# Vulnerabilities published in 2009 - [CVE-2009-1699](https://insights.sbomify.com/CVE-2009-1699/): XML external entity in apple:iphone os (high 7.5) - [CVE-2009-1698](https://insights.sbomify.com/CVE-2009-1698/): Memory corruption in apple:iphone os (critical 9.3) - [CVE-2009-1697](https://insights.sbomify.com/CVE-2009-1697/): Security feature bypass in apple:safari (medium 4.3) - [CVE-2009-1696](https://insights.sbomify.com/CVE-2009-1696/): Weak cryptography in apple:safari (medium 5.0) - [CVE-2009-1695](https://insights.sbomify.com/CVE-2009-1695/): Cross-site scripting in apple:safari (medium 4.3) - [CVE-2009-1694](https://insights.sbomify.com/CVE-2009-1694/): Information disclosure in apple:safari (medium 5.8) - [CVE-2009-1693](https://insights.sbomify.com/CVE-2009-1693/): Information disclosure in apple:safari (medium 5.8) - [CVE-2009-1692](https://insights.sbomify.com/CVE-2009-1692/): Denial of service in apple:iphone os (high 7.1) - [CVE-2009-1691](https://insights.sbomify.com/CVE-2009-1691/): Cross-site scripting in apple:safari (medium 4.3) - [CVE-2009-1690](https://insights.sbomify.com/CVE-2009-1690/): Use after free in apple:iphone os (critical 9.3) - [CVE-2009-1689](https://insights.sbomify.com/CVE-2009-1689/): Cross-site scripting in apple:safari (medium 4.3) - [CVE-2009-1688](https://insights.sbomify.com/CVE-2009-1688/): Cross-site scripting in apple:safari (medium 4.3) - [CVE-2009-1687](https://insights.sbomify.com/CVE-2009-1687/): Memory corruption in apple:safari (critical 9.3) - [CVE-2009-1686](https://insights.sbomify.com/CVE-2009-1686/): Memory corruption in apple:safari (critical 9.3) - [CVE-2009-1685](https://insights.sbomify.com/CVE-2009-1685/): Cross-site scripting in apple:safari (medium 4.3) - [CVE-2009-1684](https://insights.sbomify.com/CVE-2009-1684/): Cross-site scripting in apple:safari (medium 4.3) - [CVE-2009-1683](https://insights.sbomify.com/CVE-2009-1683/): Denial of service in apple:iphone os (high 7.8) - [CVE-2009-1682](https://insights.sbomify.com/CVE-2009-1682/): Security feature bypass in apple:safari (medium 4.3) - [CVE-2009-1681](https://insights.sbomify.com/CVE-2009-1681/): Security feature bypass in apple:safari (medium 4.3) - [CVE-2009-1680](https://insights.sbomify.com/CVE-2009-1680/): Information disclosure in apple:iphone os (low 2.1) - [CVE-2009-1679](https://insights.sbomify.com/CVE-2009-1679/): Security feature bypass in apple:iphone os (low 2.1) - [CVE-2009-1678](https://insights.sbomify.com/CVE-2009-1678/): Path traversal in bitweaver:bitweaver (high 7.5) - [CVE-2009-1677](https://insights.sbomify.com/CVE-2009-1677/): Code injection in bitweaver:bitweaver (medium 6.5) - [CVE-2009-1675](https://insights.sbomify.com/CVE-2009-1675/): Memory corruption in electrasoft:32bit ftp (critical 9.3) - [CVE-2009-1674](https://insights.sbomify.com/CVE-2009-1674/): Memory corruption in microchip:mplab ide (critical 9.3) - [CVE-2009-1673](https://insights.sbomify.com/CVE-2009-1673/): Denial of service in sun:solaris (medium 4.9) - [CVE-2009-1672](https://insights.sbomify.com/CVE-2009-1672/): Memory corruption in sun:jre (critical 9.3) - [CVE-2009-1671](https://insights.sbomify.com/CVE-2009-1671/): Memory corruption in sun:jre (critical 9.3) - [CVE-2009-1670](https://insights.sbomify.com/CVE-2009-1670/): Missing authorization in tcpdb:tcpdb (high 7.5) - [CVE-2009-1669](https://insights.sbomify.com/CVE-2009-1669/): Command injection in smarty:smarty (critical 10.0) - [CVE-2009-1668](https://insights.sbomify.com/CVE-2009-1668/): Denial of service in typsoft:typsoft ftp server (medium 4.0) - [CVE-2009-1667](https://insights.sbomify.com/CVE-2009-1667/): Memory corruption in mini-stream:castripper (critical 9.3) - [CVE-2009-1666](https://insights.sbomify.com/CVE-2009-1666/): Memory corruption in cyclomedia:cycloscopelite (critical 9.3) - [CVE-2009-1665](https://insights.sbomify.com/CVE-2009-1665/): Missing authorization in easy-scripts:answer and question script (medium 6.4) - [CVE-2009-1664](https://insights.sbomify.com/CVE-2009-1664/): Auth