2009 CVEs

5054 CVEs published in 2009. 28 critical, 82 high. Browse by vendor, severity, or with PoCs.

Top CVEs published in 2009
CVESeverityScorePublishedSummary
CVE-2009-3616Critical9.92009-10-23Multiple use-after-free vulnerabilities in vnc.c in the VNC server in QEMU 0.10.6 and earlier might allow guest OS users to execute arbitrary code on the host…
CVE-2009-0948Critical9.82021-06-02Multiple buffer overflows in the (1) cdf_read_sat, (2) cdf_read_long_sector_chain, and (3) cdf_read_ssat function in file before 5.02.
CVE-2009-0947Critical9.82021-06-02Multiple integer overflows in the (1) cdf_read_property_info and (2) cdf_read_sat functions in file before 5.02.
CVE-2009-1120Critical9.82020-01-15EMC RepliStor Server Service before ESA-09-003 has a DoASOCommand Remote Code Execution Vulnerability. The flaw exists within the DoRcvRpcCall RPC function -ex…
CVE-2009-5043Critical9.82019-10-31burn allows file names to escape via mishandled quotation marks
CVE-2009-5041Critical9.82019-10-31overkill has buffer overflow via long player names that can corrupt data on the server machine
CVE-2009-3887Critical9.82019-10-29ytnef has directory traversal
CVE-2009-4899Critical9.82019-10-28pixelpost 1.7.1 has SQL injection
CVE-2009-5156Critical9.82019-06-11An issue was discovered on ASMAX AR-804gu 66.34.1 devices. There is Command Injection via the cgi-bin/script query string.
CVE-2009-5154Critical9.82019-02-09An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. There is a default password of meinsm for the admin account.
CVE-2009-5153Critical9.82018-11-21In Novell NetWare before 6.5 SP8, a stack buffer overflow in processing of CALLIT RPC calls in the NFS Portmapper daemon in PKERNEL.NLM allowed remote unauthen…
CVE-2009-4013Critical9.82010-02-02Multiple directory traversal vulnerabilities in Lintian 1.23.x through 1.23.28, 1.24.x through 1.24.2.1, and 2.x before 2.3.2 allow remote attackers to overwri…
CVE-2009-4491Critical9.82010-01-13thttpd 2.25b0 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly…
CVE-2009-4488Critical9.82010-01-13Varnish 2.0.6 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly…
CVE-2009-4581Critical9.82010-01-06Directory traversal vulnerability in modules/admincp.php in RoseOnlineCMS 3 B1 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to inclu…
CVE-2009-2512Critical9.82009-11-11The Web Services on Devices API (WSDAPI) in Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 does not properly process the headers of WSD messages…
CVE-2009-3555Critical9.82009-11-09The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Serve…
CVE-2009-3421Critical9.82009-09-25login.php in Zenas PaoBacheca Guestbook 2.1, when register_globals is enabled, allows remote attackers to bypass authentication and gain administrative access…
CVE-2009-1048Critical9.82009-08-14The web interface on the snom VoIP phones snom 300, snom 320, snom 360, snom 370, and snom 820 with firmware 6.5 before 6.5.20, 7.1 before 7.1.39, and 7.3 befo…
CVE-2009-2494Critical9.82009-08-12The Active Template Library (ATL) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows…
All CVEs published in 2009 — newest first (page 1 of 51)
CVESeverityScorePublishedSummary
CVE-2009-10007Critical9.12026-06-09Catalyst::Plugin::Authentication versions before 0.10_027 for Perl is susceptible to session fixation attacks. Catalyst::Plugin::Authentication does not autom…
CVE-2009-200072025-09-16Talkative IRC v0.4.4.16 is vulnerable to a stack-based buffer overflow when processing specially crafted response strings sent to a connected client. An attack…
CVE-2009-200062025-09-16osCommerce versions up to and including 2.2 RC2a contain a vulnerability in its administrative file manager utility (admin/file_manager.php). The interface all…
CVE-2009-200052025-09-16A stack-based buffer overflow exists in the UtilConfigHome.csp endpoint of InterSystems Caché 2009.1. The vulnerability is triggered by sending a specially cra…
