# Vulnerabilities published in 2009


- [CVE-2009-3158](https://insights.sbomify.com/CVE-2009-3158/): Missing authorization in n/a (high 7.5)
- [CVE-2009-3157](https://insights.sbomify.com/CVE-2009-3157/): Cross-site scripting in n/a (low 3.5)
- [CVE-2009-3156](https://insights.sbomify.com/CVE-2009-3156/): Cross-site scripting in n/a (low 2.1)
- [CVE-2009-3155](https://insights.sbomify.com/CVE-2009-3155/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2009-3154](https://insights.sbomify.com/CVE-2009-3154/): SQL injection in n/a (high 7.5)
- [CVE-2009-3153](https://insights.sbomify.com/CVE-2009-3153/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2009-3152](https://insights.sbomify.com/CVE-2009-3152/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2009-3151](https://insights.sbomify.com/CVE-2009-3151/): Path traversal in n/a (medium 5.0)
- [CVE-2009-3150](https://insights.sbomify.com/CVE-2009-3150/): SQL injection in n/a (high 7.5)
- [CVE-2009-3149](https://insights.sbomify.com/CVE-2009-3149/): Path traversal in n/a (medium 4.3)
- [CVE-2009-3148](https://insights.sbomify.com/CVE-2009-3148/): SQL injection in n/a (high 7.5)
- [CVE-2009-3147](https://insights.sbomify.com/CVE-2009-3147/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2009-3146](https://insights.sbomify.com/CVE-2009-3146/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2009-3135](https://insights.sbomify.com/CVE-2009-3135/): Memory corruption in n/a (critical 9.3)
- [CVE-2009-3134](https://insights.sbomify.com/CVE-2009-3134/): Code injection in n/a (critical 9.3)
- [CVE-2009-3133](https://insights.sbomify.com/CVE-2009-3133/): Memory corruption in n/a (critical 9.3)
- [CVE-2009-3132](https://insights.sbomify.com/CVE-2009-3132/): Memory corruption in n/a (critical 9.3)
- [CVE-2009-3131](https://insights.sbomify.com/CVE-2009-3131/): Memory corruption in n/a (critical 9.3)
- [CVE-2009-3130](https://insights.sbomify.com/CVE-2009-3130/): Memory corruption in n/a (critical 9.3)
- [CVE-2009-3129](https://insights.sbomify.com/CVE-2009-3129/): Microsoft Excel Featheader Record Memory Corruption (high 7.8, exploited in the wild)
- [CVE-2009-3128](https://insights.sbomify.com/CVE-2009-3128/): Memory corruption in n/a (critical 9.3)
- [CVE-2009-3127](https://insights.sbomify.com/CVE-2009-3127/): Memory corruption in n/a (critical 9.3)
- [CVE-2009-3126](https://insights.sbomify.com/CVE-2009-3126/): Integer overflow in n/a (critical 9.3)
- [CVE-2009-3125](https://insights.sbomify.com/CVE-2009-3125/): SQL injection in n/a (high 7.5)
- [CVE-2009-3124](https://insights.sbomify.com/CVE-2009-3124/): Path traversal in n/a (medium 5.0)
- [CVE-2009-3123](https://insights.sbomify.com/CVE-2009-3123/): Path traversal in n/a (medium 5.0)
- [CVE-2009-3122](https://insights.sbomify.com/CVE-2009-3122/): Missing authorization in n/a (medium 6.4)
- [CVE-2009-3121](https://insights.sbomify.com/CVE-2009-3121/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2009-3120](https://insights.sbomify.com/CVE-2009-3120/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2009-3119](https://insights.sbomify.com/CVE-2009-3119/): SQL injection in n/a (high 7.5)
- [CVE-2009-3118](https://insights.sbomify.com/CVE-2009-3118/): SQL injection in n/a (high 7.5)
- [CVE-2009-3117](https://insights.sbomify.com/CVE-2009-3117/): SQL injection in n/a (high 7.5)
- [CVE-2009-3116](https://insights.sbomify.com/CVE-2009-3116/): SQL injection in n/a (high 7.5)
- [CVE-2009-3115](https://insights.sbomify.com/CVE-2009-3115/): Denial of service in n/a (medium 5.0)
