# Vulnerabilities published in 2009 - [CVE-2009-1802](https://insights.sbomify.com/CVE-2009-1802/): Cross-site request forgery in freepbx:freepbx (medium 6.8) - [CVE-2009-1801](https://insights.sbomify.com/CVE-2009-1801/): Cross-site scripting in freepbx:freepbx (medium 4.3) - [CVE-2009-1800](https://insights.sbomify.com/CVE-2009-1800/): Memory corruption in chinagames:igame (high 7.5) - [CVE-2009-1799](https://insights.sbomify.com/CVE-2009-1799/): SQL injection in sebastian-thiele:st-gallery (medium 6.8) - [CVE-2009-1798](https://insights.sbomify.com/CVE-2009-1798/): Cross-site scripting in apc:network management card (medium 4.3) - [CVE-2009-1797](https://insights.sbomify.com/CVE-2009-1797/): Cross-site request forgery in apc:network management card (medium 6.8) - [CVE-2009-1796](https://insights.sbomify.com/CVE-2009-1796/): Cross-site scripting in sun:java system portal server (medium 4.3) - [CVE-2009-1792](https://insights.sbomify.com/CVE-2009-1792/): Command injection in stonetrip:s3dplayer standalone (critical 9.3) - [CVE-2009-1791](https://insights.sbomify.com/CVE-2009-1791/): Memory corruption in mega-nerd:libsndfile (critical 9.3) - [CVE-2009-1790](https://insights.sbomify.com/CVE-2009-1790/): Cross-site scripting in cgi rescue:rescue (medium 4.3) - [CVE-2009-1789](https://insights.sbomify.com/CVE-2009-1789/): Denial of service in eggheads:eggdrop (medium 4.3) - [CVE-2009-1788](https://insights.sbomify.com/CVE-2009-1788/): Memory corruption in mega-nerd:libsndfile (critical 9.3) - [CVE-2009-1787](https://insights.sbomify.com/CVE-2009-1787/): SQL injection in phpdirsubmit:php dir submit (high 7.5) - [CVE-2009-1786](https://insights.sbomify.com/CVE-2009-1786/): Race condition in ibm:aix (medium 6.9) - [CVE-2009-1785](https://insights.sbomify.com/CVE-2009-1785/): Cross-site scripting in ulteo:open virtual desktop (medium 4.3) - [CVE-2009-1784](https://insights.sbomify.com/CVE-2009-1784/): Security feature bypass in avg:avg anti-virus (critical 10.0) - [CVE-2009-1783](https://insights.sbomify.com/CVE-2009-1783/): Security feature bypass in f-prot:f-prot antivirus (critical 10.0) - [CVE-2009-1782](https://insights.sbomify.com/CVE-2009-1782/): Security feature bypass in f-secure:anti-virus (medium 6.8) - [CVE-2009-1781](https://insights.sbomify.com/CVE-2009-1781/): Code injection in frax:php recommend (high 7.5) - [CVE-2009-1780](https://insights.sbomify.com/CVE-2009-1780/): Auth bypass in frax:php recommend (high 7.5) - [CVE-2009-1779](https://insights.sbomify.com/CVE-2009-1779/): Code injection in frax:php recommend (high 7.5) - [CVE-2009-1778](https://insights.sbomify.com/CVE-2009-1778/): SQL injection in bigace:bigace cms (medium 6.8) - [CVE-2009-1777](https://insights.sbomify.com/CVE-2009-1777/): Other in matt wright:formmail (medium 5.0) - [CVE-2009-1776](https://insights.sbomify.com/CVE-2009-1776/): Cross-site scripting in matt wright:formmail (medium 4.3) - [CVE-2009-1775](https://insights.sbomify.com/CVE-2009-1775/): Cross-site scripting in ulteo:open virtual desktop (medium 4.3) - [CVE-2009-1774](https://insights.sbomify.com/CVE-2009-1774/): Path traversal in strawberry:strawberry (critical 9.3) - [CVE-2009-1773](https://insights.sbomify.com/CVE-2009-1773/): Information disclosure in activecollab:activecollab (medium 5.0) - [CVE-2009-1772](https://insights.sbomify.com/CVE-2009-1772/): Cross-site scripting in activecollab:activecollab (medium 4.3) - [CVE-2009-1771](https://insights.sbomify.com/CVE-2009-1771/): Missing authorization in flyspeck:flyspeck cms (high 7.5) - [CVE-2009-1770](https://insights.sbomify.com/CVE-2009-1770/): Path traversal in flyspeck:flyspeck cms (high 7.5) - [CVE-2009-1769](https://insights.sbomify.com/CVE-2009-1769/): Information disclosure in ocsinventory-ng:ocs inventory ng (medium 5.0) - [CVE-2009-1768](https://insights.sbomify.com/CVE-2009-1768/): Path traversal in ramazeiten:ramazaitencms0.9.7.5 (medium 5.0) - [CVE-2009-1767](https://insights.sbomify.com/CVE-2009-1767/): Missing