CVE-2009-200112025-08-30ContentKeeper Web Appliance (now maintained by Impero Software) versions prior to 125.10 are vulnerable to remote command execution due to insecure handling of…
CVE-2009-200102025-08-30Dogfood CRM version 2.0.10 contains a remote command execution vulnerability in the spell.php script used by its mail subsystem. The vulnerability arises from…
CVE-2009-200092025-08-30Belkin Bulldog Plus version 4.0.2 build 1219 contains a stack-based buffer overflow vulnerability in its web service authentication handler. When a specially c…
CVE-2009-200082025-08-30Green Dam Youth Escort version 3.17 is vulnerable to a stack-based buffer overflow when processing overly long URLs. The flaw resides in the URL filtering comp…
CVE-2009-100062025-08-22UFO: Alien Invasion versions up to and including 2.2.1 contain a buffer overflow vulnerability in its built-in IRC client component. When the client connects t…
CVE-2009-200042025-08-21gAlan 0.2.1, a modular audio processing environment for Windows, is vulnerable to a stack-based buffer overflow when parsing .galan files. The application fail…
CVE-2009-200032025-08-21Xenorate versions up to and including 2.50, a Windows-based multimedia player, is vulnerable to a stack-based buffer overflow when processing .xpl playlist fil…
CVE-2009-200022025-08-21Millenium MP3 Studio versions up to and including 2.0 is vulnerable to a stack-based buffer overflow when parsing .pls playlist files. The application fails to…
CVE-2009-100052025-08-20ContentKeeper Web Appliance (now maintained by Impero Software) versions prior to 125.10 expose the mimencode binary via a CGI endpoint, allowing unauthenticat…
CVE-2009-4123High7.52023-12-12The jruby-openssl gem before 0.6 for JRuby mishandles SSL certificate validation.
CVE-2009-10004Low3.52023-04-10A vulnerability was found in Turante Sandbox Theme up to 1.5.2. It has been classified as problematic. This affects the function sandbox_body_class of the file…
CVE-2009-10003Low3.52023-01-29A vulnerability was found in capnsquarepants wordcraft up to 0.6. It has been classified as problematic. Affected is an unknown function of the file tag.php. T…
CVE-2009-10002Low3.52023-01-13A vulnerability, which was classified as problematic, has been found in dpup fittr-flickr. This issue affects some unknown processing of the file fittr-flickr/…
CVE-2009-10001Low3.52023-01-13A vulnerability classified as problematic was found in jianlinwei cool-php-captcha up to 0.2. This vulnerability affects unknown code of the file example-form…
CVE-2009-1143High7.02022-11-23An issue was discovered in open-vm-tools 2009.03.18-154848. Local users can bypass intended access restrictions on mounting shares via a symlink attack that le…
CVE-2009-1142Medium6.72022-11-23An issue was discovered in open-vm-tools 2009.03.18-154848. Local users can gain privileges via a symlink attack on /tmp files if vmware-user-suid-wrapper is s…
CVE-2009-0948Critical9.82021-06-02Multiple buffer overflows in the (1) cdf_read_sat, (2) cdf_read_long_sector_chain, and (3) cdf_read_ssat function in file before 5.02.
CVE-2009-0947Critical9.82021-06-02Multiple integer overflows in the (1) cdf_read_property_info and (2) cdf_read_sat functions in file before 5.02.
CVE-2009-3721High7.82021-05-26Multiple directory traversal and buffer overflow vulnerabilities were discovered in yTNEF, and in Evolution's TNEF parser that is derived from yTNEF. A crafted…
CVE-2009-20001High8.12021-03-07An issue was discovered in MantisBT before 2.24.5. It associates a unique cookie string with each user. This string is not reset upon logout (i.e., the user se…
CVE-2009-5159Medium6.12020-03-13Invision Power Board (aka IPB or IP.Board) 2.x through 3.0.4, when Internet Explorer 5 is used, allows XSS via a .txt attachment.
