# Vulnerabilities published in 2009


- [CVE-2009-3566](https://insights.sbomify.com/CVE-2009-3566/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2009-3565](https://insights.sbomify.com/CVE-2009-3565/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2009-3564](https://insights.sbomify.com/CVE-2009-3564/): Privilege escalation in n/a (medium 4.7)
- [CVE-2009-3563](https://insights.sbomify.com/CVE-2009-3563/): Denial of service in n/a (medium 6.4)
- [CVE-2009-3562](https://insights.sbomify.com/CVE-2009-3562/): Cross-site scripting in n/a (low 2.6)
- [CVE-2009-3561](https://insights.sbomify.com/CVE-2009-3561/): Path traversal in n/a (medium 5.0)
- [CVE-2009-3560](https://insights.sbomify.com/CVE-2009-3560/): Memory corruption in n/a (medium 5.0)
- [CVE-2009-3559](https://insights.sbomify.com/CVE-2009-3559/): main/streams/plain_wrapper.c in PHP 5.3.x before 5.3.1 does not recognize the safe_mode_include_dir directive, which allows context-dependen (high 7.5)
- [CVE-2009-3558](https://insights.sbomify.com/CVE-2009-3558/): Security feature bypass in n/a (medium 6.8)
- [CVE-2009-3557](https://insights.sbomify.com/CVE-2009-3557/): Security feature bypass in n/a (medium 5.0)
- [CVE-2009-3556](https://insights.sbomify.com/CVE-2009-3556/): Misconfiguration in n/a (low 1.9)
- [CVE-2009-3555](https://insights.sbomify.com/CVE-2009-3555/): Apache Tomcat affected by vulnerability in TLS and SSL protocol (critical 9.8)
- [CVE-2009-3554](https://insights.sbomify.com/CVE-2009-3554/): Information disclosure in n/a (low 2.1)
- [CVE-2009-3553](https://insights.sbomify.com/CVE-2009-3553/): Use after free in n/a (high 7.5)
- [CVE-2009-3552](https://insights.sbomify.com/CVE-2009-3552/): Security feature bypass in RHEV-M VDC (low 3.1)
- [CVE-2009-3551](https://insights.sbomify.com/CVE-2009-3551/): Denial of service in n/a (medium 5.0)
- [CVE-2009-3550](https://insights.sbomify.com/CVE-2009-3550/): Null dereference in n/a (medium 4.3)
- [CVE-2009-3549](https://insights.sbomify.com/CVE-2009-3549/): Denial of service in n/a (medium 5.0)
- [CVE-2009-3548](https://insights.sbomify.com/CVE-2009-3548/): Hardcoded credentials in n/a (high 7.5)
- [CVE-2009-3547](https://insights.sbomify.com/CVE-2009-3547/): Race condition in n/a (high 7.0)
- [CVE-2009-3546](https://insights.sbomify.com/CVE-2009-3546/): Memory corruption in n/a (critical 9.3)
- [CVE-2009-3545](https://insights.sbomify.com/CVE-2009-3545/): Denial of service in n/a (medium 4.0)
- [CVE-2009-3544](https://insights.sbomify.com/CVE-2009-3544/): Information disclosure in n/a (medium 5.0)
- [CVE-2009-3543](https://insights.sbomify.com/CVE-2009-3543/): SQL injection in n/a (high 7.5)
- [CVE-2009-3542](https://insights.sbomify.com/CVE-2009-3542/): Path traversal in n/a (high 7.5)
- [CVE-2009-3541](https://insights.sbomify.com/CVE-2009-3541/): Code injection in n/a (high 7.5)
- [CVE-2009-3540](https://insights.sbomify.com/CVE-2009-3540/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2009-3539](https://insights.sbomify.com/CVE-2009-3539/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2009-3538](https://insights.sbomify.com/CVE-2009-3538/): Path traversal in n/a (high 7.5)
- [CVE-2009-3537](https://insights.sbomify.com/CVE-2009-3537/): Memory corruption in n/a (critical 9.3)
- [CVE-2009-3536](https://insights.sbomify.com/CVE-2009-3536/): Memory corruption in n/a (critical 9.3)
- [CVE-2009-3535](https://insights.sbomify.com/CVE-2009-3535/): Path traversal in n/a (medium 4.3)
