2009 CVE Vulnerabilities
5,054 CVEs published in 2009.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2009-2927 | — | — | 0.9% | Aug 21, 2009 | SQL injection vulnerability in DetailFile.php in DigitalSpinners DS CMS 1.0 allows remote attackers to execute arbitrary... |
| CVE-2009-2926 | — | — | 0.9% | Aug 21, 2009 | Multiple SQL injection vulnerabilities in PHP Competition System BETA 0.84 and earlier allow remote attackers to execute... |
| CVE-2009-2474 | — | — | 1.4% | Aug 21, 2009 | neon before 0.28.6, when OpenSSL or GnuTLS is used, does not properly handle a '\0' character in a domain name in the su... |
| CVE-2009-2473 | — | — | 8.4% | Aug 21, 2009 | neon before 0.28.6, when expat is used, does not properly detect recursion during entity expansion, which allows context... |
| CVE-2009-2056 | — | — | 1.3% | Aug 21, 2009 | Cisco IOS XR 3.8.1 and earlier allows remote authenticated users to cause a denial of service (process crash) via vector... |
| CVE-2009-1879 | — | — | 8.3% | Aug 21, 2009 | Cross-site scripting (XSS) vulnerability in index.template.html in the express-install templates in the SDK in Adobe Fle... |
| CVE-2009-1154 | — | — | 1.4% | Aug 21, 2009 | Cisco IOS XR 3.8.1 and earlier allows remote attackers to cause a denial of service (process crash) via a long BGP UPDAT... |
| CVE-2009-2925 | — | — | 3.5% | Aug 21, 2009 | Directory traversal vulnerability in DJcalendar.cgi in DJCalendar allows remote attackers to read arbitrary files via a ... |
| CVE-2009-2924 | — | — | 0.9% | Aug 21, 2009 | Multiple SQL injection vulnerabilities in Videos Broadcast Yourself 2 allow remote attackers to execute arbitrary SQL co... |
| CVE-2009-2923 | — | — | 3.0% | Aug 21, 2009 | Multiple directory traversal vulnerabilities in BitmixSoft PHP-Lance 1.52 allow remote attackers to read arbitrary files... |
| CVE-2009-2922 | — | — | 2.6% | Aug 21, 2009 | Absolute path traversal vulnerability in pixaria.image.php in Pixaria Gallery 2.0.0 through 2.3.5 allows remote attacker... |
| CVE-2009-2921 | — | — | 1.2% | Aug 21, 2009 | Multiple SQL injection vulnerabilities in login.php in MOC Designs PHP News 1.1 allow remote attackers to execute arbitr... |
| CVE-2009-2920 | — | — | 1.2% | Aug 21, 2009 | Multiple cross-site scripting (XSS) vulnerabilities in Elvin 1.2.2 allow remote attackers to inject arbitrary web script... |
| CVE-2009-2919 | — | — | 0.9% | Aug 21, 2009 | Cross-site scripting (XSS) vulnerability in Boonex Orca 2.0 and 2.0.2 allows remote authenticated users to inject arbitr... |
| CVE-2009-2918 | — | — | 0.9% | Aug 21, 2009 | The tgbvpn.sys driver in TheGreenBow IPSec VPN Client 4.61.003 allows local users to cause a denial of service (NULL poi... |
| CVE-2009-2917 | — | — | 3.4% | Aug 21, 2009 | Stack-based buffer overflow in ImTOO MPEG Encoder 3.1.53 allows remote attackers to cause a denial of service (crash) or... |
| CVE-2009-2916 | — | — | 3.4% | Aug 21, 2009 | Format string vulnerability in the CNS_AddTxt function in logs.dll in 2K Games Vietcong 2 1.10 and earlier might allow r... |
| CVE-2009-2915 | — | — | 1.0% | Aug 21, 2009 | SQL injection vulnerability in 2fly_gift.php in 2FLY Gift Delivery System 6.0 allows remote attackers to execute arbitra... |
| CVE-2009-2962 | — | — | — | Aug 21, 2009 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2009-2692. Reason: This candidate is a duplicate of ... |
| CVE-2009-2914 | — | — | 0.9% | Aug 21, 2009 | Cross-site scripting (XSS) vulnerability in index.php in XZero Community Classifieds 4.97.8 and earlier allows remote at... |
| CVE-2009-2913 | — | — | 0.9% | Aug 21, 2009 | Cross-site scripting (XSS) vulnerability in index.php in XZero Community Classifieds 4.97.8 allows remote attackers to i... |
| CVE-2009-2912 | — | — | 0.4% | Aug 21, 2009 | The (1) sendfile and (2) sendfilev functions in Sun Solaris 8 through 10, and OpenSolaris before snv_110, allow local us... |
| CVE-2009-2732 | — | — | 7.3% | Aug 21, 2009 | The checkHTTPpassword function in http.c in ntop 3.3.10 and earlier allows remote attackers to cause a denial of service... |
| CVE-2009-2694 | — | — | 20.3% | Aug 21, 2009 | The msn_slplink_process_msg function in libpurple/protocols/msn/slplink.c in libpurple, as used in Pidgin (formerly Gaim... |
| CVE-2009-0638 | — | — | 2.9% | Aug 21, 2009 | The Cisco Firewall Services Module (FWSM) 2.x, 3.1 before 3.1(16), 3.2 before 3.2(13), and 4.0 before 4.0(6) for Cisco C... |
Check if your code is affected by 2009 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now