CVE-2009-5140High8.82020-02-12The SIP implementation on the Linksys SPA2102 phone adapter provides hashed credentials in a response to an invalid authentication challenge, which makes it ea…
CVE-2009-5139High7.52020-02-12The SIP implementation on the Gizmo5 software phone provides hashed credentials in a response to an invalid authentication challenge, which makes it easier for…
CVE-2009-4067Medium6.82020-02-11Buffer overflow in the auerswald_probe function in the Auerswald Linux USB driver for the Linux kernel before 2.6.27 allows physically proximate attackers to e…
CVE-2009-5068High7.22020-01-15There is a file disclosure vulnerability in SMF (Simple Machines Forum) affecting versions through v2.0.3. On some configurations a SMF deployment is shared by…
CVE-2009-5025High7.52020-01-15A backdoor (aka BMSA-2009-07) was found in PyForum v1.0.3 where an attacker who knows a valid user email could force a password reset on behalf of that user.
CVE-2009-3724Medium6.12020-01-15python-markdown2 before 1.0.1.14 has multiple cross-site scripting (XSS) issues.
CVE-2009-1120Critical9.82020-01-15EMC RepliStor Server Service before ESA-09-003 has a DoASOCommand Remote Code Execution Vulnerability. The flaw exists within the DoRcvRpcCall RPC function -ex…
CVE-2009-5004Medium6.52019-11-09qpid-cpp 1.0 crashes when a large message is sent and the Digest-MD5 mechanism with a security layer is in use .
CVE-2009-4011High8.12019-11-09dtc-xen 0.5.x before 0.5.4 suffers from a race condition where an attacker could potentially get a bash access as xenXX user on the dom0, and then access a pot…
CVE-2009-3614Low3.32019-11-09liboping 1.3.2 allows users reading arbitrary files upon the local system.
CVE-2009-3552Low3.12019-11-09In RHEV-M VDC 2.2.0, it was found that the SSL certificate was not verified when using the client-side Red Hat Enterprise Virtualization Manager interface (a W…
CVE-2009-2802Medium6.12019-11-09MantisBT 1.2.x before 1.2.2 insecurely handles attachments and MIME types. Arbitrary inline attachment rendering could lead to cross-domain scripting or other…
CVE-2009-0035Medium5.52019-11-09alsa-utils 1.0.19 and later versions allows local users to overwrite arbitrary files via a symlink attack via the /usr/bin/alsa-info and /usr/bin/alsa-info.sh…
CVE-2009-5046Medium6.12019-11-06JSP Dump and Session Dump Servlet XSS in jetty before 6.1.22.
CVE-2009-5045High7.52019-11-06Dump Servlet information leak in jetty before 6.1.22.
CVE-2009-5050High7.52019-11-06konversation before 1.2.3 allows attackers to cause a denial of service.
CVE-2009-5049Medium6.12019-11-06WebApp JSP Snoop page XSS in jetty though 6.1.21.
CVE-2009-5048Medium6.12019-11-06Cookie Dump Servlet stored XSS vulnerability in jetty though 6.1.20.
CVE-2009-5043Critical9.82019-10-31burn allows file names to escape via mishandled quotation marks
CVE-2009-5042Critical9.12019-10-31python-docutils allows insecure usage of temporary files
CVE-2009-5041Critical9.82019-10-31overkill has buffer overflow via long player names that can corrupt data on the server machine
CVE-2009-3887Critical9.82019-10-29ytnef has directory traversal
CVE-2009-3723High7.52019-10-29asterisk allows calls on prohibited networks
CVE-2009-4900Medium6.12019-10-28pixelpost 1.7.1 has XSS
CVE-2009-4899Critical9.82019-10-28pixelpost 1.7.1 has SQL injection
CVE-2009-5158Medium6.12019-08-22The google-analyticator plugin before 5.2.1 for WordPress has insufficient HTML sanitization for Google Analytics API text.
CVE-2009-5157High8.82019-06-11On Linksys WAG54G2 1.00.10 devices, there is authenticated command injection via shell metacharacters in the setup.cgi c4_ping_ipaddr variable.
CVE-2009-5156Critical9.82019-06-11An issue was discovered on ASMAX AR-804gu 66.34.1 devices. There is Command Injection via the cgi-bin/script query string.
CVE-2009-5155High7.52019-02-26In the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/regcomp.c misparses alternatives, which allows attackers to cause a denial of ser…
CVE-2009-5154Critical9.82019-02-09An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. There is a default password of meinsm for the admin account.
