# Vulnerabilities published in 2009


- [CVE-2009-20006](https://insights.sbomify.com/CVE-2009-20006/): osCommerce <= 2.2 Admin File Manager Arbitrary PHP Code Execution (critical 9.3)
- [CVE-2009-20005](https://insights.sbomify.com/CVE-2009-20005/): InterSystems Caché UtilConfigHome.csp Stack Buffer Overflow (critical 9.3)
- [CVE-2009-20004](https://insights.sbomify.com/CVE-2009-20004/): gAlan <= 0.2.1 Buffer Overflow (high 8.4)
- [CVE-2009-20003](https://insights.sbomify.com/CVE-2009-20003/): Xenorate <= 2.50 .xpl File Stack-Based Buffer Overflow (high 8.4)
- [CVE-2009-20002](https://insights.sbomify.com/CVE-2009-20002/): Millenium MP3 Studio <= 2.0 .pls File Stack-Based Buffer Overflow (high 8.4)
- [CVE-2009-20001](https://insights.sbomify.com/CVE-2009-20001/): MantisBT Insufficient Session Expiration cookie string not reset after logout (high 8.1)
- [CVE-2009-2000](https://insights.sbomify.com/CVE-2009-2000/): Information disclosure in n/a (medium 5.0)
- [CVE-2009-1999](https://insights.sbomify.com/CVE-2009-1999/): Other in n/a (medium 4.3)
- [CVE-2009-1998](https://insights.sbomify.com/CVE-2009-1998/): Other in n/a (medium 4.9)
- [CVE-2009-1997](https://insights.sbomify.com/CVE-2009-1997/): Information disclosure in n/a (medium 5.0)
- [CVE-2009-1996](https://insights.sbomify.com/CVE-2009-1996/): Other in n/a (medium 4.0)
- [CVE-2009-1995](https://insights.sbomify.com/CVE-2009-1995/): Information disclosure in n/a (medium 4.9)
- [CVE-2009-1994](https://insights.sbomify.com/CVE-2009-1994/): Other in n/a (medium 6.5)
- [CVE-2009-1993](https://insights.sbomify.com/CVE-2009-1993/): Code injection in n/a (medium 5.5)
- [CVE-2009-1992](https://insights.sbomify.com/CVE-2009-1992/): Other in n/a (critical 10.0)
- [CVE-2009-1991](https://insights.sbomify.com/CVE-2009-1991/): SQL injection in n/a (low 3.6)
- [CVE-2009-1990](https://insights.sbomify.com/CVE-2009-1990/): Information disclosure in n/a (low 1.7)
- [CVE-2009-1989](https://insights.sbomify.com/CVE-2009-1989/): Other in n/a (medium 5.5)
- [CVE-2009-1988](https://insights.sbomify.com/CVE-2009-1988/): Information disclosure in n/a (medium 4.0)
- [CVE-2009-1987](https://insights.sbomify.com/CVE-2009-1987/): Other in n/a (medium 5.0)
- [CVE-2009-1986](https://insights.sbomify.com/CVE-2009-1986/): Information disclosure in n/a (low 2.6)
- [CVE-2009-1985](https://insights.sbomify.com/CVE-2009-1985/): Other in n/a (critical 10.0)
- [CVE-2009-1984](https://insights.sbomify.com/CVE-2009-1984/): Other in n/a (medium 4.4)
- [CVE-2009-1983](https://insights.sbomify.com/CVE-2009-1983/): Other in n/a (medium 4.3)
- [CVE-2009-1982](https://insights.sbomify.com/CVE-2009-1982/): Other in n/a (medium 4.3)
- [CVE-2009-1981](https://insights.sbomify.com/CVE-2009-1981/): Other in n/a (low 3.0)
- [CVE-2009-1980](https://insights.sbomify.com/CVE-2009-1980/): Other in n/a (medium 6.0)
- [CVE-2009-1979](https://insights.sbomify.com/CVE-2009-1979/): Other in n/a (critical 10.0)
- [CVE-2009-1978](https://insights.sbomify.com/CVE-2009-1978/): Code injection in n/a (critical 9.0)
- [CVE-2009-1977](https://insights.sbomify.com/CVE-2009-1977/): Auth bypass in n/a (critical 10.0)
- [CVE-2009-1976](https://insights.sbomify.com/CVE-2009-1976/): Other in n/a (medium 4.3)
- [CVE-2009-1975](https://insights.sbomify.com/CVE-2009-1975/): Other in n/a (medium 6.8)
- [CVE-2009-1974](https://insights.sbomify.com/CVE-2009-1974/): Other in n/a (medium 6.8)