authorization in 2daybiz:template monster clone (medium 5.0) - [CVE-2009-1766](https://insights.sbomify.com/CVE-2009-1766/): SQL injection in teozkr:lightopencms (medium 6.4) - [CVE-2009-1765](https://insights.sbomify.com/CVE-2009-1765/): Path traversal in pluck-cms:pluck (medium 6.8) - [CVE-2009-1764](https://insights.sbomify.com/CVE-2009-1764/): SQL injection in bokecc:maxcms (high 7.5) - [CVE-2009-1763](https://insights.sbomify.com/CVE-2009-1763/): Memory corruption in sun:opensolaris (high 7.2) - [CVE-2009-1762](https://insights.sbomify.com/CVE-2009-1762/): Cross-site scripting in novell:groupwise (medium 4.3) - [CVE-2009-1761](https://insights.sbomify.com/CVE-2009-1761/): Denial of service in ca:arcserve backup (medium 5.0) - [CVE-2009-1760](https://insights.sbomify.com/CVE-2009-1760/): Path traversal in rasterbar software:libtorrent (medium 5.8) - [CVE-2009-1759](https://insights.sbomify.com/CVE-2009-1759/): Memory corruption in rahul:ctorrent (critical 9.3) - [CVE-2009-1758](https://insights.sbomify.com/CVE-2009-1758/): Denial of service in xen:xen (medium 5.0) - [CVE-2009-1757](https://insights.sbomify.com/CVE-2009-1757/): Cross-site request forgery in transmissionbt:transmission (medium 6.8) - [CVE-2009-1756](https://insights.sbomify.com/CVE-2009-1756/): Information disclosure in simone rota:slim simple login manager (low 2.1) - [CVE-2009-1755](https://insights.sbomify.com/CVE-2009-1755/): Memory corruption in nlnetlabs:nsd (medium 5.0) - [CVE-2009-1754](https://insights.sbomify.com/CVE-2009-1754/): Auth bypass in google:android (medium 4.3) - [CVE-2009-1753](https://insights.sbomify.com/CVE-2009-1753/): Race condition in emn:coccinelle (low 3.3) - [CVE-2009-1752](https://insights.sbomify.com/CVE-2009-1752/): Missing authorization in exjune:office message system (high 7.5) - [CVE-2009-1751](https://insights.sbomify.com/CVE-2009-1751/): SQL injection in realtywebware:realty web-base (high 7.5) - [CVE-2009-1750](https://insights.sbomify.com/CVE-2009-1750/): File upload in omnisoftsol:vidsharepro (medium 6.0) - [CVE-2009-1749](https://insights.sbomify.com/CVE-2009-1749/): Cross-site scripting in joost horward:catviz (medium 4.3) - [CVE-2009-1748](https://insights.sbomify.com/CVE-2009-1748/): Path traversal in joost horward:catviz (high 7.5) - [CVE-2009-1747](https://insights.sbomify.com/CVE-2009-1747/): SQL injection in 26thavenue:bspeak (high 7.5) - [CVE-2009-1746](https://insights.sbomify.com/CVE-2009-1746/): SQL injection in diangemilang:dgnews (high 7.5) - [CVE-2009-1745](https://insights.sbomify.com/CVE-2009-1745/): Hardcoded credentials in armorlogic:profense web application firewall (critical 10.0) - [CVE-2009-1744](https://insights.sbomify.com/CVE-2009-1744/): Denial of service in pinnaclesys:pinnacle studio (medium 4.3) - [CVE-2009-1743](https://insights.sbomify.com/CVE-2009-1743/): Path traversal in pinnaclesys:pinnacle studio (critical 9.3) - [CVE-2009-1742](https://insights.sbomify.com/CVE-2009-1742/): SQL injection in pc4arb:pc4 uploader (high 7.5) - [CVE-2009-1741](https://insights.sbomify.com/CVE-2009-1741/): SQL injection in dutchmonkey:dm filemanager (medium 6.8) - [CVE-2009-1740](https://insights.sbomify.com/CVE-2009-1740/): Memory corruption in dlink:mpeg4 viewer activex control (critical 9.3) - [CVE-2009-1739](https://insights.sbomify.com/CVE-2009-1739/): Auth bypass in phpeasycode:pad site scripts (high 7.5) - [CVE-2009-1738](https://insights.sbomify.com/CVE-2009-1738/): Cross-site scripting in ivanjaros:feed block (low 3.5) - [CVE-2009-1737](https://insights.sbomify.com/CVE-2009-1737/): Path traversal in diqiye:mypic (high 7.8) - [CVE-2009-1736](https://insights.sbomify.com/CVE-2009-1736/): SQL injection in joomla:com gsticketsystem (high 7.5) - [CVE-2009-1735](https://insights.sbomify.com/CVE-2009-1735/): Cross-site scripting in omnisoftsol:vidsharepro (medium 4.3) - [CVE-2009-1734](https://insights.sbomify.com/CVE-2009-1734/): SQL injection in omnisoftsol:vidsharepro (high 