# Vulnerabilities published in 2009 - [CVE-2009-4947](https://insights.sbomify.com/CVE-2009-4947/): SQL injection in n/a (high 7.5) - [CVE-2009-4946](https://insights.sbomify.com/CVE-2009-4946/): Path traversal in n/a (medium 6.8) - [CVE-2009-4945](https://insights.sbomify.com/CVE-2009-4945/): Hardcoded credentials in n/a (high 7.5) - [CVE-2009-4944](https://insights.sbomify.com/CVE-2009-4944/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4943](https://insights.sbomify.com/CVE-2009-4943/): Information disclosure in n/a (medium 5.0) - [CVE-2009-4942](https://insights.sbomify.com/CVE-2009-4942/): Cross-site request forgery in n/a (medium 4.3) - [CVE-2009-4941](https://insights.sbomify.com/CVE-2009-4941/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4940](https://insights.sbomify.com/CVE-2009-4940/): SQL injection in n/a (high 7.5) - [CVE-2009-4939](https://insights.sbomify.com/CVE-2009-4939/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4938](https://insights.sbomify.com/CVE-2009-4938/): SQL injection in n/a (high 7.5) - [CVE-2009-4937](https://insights.sbomify.com/CVE-2009-4937/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4936](https://insights.sbomify.com/CVE-2009-4936/): SQL injection in n/a (high 7.5) - [CVE-2009-4935](https://insights.sbomify.com/CVE-2009-4935/): SQL injection in n/a (high 7.5) - [CVE-2009-4934](https://insights.sbomify.com/CVE-2009-4934/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4933](https://insights.sbomify.com/CVE-2009-4933/): SQL injection in n/a (high 7.5) - [CVE-2009-4932](https://insights.sbomify.com/CVE-2009-4932/): Memory corruption in n/a (medium 6.8) - [CVE-2009-4931](https://insights.sbomify.com/CVE-2009-4931/): Memory corruption in n/a (medium 6.8) - [CVE-2009-4930](https://insights.sbomify.com/CVE-2009-4930/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4929](https://insights.sbomify.com/CVE-2009-4929/): Missing authorization in n/a (high 7.5) - [CVE-2009-4928](https://insights.sbomify.com/CVE-2009-4928/): Code injection in n/a (high 7.5) - [CVE-2009-4927](https://insights.sbomify.com/CVE-2009-4927/): Auth bypass in n/a (high 7.5) - [CVE-2009-4926](https://insights.sbomify.com/CVE-2009-4926/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4925](https://insights.sbomify.com/CVE-2009-4925/): SQL injection in n/a (medium 6.8) - [CVE-2009-4924](https://insights.sbomify.com/CVE-2009-4924/): Cross-site Scripting in python-cjson (medium 4.3) - [CVE-2009-4923](https://insights.sbomify.com/CVE-2009-4923/): Denial of service in n/a (high 7.8) - [CVE-2009-4922](https://insights.sbomify.com/CVE-2009-4922/): Denial of service in n/a (medium 6.8) - [CVE-2009-4921](https://insights.sbomify.com/CVE-2009-4921/): Denial of service in n/a (high 7.8) - [CVE-2009-4920](https://insights.sbomify.com/CVE-2009-4920/): Denial of service in n/a (high 7.8) - [CVE-2009-4919](https://insights.sbomify.com/CVE-2009-4919/): Memory corruption in n/a (critical 10.0) - [CVE-2009-4918](https://insights.sbomify.com/CVE-2009-4918/): Denial of service in n/a (high 7.8) - [CVE-2009-4917](https://insights.sbomify.com/CVE-2009-4917/): Denial of service in n/a (high 7.8) - [CVE-2009-4916](https://insights.sbomify.com/CVE-2009-4916/): Denial of service in n/a (medium 4.0) - [CVE-2009-4915](https://insights.sbomify.com/CVE-2009-4915/): Denial of service in n/a (high 7.8) - [CVE-2009-4914](https://insights.sbomify.com/CVE-2009-4914/): Denial of service in n/a (high 