CVE-2009-5153Critical9.82018-11-21In Novell NetWare before 6.5 SP8, a stack buffer overflow in processing of CALLIT RPC calls in the NFS Portmapper daemon in PKERNEL.NLM allowed remote unauthen…
CVE-2009-5152Medium4.12018-05-11Absolute Computrace Agent, as distributed on certain Dell Inspiron systems through 2009, has a race condition with the Dell Client Configuration Utility (DCCU)…
CVE-2009-5151Medium6.72018-05-11The stub component of Absolute Computrace Agent V70.785 executes code from a disk's inter-partition space without requiring a digital signature for that code…
CVE-2009-5150Medium6.72018-05-11Absolute Computrace Agent V80.845 and V80.866 does not have a digital signature for the configuration block, which allows attackers to set up communication wit…
CVE-2009-4267Medium6.52018-02-19The console in Apache jUDDI 3.0.0 does not properly escape line feeds, which allows remote authenticated users to spoof log entries via the numRows parameter.
CVE-2009-5144High7.52018-02-03mod-gnutls does not validate client certificates when "GnuTLSClientVerify require" is set in a directory context, which allows remote attackers to spoof client…
CVE-2009-1198Medium6.12017-10-30Cross-site scripting (XSS) vulnerability in Apache jUDDI before 2.0 allows remote attackers to inject arbitrary web script or HTML via the dsname parameter to…
CVE-2009-1197Medium5.32017-10-30Apache jUDDI before 2.0 allows attackers to spoof entries in log files via vectors related to error logging of keys from uddiget.jsp.
CVE-2009-5145Medium6.12017-08-07Cross-site scripting (XSS) vulnerability in ZMI pages that use the manage_tabs_message in Zope 2.11.4, 2.11.2, 2.10.9, 2.10.7, 2.10.6, 2.10.5, 2.10.4, 2.10.2…
CVE-2009-5147High7.32017-03-29DL::dlopen in Ruby 1.8, 1.9.0, 1.9.2, 1.9.3, 2.0.0 before patchlevel 648, and 2.1 before 2.1.8 opens libraries with tainted names.
CVE-2009-2197Medium4.32016-03-24Apple Safari before 9.1 allows remote attackers to spoof the user interface via a web page that places text in a crafted context, leading to unintended use of…
CVE-2009-51492015-11-21Arris DG860A, TG862A, and TG862G devices with firmware TS0703128_100611 through TS0705125D_031115 have predictable technician passwords, which makes it easier…
CVE-2009-51432015-08-04GE Healthcare Discovery 530C has a password of #bigguy1 for the (1) acqservice user and (2) wsservice user of the Xeleris System, which has unspecified impact…
CVE-2009-51422014-08-21Cross-site scripting (XSS) vulnerability in timthumb.php in TimThumb 1.09 and earlier, as used in Mimbo Pro 2.3.1 and other products, allows remote attackers t…
CVE-2009-50232014-06-10The (1) dshield.conf, (2) mail-buffered.conf, (3) mynetwatchman.conf, and (4) mynetwatchman.conf actions in action.d/ in Fail2ban before 0.8.5 allows local use…
CVE-2009-51412014-04-01Format string vulnerability in War FTP Daemon (warftpd) 1.82 RC 12 allows remote authenticated users to cause a denial of service (crash) via format string spe…
CVE-2009-51382014-03-07GnuTLS before 2.7.6, when the GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT flag is not enabled, treats version 1 X.509 certificates as intermediate CAs, which allows rem…
CVE-2009-51372014-01-03Stack-based buffer overflow in Mini-stream CastRipper 2.50.70 allows remote attackers to execute arbitrary code via a long URL in the [playlist] section in a…
CVE-2009-51362013-10-11The policy definition evaluator in Condor before 7.4.2 does not properly handle attributes in a WANT_SUSPEND policy that evaluate to an UNDEFINED state, which…
CVE-2009-50292013-05-02Integer overflow in the __tzfile_read function in glibc before 2.15 allows context-dependent attackers to cause a denial of service (crash) and possibly execut…
CVE-2009-51352013-05-02The Java XML parser in Echo before 2.1.1 and 3.x before 3.0.b6 allows remote attackers to read arbitrary files via a request containing an external entity decl…
CVE-2009-51342013-01-18Buffer overflow in the "create torrent dialog" functionality in uTorrent 1.8.3 build 15772, and possibly other versions before 1.8.3 (Build 16010), allows user…