- [CVE-2009-1973](https://insights.sbomify.com/CVE-2009-1973/): Missing authorization in n/a (medium 5.5)
- [CVE-2009-1972](https://insights.sbomify.com/CVE-2009-1972/): Missing authorization in n/a (low 2.1)
- [CVE-2009-1971](https://insights.sbomify.com/CVE-2009-1971/): Other in n/a (low 3.5)
- [CVE-2009-1970](https://insights.sbomify.com/CVE-2009-1970/): Denial of service in n/a (medium 5.0)
- [CVE-2009-1969](https://insights.sbomify.com/CVE-2009-1969/): Information disclosure in n/a (low 2.1)
- [CVE-2009-1968](https://insights.sbomify.com/CVE-2009-1968/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2009-1967](https://insights.sbomify.com/CVE-2009-1967/): Information disclosure in n/a (medium 5.5)
- [CVE-2009-1966](https://insights.sbomify.com/CVE-2009-1966/): Information disclosure in n/a (medium 5.5)
- [CVE-2009-1965](https://insights.sbomify.com/CVE-2009-1965/): Other in n/a (medium 5.4)
- [CVE-2009-1964](https://insights.sbomify.com/CVE-2009-1964/): Information disclosure in n/a (medium 5.5)
- [CVE-2009-1963](https://insights.sbomify.com/CVE-2009-1963/): Other in n/a (high 7.5)
- [CVE-2009-1962](https://insights.sbomify.com/CVE-2009-1962/): Path traversal in n/a (medium 4.4)
- [CVE-2009-1961](https://insights.sbomify.com/CVE-2009-1961/): Denial of service in n/a (medium 4.7)
- [CVE-2009-1960](https://insights.sbomify.com/CVE-2009-1960/): Code injection in n/a (critical 9.3)
- [CVE-2009-1959](https://insights.sbomify.com/CVE-2009-1959/): Memory corruption in n/a (medium 5.0)
- [CVE-2009-1958](https://insights.sbomify.com/CVE-2009-1958/): Null dereference in n/a (medium 5.0)
- [CVE-2009-1957](https://insights.sbomify.com/CVE-2009-1957/): Null dereference in n/a (medium 5.0)
- [CVE-2009-1956](https://insights.sbomify.com/CVE-2009-1956/): Integer overflow in n/a (medium 6.4)
- [CVE-2009-1955](https://insights.sbomify.com/CVE-2009-1955/): Denial of service in n/a (high 7.5)
- [CVE-2009-1954](https://insights.sbomify.com/CVE-2009-1954/): Denial of service in n/a (high 7.8)
- [CVE-2009-1953](https://insights.sbomify.com/CVE-2009-1953/): Auth bypass in n/a (medium 4.6)
- [CVE-2009-1952](https://insights.sbomify.com/CVE-2009-1952/): SQL injection in n/a (medium 6.8)
- [CVE-2009-1951](https://insights.sbomify.com/CVE-2009-1951/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2009-1950](https://insights.sbomify.com/CVE-2009-1950/): SQL injection in n/a (high 7.5)
- [CVE-2009-1949](https://insights.sbomify.com/CVE-2009-1949/): Information disclosure in n/a (high 7.8)
- [CVE-2009-1948](https://insights.sbomify.com/CVE-2009-1948/): Path traversal in n/a (medium 5.1)
- [CVE-2009-1947](https://insights.sbomify.com/CVE-2009-1947/): SQL injection in n/a (high 7.5)
- [CVE-2009-1946](https://insights.sbomify.com/CVE-2009-1946/): Code injection in n/a (medium 6.8)
- [CVE-2009-1945](https://insights.sbomify.com/CVE-2009-1945/): SQL injection in n/a (high 7.5)
- [CVE-2009-1944](https://insights.sbomify.com/CVE-2009-1944/): Memory corruption in n/a (critical 9.3)
- [CVE-2009-1943](https://insights.sbomify.com/CVE-2009-1943/): Memory corruption in n/a (critical 10.0)
- [CVE-2009-1942](https://insights.sbomify.com/CVE-2009-1942/): Cross-site scripting in n/a (low 3.5)
- [CVE-2009-1941](https://insights.sbomify.com/CVE-2009-1941/): Information disclosure in n/a (medium 5.0)