7.8) - [CVE-2009-4913](https://insights.sbomify.com/CVE-2009-4913/): Auth bypass in n/a (medium 5.0) - [CVE-2009-4912](https://insights.sbomify.com/CVE-2009-4912/): Auth bypass in n/a (critical 10.0) - [CVE-2009-4911](https://insights.sbomify.com/CVE-2009-4911/): Denial of service in n/a (high 7.8) - [CVE-2009-4910](https://insights.sbomify.com/CVE-2009-4910/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4909](https://insights.sbomify.com/CVE-2009-4909/): Auth bypass in n/a (medium 6.8) - [CVE-2009-4908](https://insights.sbomify.com/CVE-2009-4908/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4907](https://insights.sbomify.com/CVE-2009-4907/): Cross-site request forgery in n/a (medium 6.8) - [CVE-2009-4906](https://insights.sbomify.com/CVE-2009-4906/): Cross-site request forgery in n/a (medium 6.8) - [CVE-2009-4905](https://insights.sbomify.com/CVE-2009-4905/): Cross-site request forgery in n/a (medium 6.8) - [CVE-2009-4904](https://insights.sbomify.com/CVE-2009-4904/): Business logic in n/a (medium 5.0) - [CVE-2009-4903](https://insights.sbomify.com/CVE-2009-4903/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4902](https://insights.sbomify.com/CVE-2009-4902/): Memory corruption in n/a (medium 6.8) - [CVE-2009-4901](https://insights.sbomify.com/CVE-2009-4901/): Memory corruption in n/a (low 2.1) - [CVE-2009-4900](https://insights.sbomify.com/CVE-2009-4900/): pixelpost 1.7.1 has XSS (medium 6.1) - [CVE-2009-4899](https://insights.sbomify.com/CVE-2009-4899/): pixelpost 1.7.1 has SQL injection (critical 9.8) - [CVE-2009-4898](https://insights.sbomify.com/CVE-2009-4898/): Cross-site request forgery in n/a (medium 6.8) - [CVE-2009-4897](https://insights.sbomify.com/CVE-2009-4897/): Memory corruption in n/a (critical 9.3) - [CVE-2009-4896](https://insights.sbomify.com/CVE-2009-4896/): Path traversal in n/a (medium 6.5) - [CVE-2009-4895](https://insights.sbomify.com/CVE-2009-4895/): Race condition in n/a (medium 4.7) - [CVE-2009-4894](https://insights.sbomify.com/CVE-2009-4894/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4893](https://insights.sbomify.com/CVE-2009-4893/): Memory corruption in n/a (medium 6.8) - [CVE-2009-4892](https://insights.sbomify.com/CVE-2009-4892/): SQL injection in n/a (high 7.5) - [CVE-2009-4891](https://insights.sbomify.com/CVE-2009-4891/): SQL injection in n/a (high 7.5) - [CVE-2009-4890](https://insights.sbomify.com/CVE-2009-4890/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4889](https://insights.sbomify.com/CVE-2009-4889/): SQL injection in n/a (high 7.5) - [CVE-2009-4888](https://insights.sbomify.com/CVE-2009-4888/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4887](https://insights.sbomify.com/CVE-2009-4887/): Code injection in n/a (medium 6.8) - [CVE-2009-4886](https://insights.sbomify.com/CVE-2009-4886/): Path traversal in n/a (medium 5.0) - [CVE-2009-4885](https://insights.sbomify.com/CVE-2009-4885/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4884](https://insights.sbomify.com/CVE-2009-4884/): SQL injection in n/a (medium 6.8) - [CVE-2009-4883](https://insights.sbomify.com/CVE-2009-4883/): SQL injection in n/a (high 7.5) - [CVE-2009-4882](https://insights.sbomify.com/CVE-2009-4882/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4881](https://insights.sbomify.com/CVE-2009-4881/): Integer overflow in n/a (medium 5.0) - [CVE-2009-4880](https://insights.sbomify.com/CVE-2009-4880/): Integer overflow in n/a (medium 5.0) - [CVE-2009-4879](https://insights.sbomify.com/CVE-2009-4879/): Auth bypass