- [CVE-2009-3114](https://insights.sbomify.com/CVE-2009-3114/): Cross-site scripting in n/a (high 7.5)
- [CVE-2009-3113](https://insights.sbomify.com/CVE-2009-3113/): Missing authorization in n/a (medium 5.0)
- [CVE-2009-3112](https://insights.sbomify.com/CVE-2009-3112/): Privilege escalation in n/a (critical 10.0)
- [CVE-2009-3111](https://insights.sbomify.com/CVE-2009-3111/): Denial of service in n/a (medium 5.0)
- [CVE-2009-3110](https://insights.sbomify.com/CVE-2009-3110/): Race condition in n/a (medium 5.8)
- [CVE-2009-3109](https://insights.sbomify.com/CVE-2009-3109/): Auth bypass in n/a (critical 9.3)
- [CVE-2009-3108](https://insights.sbomify.com/CVE-2009-3108/): Privilege escalation in n/a (high 7.2)
- [CVE-2009-3107](https://insights.sbomify.com/CVE-2009-3107/): Auth bypass in n/a (medium 4.8)
- [CVE-2009-3106](https://insights.sbomify.com/CVE-2009-3106/): Missing authorization in n/a (medium 5.0)
- [CVE-2009-3105](https://insights.sbomify.com/CVE-2009-3105/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2009-3104](https://insights.sbomify.com/CVE-2009-3104/): Denial of service in n/a (medium 4.3)
- [CVE-2009-3103](https://insights.sbomify.com/CVE-2009-3103/): Memory corruption in n/a (critical 10.0)
- [CVE-2009-3102](https://insights.sbomify.com/CVE-2009-3102/): Command injection in n/a (critical 10.0)
- [CVE-2009-3101](https://insights.sbomify.com/CVE-2009-3101/): Denial of service in n/a (medium 4.9)
- [CVE-2009-3100](https://insights.sbomify.com/CVE-2009-3100/): Denial of service in n/a (medium 4.0)
- [CVE-2009-3099](https://insights.sbomify.com/CVE-2009-3099/): Other in n/a (critical 10.0)
- [CVE-2009-3098](https://insights.sbomify.com/CVE-2009-3098/): Other in n/a (critical 10.0)
- [CVE-2009-3097](https://insights.sbomify.com/CVE-2009-3097/): Information disclosure in n/a (high 7.8)
- [CVE-2009-3096](https://insights.sbomify.com/CVE-2009-3096/): Other in n/a (critical 10.0)
- [CVE-2009-3095](https://insights.sbomify.com/CVE-2009-3095/): Command injection in n/a (medium 5.0)
- [CVE-2009-3094](https://insights.sbomify.com/CVE-2009-3094/): Null dereference in n/a (low 2.6)
- [CVE-2009-3093](https://insights.sbomify.com/CVE-2009-3093/): Other in n/a (critical 10.0)
- [CVE-2009-3092](https://insights.sbomify.com/CVE-2009-3092/): Memory corruption in n/a (critical 10.0)
- [CVE-2009-3091](https://insights.sbomify.com/CVE-2009-3091/): Other in n/a (critical 10.0)
- [CVE-2009-3090](https://insights.sbomify.com/CVE-2009-3090/): Denial of service in n/a (medium 5.0)
- [CVE-2009-3089](https://insights.sbomify.com/CVE-2009-3089/): Null dereference in n/a (high 7.8)
- [CVE-2009-3088](https://insights.sbomify.com/CVE-2009-3088/): Memory corruption in n/a (high 7.5)
- [CVE-2009-3087](https://insights.sbomify.com/CVE-2009-3087/): Denial of service in n/a (medium 5.0)
- [CVE-2009-3086](https://insights.sbomify.com/CVE-2009-3086/): actionpack and activesupport vulnerable to information leaks (medium 5.0)
- [CVE-2009-3085](https://insights.sbomify.com/CVE-2009-3085/): Denial of service in n/a (medium 5.0)
- [CVE-2009-3084](https://insights.sbomify.com/CVE-2009-3084/): The msn_slp_process_msg function in libpurple/protocols/msn/slpcall.c in the MSN protocol plugin in libpurple 2.6.0 and 2.6.1, as used in Pi (medium 5.0)
- [CVE-2009-3083](https://insights.sbomify.com/CVE-2009-3083/): Null dereference in n/a (medium 5.0)
- [CVE-2009-3082](https://insights.sbomify.com/CVE-2009-3082/): SQL injection in n/a (high 7.5)