- [CVE-2009-1940](https://insights.sbomify.com/CVE-2009-1940/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2009-1939](https://insights.sbomify.com/CVE-2009-1939/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2009-1938](https://insights.sbomify.com/CVE-2009-1938/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2009-1937](https://insights.sbomify.com/CVE-2009-1937/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2009-1936](https://insights.sbomify.com/CVE-2009-1936/): Path traversal in n/a (critical 9.8)
- [CVE-2009-1935](https://insights.sbomify.com/CVE-2009-1935/): Integer overflow in n/a (medium 4.9)
- [CVE-2009-1934](https://insights.sbomify.com/CVE-2009-1934/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2009-1933](https://insights.sbomify.com/CVE-2009-1933/): Auth bypass in n/a (medium 4.7)
- [CVE-2009-1932](https://insights.sbomify.com/CVE-2009-1932/): Integer overflow in n/a (medium 6.8)
- [CVE-2009-1930](https://insights.sbomify.com/CVE-2009-1930/): Auth bypass in n/a (critical 10.0)
- [CVE-2009-1929](https://insights.sbomify.com/CVE-2009-1929/): Memory corruption in n/a (critical 9.3)
- [CVE-2009-1928](https://insights.sbomify.com/CVE-2009-1928/): Denial of service in n/a (high 7.8)
- [CVE-2009-1926](https://insights.sbomify.com/CVE-2009-1926/): Denial of service in n/a (high 7.8)
- [CVE-2009-1925](https://insights.sbomify.com/CVE-2009-1925/): Code injection in n/a (critical 10.0)
- [CVE-2009-1924](https://insights.sbomify.com/CVE-2009-1924/): Integer overflow in n/a (critical 9.3)
- [CVE-2009-1923](https://insights.sbomify.com/CVE-2009-1923/): Memory corruption in n/a (critical 9.3)
- [CVE-2009-1922](https://insights.sbomify.com/CVE-2009-1922/): Null dereference in n/a (medium 6.9)
- [CVE-2009-1920](https://insights.sbomify.com/CVE-2009-1920/): Memory corruption in n/a (critical 9.3)
- [CVE-2009-1919](https://insights.sbomify.com/CVE-2009-1919/): Memory corruption in n/a (critical 9.3)
- [CVE-2009-1918](https://insights.sbomify.com/CVE-2009-1918/): Memory corruption in n/a (critical 10.0)
- [CVE-2009-1917](https://insights.sbomify.com/CVE-2009-1917/): Memory corruption in n/a (critical 9.3)
- [CVE-2009-1916](https://insights.sbomify.com/CVE-2009-1916/): Command injection in n/a (critical 10.0)
- [CVE-2009-1915](https://insights.sbomify.com/CVE-2009-1915/): Stack-based buffer overflow in the URL Search Hook (ICQToolBar.dll) in ICQ 6.5 allows remote attackers to cause a denial of service (persist (medium 4.3)
- [CVE-2009-1914](https://insights.sbomify.com/CVE-2009-1914/): Null dereference in n/a (medium 4.9)
- [CVE-2009-1913](https://insights.sbomify.com/CVE-2009-1913/): SQL injection in n/a (medium 5.1)
- [CVE-2009-1912](https://insights.sbomify.com/CVE-2009-1912/): Path traversal in n/a (medium 6.8)
- [CVE-2009-1911](https://insights.sbomify.com/CVE-2009-1911/): Path traversal in n/a (medium 6.8)
- [CVE-2009-1910](https://insights.sbomify.com/CVE-2009-1910/): SQL injection in n/a (high 7.5)
- [CVE-2009-1909](https://insights.sbomify.com/CVE-2009-1909/): SQL injection in n/a (high 7.5)
- [CVE-2009-1908](https://insights.sbomify.com/CVE-2009-1908/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2009-1907](https://insights.sbomify.com/CVE-2009-1907/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2009-1906](https://insights.sbomify.com/CVE-2009-1906/): Memory corruption in n/a (medium 4.3)
- [CVE-2009-1905](https://insights.sbomify.com/CVE-2009-1905/): Auth bypass in n/a (low 2.6)
- [CVE-2009-1904](https://insights.sbomify.com/CVE-2009-1904/): Denial of service in n/a (medium 5.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2009/page/31/