in n/a (medium 4.3) - [CVE-2009-4878](https://insights.sbomify.com/CVE-2009-4878/): Unspecified vulnerability in the Administration Console in Novell Access Manager before 3.1 SP1 allows attackers to access system files via (medium 4.3) - [CVE-2009-4877](https://insights.sbomify.com/CVE-2009-4877/): Cross-site request forgery in n/a (medium 6.8) - [CVE-2009-4876](https://insights.sbomify.com/CVE-2009-4876/): Missing authorization in n/a (medium 5.0) - [CVE-2009-4875](https://insights.sbomify.com/CVE-2009-4875/): Denial of service in n/a (medium 5.0) - [CVE-2009-4874](https://insights.sbomify.com/CVE-2009-4874/): Missing authorization in n/a (medium 6.4) - [CVE-2009-4873](https://insights.sbomify.com/CVE-2009-4873/): Memory corruption in n/a (critical 10.0) - [CVE-2009-4872](https://insights.sbomify.com/CVE-2009-4872/): SQL injection in n/a (high 7.5) - [CVE-2009-4871](https://insights.sbomify.com/CVE-2009-4871/): SQL injection vulnerability in globepersonnel_forum.asp in Logoshows BBS 2.0 allows remote attackers to execute arbitrary SQL commands via the forumid parameter. (high 7.5) - [CVE-2009-4870](https://insights.sbomify.com/CVE-2009-4870/): SQL injection in n/a (high 7.5) - [CVE-2009-4869](https://insights.sbomify.com/CVE-2009-4869/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4868](https://insights.sbomify.com/CVE-2009-4868/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4867](https://insights.sbomify.com/CVE-2009-4867/): Memory corruption in n/a (medium 4.3) - [CVE-2009-4866](https://insights.sbomify.com/CVE-2009-4866/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4865](https://insights.sbomify.com/CVE-2009-4865/): SQL injection in n/a (medium 6.8) - [CVE-2009-4864](https://insights.sbomify.com/CVE-2009-4864/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4863](https://insights.sbomify.com/CVE-2009-4863/): Memory corruption in n/a (critical 9.3) - [CVE-2009-4862](https://insights.sbomify.com/CVE-2009-4862/): SQL injection in n/a (high 7.5) - [CVE-2009-4861](https://insights.sbomify.com/CVE-2009-4861/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4860](https://insights.sbomify.com/CVE-2009-4860/): SQL injection in n/a (high 7.5) - [CVE-2009-4859](https://insights.sbomify.com/CVE-2009-4859/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4858](https://insights.sbomify.com/CVE-2009-4858/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4857](https://insights.sbomify.com/CVE-2009-4857/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4856](https://insights.sbomify.com/CVE-2009-4856/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4855](https://insights.sbomify.com/CVE-2009-4855/): SQL injection in n/a (high 7.5) - [CVE-2009-4854](https://insights.sbomify.com/CVE-2009-4854/): Command injection in n/a (high 7.5) - [CVE-2009-4853](https://insights.sbomify.com/CVE-2009-4853/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4852](https://insights.sbomify.com/CVE-2009-4852/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4851](https://insights.sbomify.com/CVE-2009-4851/): Auth bypass in n/a (medium 5.0) - [CVE-2009-4850](https://insights.sbomify.com/CVE-2009-4850/): Code injection in n/a (critical 9.3) - [CVE-2009-4849](https://insights.sbomify.com/CVE-2009-4849/): Cross-site request forgery in n/a (medium 6.8) - [CVE-2009-4848](https://insights.sbomify.com/CVE-2009-4848/): Cross-site scripting in n/a (medium 4.3) --- From sbomify Insights: https://insights.sbomify.com/years/2009/page/3/