# Vulnerabilities published in 2009


- [CVE-2009-5159](https://insights.sbomify.com/CVE-2009-5159/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2009-5158](https://insights.sbomify.com/CVE-2009-5158/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2009-5157](https://insights.sbomify.com/CVE-2009-5157/): Command injection in n/a (high 8.8)
- [CVE-2009-5156](https://insights.sbomify.com/CVE-2009-5156/): Command injection in n/a (critical 9.8)
- [CVE-2009-5155](https://insights.sbomify.com/CVE-2009-5155/): Denial of service in n/a (high 7.5)
- [CVE-2009-5154](https://insights.sbomify.com/CVE-2009-5154/): Hardcoded credentials in n/a (critical 9.8)
- [CVE-2009-5153](https://insights.sbomify.com/CVE-2009-5153/): Memory corruption in n/a (critical 9.8)
- [CVE-2009-5152](https://insights.sbomify.com/CVE-2009-5152/): Race condition in n/a (medium 4.1)
- [CVE-2009-5151](https://insights.sbomify.com/CVE-2009-5151/): Security feature bypass in n/a (medium 6.7)
- [CVE-2009-5150](https://insights.sbomify.com/CVE-2009-5150/): Security feature bypass in n/a (medium 6.7)
- [CVE-2009-5149](https://insights.sbomify.com/CVE-2009-5149/): Hardcoded credentials in n/a (medium 4.3)
- [CVE-2009-5147](https://insights.sbomify.com/CVE-2009-5147/): Code injection in n/a (high 7.3)
- [CVE-2009-5145](https://insights.sbomify.com/CVE-2009-5145/): Zope Cross-site scripting (XSS) vulnerability in ZMI pages (medium 6.1)
- [CVE-2009-5144](https://insights.sbomify.com/CVE-2009-5144/): Auth bypass in n/a (high 7.5)
- [CVE-2009-5143](https://insights.sbomify.com/CVE-2009-5143/): Hardcoded credentials in n/a (critical 10.0)
- [CVE-2009-5142](https://insights.sbomify.com/CVE-2009-5142/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2009-5141](https://insights.sbomify.com/CVE-2009-5141/): Other in n/a (medium 4.0)
- [CVE-2009-5140](https://insights.sbomify.com/CVE-2009-5140/): Information disclosure in n/a (high 8.8)
- [CVE-2009-5139](https://insights.sbomify.com/CVE-2009-5139/): Information disclosure in n/a (high 7.5)
- [CVE-2009-5138](https://insights.sbomify.com/CVE-2009-5138/): Security feature bypass in n/a (medium 5.8)
- [CVE-2009-5137](https://insights.sbomify.com/CVE-2009-5137/): Memory corruption in n/a (high 7.5)
- [CVE-2009-5136](https://insights.sbomify.com/CVE-2009-5136/): Denial of service in n/a (medium 4.0)
- [CVE-2009-5135](https://insights.sbomify.com/CVE-2009-5135/): XML external entity in n/a (medium 5.0)
- [CVE-2009-5134](https://insights.sbomify.com/CVE-2009-5134/): Memory corruption in n/a (medium 6.8)
- [CVE-2009-5132](https://insights.sbomify.com/CVE-2009-5132/): Denial of service in n/a (medium 5.0)
- [CVE-2009-5131](https://insights.sbomify.com/CVE-2009-5131/): Security feature bypass in n/a (medium 5.0)
- [CVE-2009-5130](https://insights.sbomify.com/CVE-2009-5130/): Denial of service in n/a (medium 4.3)
- [CVE-2009-5129](https://insights.sbomify.com/CVE-2009-5129/): Denial of service in n/a (medium 5.0)
- [CVE-2009-5128](https://insights.sbomify.com/CVE-2009-5128/): Denial of service in n/a (medium 5.0)
- [CVE-2009-5127](https://insights.sbomify.com/CVE-2009-5127/): Denial of service in n/a (medium 4.3)
- [CVE-2009-5126](https://insights.sbomify.com/CVE-2009-5126/): Denial of service in n/a (medium 4.3)
- [CVE-2009-5125](https://insights.sbomify.com/CVE-2009-5125/): Security feature bypass in n/a (medium 4.3)
- [CVE-2009-5124](https://insights.sbomify.com/CVE-2009-5124/): Denial of service in n/a (medium 4.3)
