug 28, 2009 | Mozilla Firefox 3.5.1 and SeaMonkey 1.1.17, and Flock 2.5.1, allow context-dependent attackers to spoof the address bar,... |
| CVE-2009-3006 | — | — | 1.0% | Aug 28, 2009 | Maxthon Browser 2.5.3.80 UNICODE allows remote attackers to spoof the address bar, via window.open with a relative URI, ... |
| CVE-2009-3005 | — | — | 0.9% | Aug 28, 2009 | Lunascape 5.1.3 and 5.1.4 allows remote attackers to spoof the address bar, via window.open with a relative URI, to show... |
| CVE-2009-3004 | — | — | 0.9% | Aug 28, 2009 | Avant Browser 11.7 Builds 35 and 36 allows remote attackers to spoof the address bar, via window.open with a relative UR... |
| CVE-2009-3003 | — | — | 10.6% | Aug 28, 2009 | Microsoft Internet Explorer 6 through 8 allows remote attackers to spoof the address bar, via window.open with a relativ... |
| CVE-2009-3002 | — | — | 1.0% | Aug 28, 2009 | The Linux kernel before 2.6.31-rc7 does not initialize certain data structures within getname functions, which allows lo... |
| CVE-2009-3001 | — | — | 1.0% | Aug 28, 2009 | The llc_ui_getname function in net/llc/af_llc.c in the Linux kernel 2.6.31-rc7 and earlier does not initialize a certain... |
| CVE-2009-3000 | — | — | 1.6% | Aug 28, 2009 | The sockfs module in the kernel in Sun Solaris 10 and OpenSolaris snv_41 through snv_122, when Network Cache Accelerator... |
| CVE-2009-2695 | — | — | 0.5% | Aug 28, 2009 | The Linux kernel before 2.6.31-rc7 does not properly prevent mmap operations that target page zero and other low memory ... |
| CVE-2009-2978 | — | — | 1.4% | Aug 27, 2009 | SQL injection vulnerability in SugarCRM 4.5.1o and earlier, 5.0.0k and earlier, and 5.2.0g and earlier, allows remote at... |
| CVE-2009-2977 | — | — | 0.5% | Aug 27, 2009 | The Cisco Security Monitoring, Analysis and Response System (CS-MARS) 6.0.4 and earlier stores cleartext passwords in lo... |
| CVE-2009-2976 | — | — | 1.4% | Aug 27, 2009 | Cisco Aironet Lightweight Access Point (AP) devices send the contents of certain multicast data frames in cleartext, whi... |
| CVE-2009-2975 | — | — | 2.1% | Aug 27, 2009 | Mozilla Firefox 3.5.2 on Windows XP, in some situations possibly involving an incompletely configured protocol handler, ... |
| CVE-2009-2974 | — | — | 1.2% | Aug 27, 2009 | Google Chrome 1.0.154.65, 1.0.154.48, and earlier allows remote attackers to (1) cause a denial of service (application ... |
| CVE-2009-2973 | — | — | 0.9% | Aug 27, 2009 | Google Chrome before 2.0.172.43 does not prevent SSL connections to a site with an X.509 certificate signed with the (1)... |
| CVE-2009-2972 | — | — | 2.9% | Aug 27, 2009 | in.lpd in the print service in Sun Solaris 8 and 9 allows remote attackers to cause a denial of service (memory consumpt... |
| CVE-2009-2935 | — | — | 5.0% | Aug 27, 2009 | Google V8, as used in Google Chrome before 2.0.172.43, allows remote attackers to bypass intended restrictions on readin... |
| CVE-2009-2861 | — | — | 1.0% | Aug 27, 2009 | The Over-the-Air Provisioning (OTAP) functionality on Cisco Aironet Lightweight Access Point 1100 and 1200 devices does ... |
| CVE-2009-2054 | — | — | 3.4% | Aug 27, 2009 | Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x, 5.x before 5.1(3g), 6.x before 6.1(4), 7.0 be... |
Check if your code is affected by 2009 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now