bypass in easy-scripts:answer and question script (high 7.5) - [CVE-2009-1663](https://insights.sbomify.com/CVE-2009-1663/): File upload in easy-scripts:answer and question script (medium 6.8) - [CVE-2009-1662](https://insights.sbomify.com/CVE-2009-1662/): SQL injection in recipescript:recipe script (high 7.5) - [CVE-2009-1661](https://insights.sbomify.com/CVE-2009-1661/): SQL injection in anoldman:utopic (medium 6.8) - [CVE-2009-1660](https://insights.sbomify.com/CVE-2009-1660/): Memory corruption in urusoft:viplay3 (critical 9.3) - [CVE-2009-1659](https://insights.sbomify.com/CVE-2009-1659/): File upload in intelliants:elitius (medium 6.8) - [CVE-2009-1658](https://insights.sbomify.com/CVE-2009-1658/): SQL injection in realtywebware:realty web-base (high 7.5) - [CVE-2009-1657](https://insights.sbomify.com/CVE-2009-1657/): SQL injection in b2evolution:starrating plugin (high 7.5) - [CVE-2009-1656](https://insights.sbomify.com/CVE-2009-1656/): Command injection in xerox:workcentre (critical 10.0) - [CVE-2009-1655](https://insights.sbomify.com/CVE-2009-1655/): SQL injection in easy-scripts:answer and question script (medium 6.5) - [CVE-2009-1654](https://insights.sbomify.com/CVE-2009-1654/): Cross-site scripting in easy-scripts:answer and question script (medium 4.3) - [CVE-2009-1653](https://insights.sbomify.com/CVE-2009-1653/): Path traversal in tinybutstrong:tinybutstrong (high 7.8) - [CVE-2009-1652](https://insights.sbomify.com/CVE-2009-1652/): Missing authorization in 2daybiz:business community script (high 7.5) - [CVE-2009-1651](https://insights.sbomify.com/CVE-2009-1651/): SQL injection in 2daybiz:business community script (high 7.5) - [CVE-2009-1650](https://insights.sbomify.com/CVE-2009-1650/): SQL injection in tenfourzero:shutter (high 7.5) - [CVE-2009-1649](https://insights.sbomify.com/CVE-2009-1649/): Path traversal in bicluc:belive (high 7.5) - [CVE-2009-1648](https://insights.sbomify.com/CVE-2009-1648/): Misconfiguration in suse:suse linux (high 7.5) - [CVE-2009-1647](https://insights.sbomify.com/CVE-2009-1647/): Memory corruption in ultrafunk:popcorn (critical 9.3) - [CVE-2009-1646](https://insights.sbomify.com/CVE-2009-1646/): Memory corruption in mini-stream:mini-stream rm downloader (critical 9.3) - [CVE-2009-1645](https://insights.sbomify.com/CVE-2009-1645/): Memory corruption in mini-stream:easy rm-mp3 converter (critical 9.3) - [CVE-2009-1644](https://insights.sbomify.com/CVE-2009-1644/): Memory corruption in sorinara:streaming audio player (critical 9.3) - [CVE-2009-1643](https://insights.sbomify.com/CVE-2009-1643/): Memory corruption in sorinara:soritong mp3 player (critical 9.3) - [CVE-2009-1642](https://insights.sbomify.com/CVE-2009-1642/): Memory corruption in mini-stream:mini-stream to mp3 converter (critical 9.3) - [CVE-2009-1641](https://insights.sbomify.com/CVE-2009-1641/): Memory corruption in mini-stream:ripper (critical 9.3) - [CVE-2009-1640](https://insights.sbomify.com/CVE-2009-1640/): Memory corruption in nucleustechnologies:kernel recovery (critical 9.3) - [CVE-2009-1639](https://insights.sbomify.com/CVE-2009-1639/): Memory corruption in nucleustechnologies:kernel recovery (critical 9.3) - [CVE-2009-1638](https://insights.sbomify.com/CVE-2009-1638/): Auth bypass in t-dreams:job career package (high 7.5) - [CVE-2009-1637](https://insights.sbomify.com/CVE-2009-1637/): Missing authorization in simplecustomer:simple customer (medium 6.4) - [CVE-2009-1636](https://insights.sbomify.com/CVE-2009-1636/): Memory corruption in novell:groupwise (critical 10.0) - [CVE-2009-1635](https://insights.sbomify.com/CVE-2009-1635/): Cross-site scripting in novell:groupwise (medium 4.3) - [CVE-2009-1634](https://insights.sbomify.com/CVE-2009-1634/): Auth bypass in novell:groupwise (high 7.5) - [CVE-2009-1633](https://insights.sbomify.com/CVE-2009-1633/): Memory corruption in canonical:ubuntu linux (high 7.1) - [CVE-2009-1632](https://insights.sbomify.com/CVE-2009-1632/): Denial of service in ipsec-tools:ipsec-tools (medium 