7.5) - [CVE-2009-1733](https://insights.sbomify.com/CVE-2009-1733/): Cross-site request forgery in richard ellerbrock:ipplan (medium 6.8) - [CVE-2009-1732](https://insights.sbomify.com/CVE-2009-1732/): Cross-site scripting in richard ellerbrock:ipplan (medium 4.3) - [CVE-2009-1731](https://insights.sbomify.com/CVE-2009-1731/): SQL injection in mlffat:mlffat (high 7.5) - [CVE-2009-1730](https://insights.sbomify.com/CVE-2009-1730/): Path traversal in netmechanica:netdecision tftp server (critical 10.0) - [CVE-2009-1729](https://insights.sbomify.com/CVE-2009-1729/): Cross-site scripting in sun:java system communications express (medium 4.3) - [CVE-2009-1728](https://insights.sbomify.com/CVE-2009-1728/): Memory corruption in apple:mac os x (medium 6.8) - [CVE-2009-1727](https://insights.sbomify.com/CVE-2009-1727/): Security feature bypass in apple:mac os x (medium 6.8) - [CVE-2009-1726](https://insights.sbomify.com/CVE-2009-1726/): Memory corruption in apple:mac os x (critical 9.3) - [CVE-2009-1725](https://insights.sbomify.com/CVE-2009-1725/): Memory corruption in apple:iphone os (critical 9.3) - [CVE-2009-1724](https://insights.sbomify.com/CVE-2009-1724/): Cross-site scripting in apple:iphone os (medium 4.3) - [CVE-2009-1723](https://insights.sbomify.com/CVE-2009-1723/): Open redirect in apple:mac os x (medium 4.3) - [CVE-2009-1722](https://insights.sbomify.com/CVE-2009-1722/): Memory corruption in openexr:openexr (medium 6.8) - [CVE-2009-1721](https://insights.sbomify.com/CVE-2009-1721/): Memory corruption in apple:mac os x (medium 6.8) - [CVE-2009-1720](https://insights.sbomify.com/CVE-2009-1720/): Integer overflow in openexr:openexr (high 7.5) - [CVE-2009-1719](https://insights.sbomify.com/CVE-2009-1719/): Code injection in sun:jre (high 7.5) - [CVE-2009-1718](https://insights.sbomify.com/CVE-2009-1718/): Information disclosure in apple:safari (high 7.1) - [CVE-2009-1717](https://insights.sbomify.com/CVE-2009-1717/): Integer overflow in apple:mac os x (medium 6.8) - [CVE-2009-1716](https://insights.sbomify.com/CVE-2009-1716/): Information disclosure in apple:safari (low 2.1) - [CVE-2009-1715](https://insights.sbomify.com/CVE-2009-1715/): Cross-site scripting in apple:safari (medium 4.3) - [CVE-2009-1714](https://insights.sbomify.com/CVE-2009-1714/): Cross-site scripting in apple:safari (medium 4.3) - [CVE-2009-1713](https://insights.sbomify.com/CVE-2009-1713/): Information disclosure in apple:safari (high 7.1) - [CVE-2009-1712](https://insights.sbomify.com/CVE-2009-1712/): Code injection in apple:safari (critical 9.3) - [CVE-2009-1711](https://insights.sbomify.com/CVE-2009-1711/): Memory corruption in apple:safari (critical 9.3) - [CVE-2009-1710](https://insights.sbomify.com/CVE-2009-1710/): Security feature bypass in apple:safari (low 2.6) - [CVE-2009-1709](https://insights.sbomify.com/CVE-2009-1709/): Use after free in apple:safari (critical 9.3) - [CVE-2009-1708](https://insights.sbomify.com/CVE-2009-1708/): Security feature bypass in apple:safari (critical 9.3) - [CVE-2009-1707](https://insights.sbomify.com/CVE-2009-1707/): Race condition in apple:safari (low 1.2) - [CVE-2009-1706](https://insights.sbomify.com/CVE-2009-1706/): Information disclosure in apple:safari (medium 5.0) - [CVE-2009-1705](https://insights.sbomify.com/CVE-2009-1705/): Memory corruption in apple:safari (critical 9.3) - [CVE-2009-1704](https://insights.sbomify.com/CVE-2009-1704/): Code injection in apple:safari (critical 9.3) - [CVE-2009-1703](https://insights.sbomify.com/CVE-2009-1703/): Information disclosure in apple:safari (high 7.1) - [CVE-2009-1702](https://insights.sbomify.com/CVE-2009-1702/): Cross-site scripting in apple:iphone os (medium 4.3) - [CVE-2009-1701](https://insights.sbomify.com/CVE-2009-1701/): Use after free in apple:iphone os (critical 9.3) - [CVE-2009-1700](https://insights.sbomify.com/CVE-2009-1700/): Information disclosure in apple:iphone os (medium 4.3) --- From sbomify Insights: https://insights.sbomify.com/years/2009/page/33/