- [CVE-2009-5123](https://insights.sbomify.com/CVE-2009-5123/): Denial of service in n/a (medium 4.3)
- [CVE-2009-5122](https://insights.sbomify.com/CVE-2009-5122/): Information disclosure in n/a (medium 5.0)
- [CVE-2009-5121](https://insights.sbomify.com/CVE-2009-5121/): Security feature bypass in n/a (medium 5.0)
- [CVE-2009-5120](https://insights.sbomify.com/CVE-2009-5120/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2009-5119](https://insights.sbomify.com/CVE-2009-5119/): Weak cryptography in n/a (medium 4.3)
- [CVE-2009-5118](https://insights.sbomify.com/CVE-2009-5118/): Path traversal in n/a (critical 9.3)
- [CVE-2009-5117](https://insights.sbomify.com/CVE-2009-5117/): Information disclosure in n/a (low 1.9)
- [CVE-2009-5116](https://insights.sbomify.com/CVE-2009-5116/): Auth bypass in n/a (medium 6.5)
- [CVE-2009-5115](https://insights.sbomify.com/CVE-2009-5115/): Path traversal in n/a (medium 6.5)
- [CVE-2009-5114](https://insights.sbomify.com/CVE-2009-5114/): Path traversal in n/a (medium 5.0)
- [CVE-2009-5113](https://insights.sbomify.com/CVE-2009-5113/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2009-5112](https://insights.sbomify.com/CVE-2009-5112/): Information disclosure in n/a (medium 5.0)
- [CVE-2009-5111](https://insights.sbomify.com/CVE-2009-5111/): Denial of service in n/a (medium 5.0)
- [CVE-2009-5110](https://insights.sbomify.com/CVE-2009-5110/): Denial of service in n/a (medium 5.0)
- [CVE-2009-5109](https://insights.sbomify.com/CVE-2009-5109/): Memory corruption in n/a (critical 9.3)
- [CVE-2009-5103](https://insights.sbomify.com/CVE-2009-5103/): Cross-site scripting (XSS) vulnerability in ATCOM Netvolution 1.0 ASP allows remote attackers to inject arbitrary web script or HTML via the email variable. (medium 4.3)
- [CVE-2009-5102](https://insights.sbomify.com/CVE-2009-5102/): SQL injection in n/a (high 7.5)
- [CVE-2009-5101](https://insights.sbomify.com/CVE-2009-5101/): Information disclosure in n/a (medium 5.0)
- [CVE-2009-5100](https://insights.sbomify.com/CVE-2009-5100/): Information disclosure in n/a (low 2.1)
- [CVE-2009-5099](https://insights.sbomify.com/CVE-2009-5099/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2009-5098](https://insights.sbomify.com/CVE-2009-5098/): Denial of service in n/a (medium 5.4)
- [CVE-2009-5097](https://insights.sbomify.com/CVE-2009-5097/): Cross-site scripting in n/a (high 7.1)
- [CVE-2009-5096](https://insights.sbomify.com/CVE-2009-5096/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2009-5095](https://insights.sbomify.com/CVE-2009-5095/): Code injection in n/a (medium 6.8)
- [CVE-2009-5094](https://insights.sbomify.com/CVE-2009-5094/): SQL injection in n/a (high 7.5)
- [CVE-2009-5093](https://insights.sbomify.com/CVE-2009-5093/): Path traversal in n/a (medium 5.0)
- [CVE-2009-5092](https://insights.sbomify.com/CVE-2009-5092/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2009-5091](https://insights.sbomify.com/CVE-2009-5091/): SQL injection in n/a (high 7.5)
- [CVE-2009-5090](https://insights.sbomify.com/CVE-2009-5090/): SQL injection in n/a (medium 6.8)
- [CVE-2009-5089](https://insights.sbomify.com/CVE-2009-5089/): Path traversal in n/a (medium 4.3)
- [CVE-2009-5088](https://insights.sbomify.com/CVE-2009-5088/): SQL injection in n/a (high 7.5)
- [CVE-2009-5087](https://insights.sbomify.com/CVE-2009-5087/): Path traversal in n/a (medium 5.0)
- [CVE-2009-5086](https://insights.sbomify.com/CVE-2009-5086/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2009-5085](https://insights.sbomify.com/CVE-2009-5085/): Security feature bypass in n/a (low 2.6)
