# Vulnerabilities published in 2009


- [CVE-2009-1598](https://insights.sbomify.com/CVE-2009-1598/): Security feature bypass in google:chrome (critical 9.3)
- [CVE-2009-1597](https://insights.sbomify.com/CVE-2009-1597/): Security feature bypass in mozilla:firefox (critical 9.3)
- [CVE-2009-1596](https://insights.sbomify.com/CVE-2009-1596/): Security feature bypass in igniterealtime:openfire (medium 6.5)
- [CVE-2009-1595](https://insights.sbomify.com/CVE-2009-1595/): Ignite Realtime Openfire Allows Users to Change Passwords of Arbitrary Accounts (medium 4.0)
- [CVE-2009-1594](https://insights.sbomify.com/CVE-2009-1594/): Security feature bypass in armorlogic:profense web application firewall (high 7.5)
- [CVE-2009-1593](https://insights.sbomify.com/CVE-2009-1593/): Cross-site scripting in armorlogic:profense web application firewall (medium 4.3)
- [CVE-2009-1592](https://insights.sbomify.com/CVE-2009-1592/): Memory corruption in electrasoft:32bit ftp (critical 10.0)
- [CVE-2009-1591](https://insights.sbomify.com/CVE-2009-1591/): Cross-site scripting in cgi rescue:cgi web mailer (medium 4.3)
- [CVE-2009-1590](https://insights.sbomify.com/CVE-2009-1590/): Business logic in cgi rescue:form2mail (medium 5.0)
- [CVE-2009-1589](https://insights.sbomify.com/CVE-2009-1589/): Other in cgi rescue:cgi rescue minibbs22 (medium 5.0)
- [CVE-2009-1588](https://insights.sbomify.com/CVE-2009-1588/): Cross-site scripting in cgi rescue:cgi rescue minibbs (medium 4.3)
- [CVE-2009-1587](https://insights.sbomify.com/CVE-2009-1587/): Auth bypass in kalptarudemos:php site lock (high 7.5)
- [CVE-2009-1586](https://insights.sbomify.com/CVE-2009-1586/): Memory corruption in shemes:grabit (critical 9.3)
- [CVE-2009-1585](https://insights.sbomify.com/CVE-2009-1585/): SQL injection in r020:tematres (medium 4.4)
- [CVE-2009-1584](https://insights.sbomify.com/CVE-2009-1584/): SQL injection in r020:tematres (medium 6.0)
- [CVE-2009-1583](https://insights.sbomify.com/CVE-2009-1583/): Cross-site scripting in r020:tematres (medium 4.3)
- [CVE-2009-1582](https://insights.sbomify.com/CVE-2009-1582/): Missing authorization in kalptarudemos:million dollar text links (high 7.5)
- [CVE-2009-1581](https://insights.sbomify.com/CVE-2009-1581/): Cross-site scripting in squirrelmail:squirrelmail (medium 4.3)
- [CVE-2009-1580](https://insights.sbomify.com/CVE-2009-1580/): Auth bypass in squirrelmail:squirrelmail (medium 5.8)
- [CVE-2009-1579](https://insights.sbomify.com/CVE-2009-1579/): Command injection in squirrelmail:squirrelmail (medium 6.8)
- [CVE-2009-1578](https://insights.sbomify.com/CVE-2009-1578/): Cross-site scripting in squirrelmail:squirrelmail (medium 4.3)
- [CVE-2009-1577](https://insights.sbomify.com/CVE-2009-1577/): Memory corruption in cscope:cscope (critical 9.3)
- [CVE-2009-1576](https://insights.sbomify.com/CVE-2009-1576/): Information disclosure in drupal:drupal (medium 4.3)
- [CVE-2009-1575](https://insights.sbomify.com/CVE-2009-1575/): Cross-site scripting in drupal:drupal (medium 4.3)
- [CVE-2009-1574](https://insights.sbomify.com/CVE-2009-1574/): Null dereference in ipsec-tools:ipsec-tools (medium 5.0)
- [CVE-2009-1573](https://insights.sbomify.com/CVE-2009-1573/): Information disclosure in branden robinson:xvfb-run (medium 4.6)
- [CVE-2009-1572](https://insights.sbomify.com/CVE-2009-1572/): Denial of service in quagga:quagga (medium 5.0)
- [CVE-2009-1571](https://insights.sbomify.com/CVE-2009-1571/): Use after free in mozilla:firefox (critical 10.0)