- [CVE-2009-3081](https://insights.sbomify.com/CVE-2009-3081/): SQL injection in n/a (high 7.5)
- [CVE-2009-3080](https://insights.sbomify.com/CVE-2009-3080/): Integer overflow in n/a (high 7.2)
- [CVE-2009-3079](https://insights.sbomify.com/CVE-2009-3079/): Code injection in n/a (critical 10.0)
- [CVE-2009-3078](https://insights.sbomify.com/CVE-2009-3078/): Other in n/a (medium 5.0)
- [CVE-2009-3077](https://insights.sbomify.com/CVE-2009-3077/): Use after free in n/a (critical 9.3)
- [CVE-2009-3076](https://insights.sbomify.com/CVE-2009-3076/): Security feature bypass in n/a (critical 9.3)
- [CVE-2009-3075](https://insights.sbomify.com/CVE-2009-3075/): Memory corruption in n/a (critical 10.0)
- [CVE-2009-3074](https://insights.sbomify.com/CVE-2009-3074/): Memory corruption in n/a (critical 10.0)
- [CVE-2009-3073](https://insights.sbomify.com/CVE-2009-3073/): Memory corruption in n/a (critical 10.0)
- [CVE-2009-3072](https://insights.sbomify.com/CVE-2009-3072/): Memory corruption in n/a (critical 10.0)
- [CVE-2009-3071](https://insights.sbomify.com/CVE-2009-3071/): Memory corruption in n/a (critical 10.0)
- [CVE-2009-3070](https://insights.sbomify.com/CVE-2009-3070/): Memory corruption in n/a (critical 10.0)
- [CVE-2009-3069](https://insights.sbomify.com/CVE-2009-3069/): Memory corruption in n/a (critical 10.0)
- [CVE-2009-3068](https://insights.sbomify.com/CVE-2009-3068/): File upload in n/a (critical 9.3)
- [CVE-2009-3067](https://insights.sbomify.com/CVE-2009-3067/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2009-3066](https://insights.sbomify.com/CVE-2009-3066/): Multiple cross-site scripting (XSS) vulnerabilities in PropertyWatchScript.com Property Watch 2.0 allow remote attackers to inject arbitrary (medium 4.3)
- [CVE-2009-3065](https://insights.sbomify.com/CVE-2009-3065/): Code injection in n/a (high 7.5)
- [CVE-2009-3064](https://insights.sbomify.com/CVE-2009-3064/): Path traversal in n/a (high 7.5)
- [CVE-2009-3063](https://insights.sbomify.com/CVE-2009-3063/): SQL injection in n/a (high 7.5)
- [CVE-2009-3062](https://insights.sbomify.com/CVE-2009-3062/): SQL injection in n/a (high 7.5)
- [CVE-2009-3061](https://insights.sbomify.com/CVE-2009-3061/): SQL injection in n/a (high 7.5)
- [CVE-2009-3060](https://insights.sbomify.com/CVE-2009-3060/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2009-3059](https://insights.sbomify.com/CVE-2009-3059/): SQL injection in n/a (high 7.5)
- [CVE-2009-3058](https://insights.sbomify.com/CVE-2009-3058/): Memory corruption in n/a (critical 9.3)
- [CVE-2009-3057](https://insights.sbomify.com/CVE-2009-3057/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2009-3056](https://insights.sbomify.com/CVE-2009-3056/): Code injection in n/a (high 7.5)
- [CVE-2009-3055](https://insights.sbomify.com/CVE-2009-3055/): Code injection in n/a (high 7.5)
- [CVE-2009-3054](https://insights.sbomify.com/CVE-2009-3054/): SQL injection in n/a (high 7.5)
- [CVE-2009-3053](https://insights.sbomify.com/CVE-2009-3053/): Path traversal in n/a (medium 6.8)
- [CVE-2009-3052](https://insights.sbomify.com/CVE-2009-3052/): SQL injection in n/a (medium 6.5)
- [CVE-2009-3051](https://insights.sbomify.com/CVE-2009-3051/): Code injection in n/a (high 7.5)
- [CVE-2009-3050](https://insights.sbomify.com/CVE-2009-3050/): Memory corruption in n/a (critical 10.0)
- [CVE-2009-3049](https://insights.sbomify.com/CVE-2009-3049/): Other in n/a (medium 5.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2009/page/20/