- [CVE-2009-5084](https://insights.sbomify.com/CVE-2009-5084/): Information disclosure in n/a (low 1.9)
- [CVE-2009-5083](https://insights.sbomify.com/CVE-2009-5083/): Auth bypass in n/a (medium 6.8)
- [CVE-2009-5082](https://insights.sbomify.com/CVE-2009-5082/): Path traversal in n/a (low 3.3)
- [CVE-2009-5081](https://insights.sbomify.com/CVE-2009-5081/): Path traversal in n/a (low 3.3)
- [CVE-2009-5080](https://insights.sbomify.com/CVE-2009-5080/): Path traversal in n/a (low 3.3)
- [CVE-2009-5079](https://insights.sbomify.com/CVE-2009-5079/): Path traversal in n/a (low 3.3)
- [CVE-2009-5078](https://insights.sbomify.com/CVE-2009-5078/): Other in n/a (medium 6.5)
- [CVE-2009-5077](https://insights.sbomify.com/CVE-2009-5077/): Auth bypass in n/a (high 7.5)
- [CVE-2009-5076](https://insights.sbomify.com/CVE-2009-5076/): Auth bypass in n/a (high 7.5)
- [CVE-2009-5075](https://insights.sbomify.com/CVE-2009-5075/): Denial of service in n/a (medium 4.3)
- [CVE-2009-5074](https://insights.sbomify.com/CVE-2009-5074/): Other in n/a (critical 10.0)
- [CVE-2009-5073](https://insights.sbomify.com/CVE-2009-5073/): Denial of service in n/a (medium 4.0)
- [CVE-2009-5072](https://insights.sbomify.com/CVE-2009-5072/): Denial of service in n/a (medium 4.0)
- [CVE-2009-5071](https://insights.sbomify.com/CVE-2009-5071/): Other in n/a (critical 10.0)
- [CVE-2009-5068](https://insights.sbomify.com/CVE-2009-5068/): Path traversal in SMF (high 7.2)
- [CVE-2009-5067](https://insights.sbomify.com/CVE-2009-5067/): Path traversal in n/a (medium 4.3)
- [CVE-2009-5066](https://insights.sbomify.com/CVE-2009-5066/): Information disclosure in n/a (low 2.1)
- [CVE-2009-5065](https://insights.sbomify.com/CVE-2009-5065/): feedparser Cross-site Scripting vulnerability (medium 4.3)
- [CVE-2009-5064](https://insights.sbomify.com/CVE-2009-5064/): Privilege escalation in n/a (medium 6.9)
- [CVE-2009-5063](https://insights.sbomify.com/CVE-2009-5063/): Denial of service in n/a (medium 5.0)
- [CVE-2009-5062](https://insights.sbomify.com/CVE-2009-5062/): Denial of service in n/a (low 3.5)
- [CVE-2009-5061](https://insights.sbomify.com/CVE-2009-5061/): Denial of service in n/a (low 2.1)
- [CVE-2009-5060](https://insights.sbomify.com/CVE-2009-5060/): Denial of service in n/a (low 3.5)
- [CVE-2009-5059](https://insights.sbomify.com/CVE-2009-5059/): Denial of service in n/a (low 3.5)
- [CVE-2009-5058](https://insights.sbomify.com/CVE-2009-5058/): Denial of service in n/a (low 3.5)
- [CVE-2009-5057](https://insights.sbomify.com/CVE-2009-5057/): The S/MIME feature in Open Ticket Request System (OTRS) before 2.3.4 does not configure the RANDFILE and HOME environment variables for Open (medium 5.0)
- [CVE-2009-5056](https://insights.sbomify.com/CVE-2009-5056/): Missing authorization in n/a (low 2.1)
- [CVE-2009-5055](https://insights.sbomify.com/CVE-2009-5055/): Missing authorization in n/a (low 3.5)
- [CVE-2009-5054](https://insights.sbomify.com/CVE-2009-5054/): Smarty Does Not Consider Umask Values When Setting Permissions (high 7.5)
- [CVE-2009-5053](https://insights.sbomify.com/CVE-2009-5053/): Code injection in n/a (high 7.5)
- [CVE-2009-5052](https://insights.sbomify.com/CVE-2009-5052/): Other in n/a (critical 10.0)
- [CVE-2009-5051](https://insights.sbomify.com/CVE-2009-5051/): Security feature bypass in n/a (medium 5.0)
- [CVE-2009-5050](https://insights.sbomify.com/CVE-2009-5050/): Denial of service in n/a (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2009/