- [CVE-2009-3534](https://insights.sbomify.com/CVE-2009-3534/): Path traversal in n/a (medium 6.8)
- [CVE-2009-3533](https://insights.sbomify.com/CVE-2009-3533/): SQL injection in n/a (high 7.5)
- [CVE-2009-3532](https://insights.sbomify.com/CVE-2009-3532/): SQL injection in n/a (high 7.5)
- [CVE-2009-3531](https://insights.sbomify.com/CVE-2009-3531/): SQL injection in n/a (high 7.5)
- [CVE-2009-3530](https://insights.sbomify.com/CVE-2009-3530/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2009-3529](https://insights.sbomify.com/CVE-2009-3529/): SQL injection in n/a (medium 6.8)
- [CVE-2009-3528](https://insights.sbomify.com/CVE-2009-3528/): SQL injection in n/a (medium 6.5)
- [CVE-2009-3527](https://insights.sbomify.com/CVE-2009-3527/): Race condition in n/a (medium 6.9)
- [CVE-2009-3525](https://insights.sbomify.com/CVE-2009-3525/): Auth bypass in n/a (high 7.2)
- [CVE-2009-3524](https://insights.sbomify.com/CVE-2009-3524/): Unspecified vulnerability in ashWsFtr.dll in avast! (high 7.2)
- [CVE-2009-3523](https://insights.sbomify.com/CVE-2009-3523/): Memory corruption in n/a (medium 6.9)
- [CVE-2009-3522](https://insights.sbomify.com/CVE-2009-3522/): Memory corruption in n/a (high 7.2)
- [CVE-2009-3521](https://insights.sbomify.com/CVE-2009-3521/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2009-3520](https://insights.sbomify.com/CVE-2009-3520/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2009-3519](https://insights.sbomify.com/CVE-2009-3519/): Denial of service in n/a (medium 4.9)
- [CVE-2009-3518](https://insights.sbomify.com/CVE-2009-3518/): Code injection in n/a (critical 9.3)
- [CVE-2009-3517](https://insights.sbomify.com/CVE-2009-3517/): Auth bypass in n/a (critical 10.0)
- [CVE-2009-3516](https://insights.sbomify.com/CVE-2009-3516/): Auth bypass in n/a (high 7.2)
- [CVE-2009-3515](https://insights.sbomify.com/CVE-2009-3515/): Path traversal in n/a (medium 6.5)
- [CVE-2009-3514](https://insights.sbomify.com/CVE-2009-3514/): SQL injection in n/a (medium 6.5)
- [CVE-2009-3513](https://insights.sbomify.com/CVE-2009-3513/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2009-3512](https://insights.sbomify.com/CVE-2009-3512/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2009-3511](https://insights.sbomify.com/CVE-2009-3511/): Code injection in n/a (high 7.5)
- [CVE-2009-3510](https://insights.sbomify.com/CVE-2009-3510/): SQL injection in n/a (high 7.5)
- [CVE-2009-3509](https://insights.sbomify.com/CVE-2009-3509/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2009-3508](https://insights.sbomify.com/CVE-2009-3508/): Path traversal in n/a (medium 6.0)
- [CVE-2009-3507](https://insights.sbomify.com/CVE-2009-3507/): Path traversal in n/a (high 7.5)
- [CVE-2009-3506](https://insights.sbomify.com/CVE-2009-3506/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2009-3505](https://insights.sbomify.com/CVE-2009-3505/): SQL injection in n/a (high 7.5)
- [CVE-2009-3504](https://insights.sbomify.com/CVE-2009-3504/): SQL injection in n/a (high 7.5)
- [CVE-2009-3503](https://insights.sbomify.com/CVE-2009-3503/): SQL injection in n/a (high 7.5)
- [CVE-2009-3502](https://insights.sbomify.com/CVE-2009-3502/): SQL injection in n/a (high 7.5)
- [CVE-2009-3501](https://insights.sbomify.com/CVE-2009-3501/): SQL injection in n/a (high 7.5)
- [CVE-2009-3500](https://insights.sbomify.com/CVE-2009-3500/): SQL injection in n/a (high 7.5)
- [CVE-2009-3499](https://insights.sbomify.com/CVE-2009-3499/): SQL injection in n/a (high 7.5)