5.0) - [CVE-2009-1631](https://insights.sbomify.com/CVE-2009-1631/): Misconfiguration in gnome:evolution (low 2.1) - [CVE-2009-1630](https://insights.sbomify.com/CVE-2009-1630/): Security feature bypass in canonical:ubuntu linux (medium 4.4) - [CVE-2009-1629](https://insights.sbomify.com/CVE-2009-1629/): Weak cryptography in antony lesuisse:ajaxterm (medium 6.8) - [CVE-2009-1628](https://insights.sbomify.com/CVE-2009-1628/): Memory corruption in unisys:business information server (critical 10.0) - [CVE-2009-1627](https://insights.sbomify.com/CVE-2009-1627/): Memory corruption in sdp multimedia:streaming download project (critical 9.3) - [CVE-2009-1626](https://insights.sbomify.com/CVE-2009-1626/): SQL injection in will kraft:ez-blog (high 7.5) - [CVE-2009-1625](https://insights.sbomify.com/CVE-2009-1625/): Path traversal in davlin:thickbox gallery (medium 6.8) - [CVE-2009-1624](https://insights.sbomify.com/CVE-2009-1624/): Path traversal in dew-code:dew-newphplinks (medium 5.0) - [CVE-2009-1623](https://insights.sbomify.com/CVE-2009-1623/): Cross-site scripting in dew-code:dew-newphplinks (medium 4.3) - [CVE-2009-1622](https://insights.sbomify.com/CVE-2009-1622/): SQL injection in ecshop:ecshop (high 7.5) - [CVE-2009-1621](https://insights.sbomify.com/CVE-2009-1621/): Path traversal in opencart:opencart (medium 5.0) - [CVE-2009-1620](https://insights.sbomify.com/CVE-2009-1620/): Cross-site scripting in mata:matachat (medium 4.3) - [CVE-2009-1619](https://insights.sbomify.com/CVE-2009-1619/): Auth bypass in teraway:filestream (high 7.5) - [CVE-2009-1618](https://insights.sbomify.com/CVE-2009-1618/): Auth bypass in teraway:livehelp (high 7.5) - [CVE-2009-1617](https://insights.sbomify.com/CVE-2009-1617/): Auth bypass in teraway:linktracker (high 7.5) - [CVE-2009-1616](https://insights.sbomify.com/CVE-2009-1616/): Cross-site scripting in coppermine:coppermine photo gallery (medium 4.3) - [CVE-2009-1615](https://insights.sbomify.com/CVE-2009-1615/): File upload in gowondesigns:leap (medium 6.8) - [CVE-2009-1614](https://insights.sbomify.com/CVE-2009-1614/): Cross-site scripting in gowondesigns:leap (low 2.6) - [CVE-2009-1613](https://insights.sbomify.com/CVE-2009-1613/): SQL injection in gowondesigns:leap (medium 6.8) - [CVE-2009-1612](https://insights.sbomify.com/CVE-2009-1612/): Memory corruption in baofeng:storm (critical 9.3) - [CVE-2009-1611](https://insights.sbomify.com/CVE-2009-1611/): Memory corruption in electrasoft:32bit ftp (critical 10.0) - [CVE-2009-1610](https://insights.sbomify.com/CVE-2009-1610/): Missing authorization in jobscript:job script job board software (high 7.5) - [CVE-2009-1609](https://insights.sbomify.com/CVE-2009-1609/): File upload in battleblog:battle blog (medium 6.8) - [CVE-2009-1608](https://insights.sbomify.com/CVE-2009-1608/): Memory corruption in microchip:mplab ide (critical 9.3) - [CVE-2009-1607](https://insights.sbomify.com/CVE-2009-1607/): Cross-site scripting in linkbase:linkbase (medium 4.3) - [CVE-2009-1606](https://insights.sbomify.com/CVE-2009-1606/): Memory corruption in dafolo:dafolocontrol (critical 9.3) - [CVE-2009-1605](https://insights.sbomify.com/CVE-2009-1605/): Memory corruption in sumatrapdfreader:sumatrapdf (medium 5.4) - [CVE-2009-1604](https://insights.sbomify.com/CVE-2009-1604/): Other in limesurvey:limesurvey (high 7.5) - [CVE-2009-1603](https://insights.sbomify.com/CVE-2009-1603/): Weak cryptography in fedoraproject:fedora (high 7.5) - [CVE-2009-1602](https://insights.sbomify.com/CVE-2009-1602/): Denial of service in pablosoftwaresolutions:quick\'n easy mail server (medium 5.0) - [CVE-2009-1601](https://insights.sbomify.com/CVE-2009-1601/): Misconfiguration in ubuntu:linux (medium 6.8) - [CVE-2009-1600](https://insights.sbomify.com/CVE-2009-1600/): Security feature bypass in apple:safari (critical 9.3) - [CVE-2009-1599](https://insights.sbomify.com/CVE-2009-1599/): Security feature bypass in opera:opera browser (critical 9.3) --- From sbomify Insights: https://insights.sbomify.com/years/2009/page/34/