CVE-2009-47382013-01-18Unspecified vulnerability in JustSystems Corporation ATOK 2006 through 2009 and ATOK flat-rate service, and Just Smile 4 with the ATOK Smile module, allows phy…
CVE-2009-28992012-12-05The monitor perl script in the Sybase database plug-in in SpringSource Hyperic HQ before 4.3 allows local users to obtain the database password by listing the…
CVE-2009-50672012-10-10Directory traversal vulnerability in html2ps before 1.0b6 allows remote attackers to read arbitrary files via a .. (dot dot) in the "include file" SSI directiv…
CVE-2009-51322012-08-26The Filtering Service in Websense Web Security and Web Filter before 6.3.1 Hotfix 106 and 7.x before 7.1 allow remote attackers to cause a denial of service (f…
CVE-2009-51312012-08-26The Receive Service in Websense Email Security before 7.1 does not recognize domain extensions in the blacklist, which allows remote attackers to bypass intend…
CVE-2009-51302012-08-26The Rules Service in Websense Email Security before 7.1 allows remote attackers to cause a denial of service (service crash) via an attachment with a crafted s…
CVE-2009-51292012-08-26The Websense V10000 appliance before 1.0.1 allows remote attackers to cause a denial of service (intermittent LDAP authentication outage) via a login attempt w…
CVE-2009-51282012-08-26The Websense V10000 appliance before 1.0.1 allows remote attackers to cause a denial of service (memory consumption and process crash) via a large file that is…
CVE-2009-51272012-08-26The Antivirus component in Comodo Internet Security before 3.8.64739.471 allows remote attackers to cause a denial of service (application crash) via a crafted…
CVE-2009-51262012-08-26The Antivirus component in Comodo Internet Security before 3.8.65951.477 allows remote attackers to cause a denial of service (application crash) via a crafted…
CVE-2009-51252012-08-26Comodo Internet Security before 3.9.95478.509 allows remote attackers to bypass malware detection in an RAR archive via an unspecified manipulation of the arch…
CVE-2009-51242012-08-26The Antivirus component in Comodo Internet Security before 3.11.108364.552 allows remote attackers to cause a denial of service (application crash) via a craft…
CVE-2009-51232012-08-26The Antivirus component in Comodo Internet Security before 3.11.108364.552 allows remote attackers to cause a denial of service (memory consumption) via a craf…
CVE-2009-51222012-08-23The Personal Email Manager component in Websense Email Security before 7.2 allows remote attackers to obtain potentially sensitive information from the JBoss s…
CVE-2009-51212012-08-23Websense Email Security 7.1 before Hotfix 4 allows remote attackers to bypass the sender-based blacklist by using the 8BITMIME EHLO keyword in the SMTP session.
CVE-2009-51202012-08-23The default configuration of Apache Tomcat in Websense Manager in Websense Web Security 7.0 and Web Filter 7.0 allows connections to TCP port 1812 from arbitra…
CVE-2009-51192012-08-23The default configuration of Apache Tomcat in Websense Manager in Websense Web Security 7.0 and Web Filter 7.0 enables weak SSL ciphers in conf/server.xml, whi…
CVE-2009-51182012-08-22Untrusted search path vulnerability in McAfee VirusScan Enterprise before 8.7i allows local users to gain privileges via a Trojan horse DLL in an unspecified d…
CVE-2009-51172012-08-22The Web Post Protection feature in McAfee Host Data Loss Prevention (DLP) 3.x before 3.0.100.10 and 9.x before 9.0.0.422, when HTTP Capture mode is enabled, al…
CVE-2009-51162012-08-22McAfee LinuxShield 1.5.1 and earlier does not properly implement client authentication, which allows remote authenticated users to obtain Admin access to the s…
CVE-2009-51152012-08-22McAfee Common Management Agent (CMA) 3.5.5 through 3.5.5.588 and 3.6.0 through 3.6.0.608, and McAfee Agent 4.0 before Patch 3, allows remote authenticated user…
CVE-2009-50262012-08-17The executable comment feature in MySQL 5.0.x before 5.0.93 and 5.1.x before 5.1.50, when running in certain slave configurations in which the slave is running…
CVE-2009-50662012-08-13twiddle.sh in JBoss AS 5.0 and EAP 5.0 and earlier accepts credentials as command-line arguments, which allows local users to read the credentials by listing t…