- [CVE-2009-3498](https://insights.sbomify.com/CVE-2009-3498/): SQL injection in n/a (medium 6.8)
- [CVE-2009-3497](https://insights.sbomify.com/CVE-2009-3497/): SQL injection in n/a (high 7.5)
- [CVE-2009-3496](https://insights.sbomify.com/CVE-2009-3496/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2009-3495](https://insights.sbomify.com/CVE-2009-3495/): SQL injection in n/a (high 7.5)
- [CVE-2009-3494](https://insights.sbomify.com/CVE-2009-3494/): SQL injection in n/a (medium 6.8)
- [CVE-2009-3493](https://insights.sbomify.com/CVE-2009-3493/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2009-3492](https://insights.sbomify.com/CVE-2009-3492/): Code injection in n/a (high 7.5)
- [CVE-2009-3491](https://insights.sbomify.com/CVE-2009-3491/): SQL injection in n/a (high 7.5)
- [CVE-2009-3490](https://insights.sbomify.com/CVE-2009-3490/): Security feature bypass in n/a (medium 6.8)
- [CVE-2009-3489](https://insights.sbomify.com/CVE-2009-3489/): Privilege escalation in n/a (high 7.8)
- [CVE-2009-3488](https://insights.sbomify.com/CVE-2009-3488/): Cross-site scripting in n/a (low 2.1)
- [CVE-2009-3487](https://insights.sbomify.com/CVE-2009-3487/): Cross-site scripting in n/a (low 3.5)
- [CVE-2009-3486](https://insights.sbomify.com/CVE-2009-3486/): Cross-site scripting in n/a (low 3.5)
- [CVE-2009-3485](https://insights.sbomify.com/CVE-2009-3485/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2009-3484](https://insights.sbomify.com/CVE-2009-3484/): Memory corruption in n/a (critical 9.3)
- [CVE-2009-3483](https://insights.sbomify.com/CVE-2009-3483/): Memory corruption in n/a (critical 9.3)
- [CVE-2009-3482](https://insights.sbomify.com/CVE-2009-3482/): Privilege escalation in n/a (high 7.8)
- [CVE-2009-3481](https://insights.sbomify.com/CVE-2009-3481/): Missing authorization in n/a (high 7.5)
- [CVE-2009-3480](https://insights.sbomify.com/CVE-2009-3480/): SQL injection in n/a (high 7.5)
- [CVE-2009-3479](https://insights.sbomify.com/CVE-2009-3479/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2009-3478](https://insights.sbomify.com/CVE-2009-3478/): Command injection in n/a (medium 6.0)
- [CVE-2009-3477](https://insights.sbomify.com/CVE-2009-3477/): Security feature bypass in n/a (medium 6.8)
- [CVE-2009-3476](https://insights.sbomify.com/CVE-2009-3476/): Memory corruption in n/a (critical 9.3)
- [CVE-2009-3475](https://insights.sbomify.com/CVE-2009-3475/): Security feature bypass in n/a (high 7.5)
- [CVE-2009-3474](https://insights.sbomify.com/CVE-2009-3474/): Security feature bypass in n/a (high 7.5)
- [CVE-2009-3473](https://insights.sbomify.com/CVE-2009-3473/): Missing authorization in n/a (critical 10.0)
- [CVE-2009-3472](https://insights.sbomify.com/CVE-2009-3472/): Missing authorization in n/a (medium 6.5)
- [CVE-2009-3471](https://insights.sbomify.com/CVE-2009-3471/): Missing authorization in n/a (high 7.5)
- [CVE-2009-3470](https://insights.sbomify.com/CVE-2009-3470/): Memory corruption in n/a (medium 5.0)
- [CVE-2009-3469](https://insights.sbomify.com/CVE-2009-3469/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2009-3468](https://insights.sbomify.com/CVE-2009-3468/): Privilege escalation in n/a (medium 6.9)
- [CVE-2009-3467](https://insights.sbomify.com/CVE-2009-3467/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2009-3466](https://insights.sbomify.com/CVE-2009-3466/): Memory corruption in n/a (critical 9.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2009/page/16/