- [CVE-2009-1570](https://insights.sbomify.com/CVE-2009-1570/): Integer overflow in gimp:gimp (critical 9.3)
- [CVE-2009-1569](https://insights.sbomify.com/CVE-2009-1569/): Memory corruption in novell:iprint (critical 9.3)
- [CVE-2009-1568](https://insights.sbomify.com/CVE-2009-1568/): Memory corruption in novell:iprint client (critical 9.3)
- [CVE-2009-1567](https://insights.sbomify.com/CVE-2009-1567/): Memory corruption in larts:uploader activex control (critical 9.3)
- [CVE-2009-1566](https://insights.sbomify.com/CVE-2009-1566/): Integer overflow in roxio:creator (critical 9.3)
- [CVE-2009-1565](https://insights.sbomify.com/CVE-2009-1565/): Memory corruption in vmware:movie decoder (critical 9.3)
- [CVE-2009-1564](https://insights.sbomify.com/CVE-2009-1564/): Memory corruption in vmware:movie decoder (critical 9.3)
- [CVE-2009-1561](https://insights.sbomify.com/CVE-2009-1561/): Cross-site request forgery in cisco:wrt54gc (medium 6.8)
- [CVE-2009-1560](https://insights.sbomify.com/CVE-2009-1560/): Information disclosure in cisco:wvc54gc (high 7.8)
- [CVE-2009-1559](https://insights.sbomify.com/CVE-2009-1559/): Path traversal in cisco:wvc54gca (high 7.8)
- [CVE-2009-1558](https://insights.sbomify.com/CVE-2009-1558/): Path traversal in cisco:wvc54gca (high 7.8)
- [CVE-2009-1557](https://insights.sbomify.com/CVE-2009-1557/): Cross-site scripting in cisco:wvc54gca (medium 4.3)
- [CVE-2009-1556](https://insights.sbomify.com/CVE-2009-1556/): Path traversal in cisco:wvc54gca (low 3.5)
- [CVE-2009-1555](https://insights.sbomify.com/CVE-2009-1555/): Information disclosure in cisco:wvc54gca (medium 5.0)
- [CVE-2009-1554](https://insights.sbomify.com/CVE-2009-1554/): Cross-site scripting in sun:woodstock (medium 4.3)
- [CVE-2009-1553](https://insights.sbomify.com/CVE-2009-1553/): Cross-site scripting in oracle:glassfish server (medium 4.3)
- [CVE-2009-1552](https://insights.sbomify.com/CVE-2009-1552/): Denial of service in sco:unixware (high 7.8)
- [CVE-2009-1551](https://insights.sbomify.com/CVE-2009-1551/): Code injection in qt-cute:quickteam (high 7.5)
- [CVE-2009-1550](https://insights.sbomify.com/CVE-2009-1550/): Missing authorization in zakkis:abc advertise (medium 5.0)
- [CVE-2009-1549](https://insights.sbomify.com/CVE-2009-1549/): Auth bypass in agtc:agtc myshop (high 7.5)
- [CVE-2009-1548](https://insights.sbomify.com/CVE-2009-1548/): SQL injection in qsix:blusky cms (high 7.5)
- [CVE-2009-1547](https://insights.sbomify.com/CVE-2009-1547/): Memory corruption in microsoft:internet explorer (high 8.8)
- [CVE-2009-1546](https://insights.sbomify.com/CVE-2009-1546/): Integer overflow in microsoft:windows 2003 server (high 8.5)
- [CVE-2009-1545](https://insights.sbomify.com/CVE-2009-1545/): Memory corruption in microsoft:windows 2003 server (critical 9.3)
- [CVE-2009-1544](https://insights.sbomify.com/CVE-2009-1544/): Memory corruption in microsoft:windows 2003 server (high 8.8)
- [CVE-2009-1542](https://insights.sbomify.com/CVE-2009-1542/): Privilege escalation in microsoft:virtual pc (critical 9.0)
- [CVE-2009-1539](https://insights.sbomify.com/CVE-2009-1539/): Memory corruption in microsoft:directx (critical 9.3)
- [CVE-2009-1538](https://insights.sbomify.com/CVE-2009-1538/): Memory corruption in microsoft:directx (critical 9.3)
- [CVE-2009-1537](https://insights.sbomify.com/CVE-2009-1537/): Microsoft DirectX NULL Byte Overwrite (high 8.8, exploited in the wild)
- [CVE-2009-1536](https://insights.sbomify.com/CVE-2009-1536/): Denial of service in microsoft:.net framework (low 2.6)
- [CVE-2009-1535](https://insights.sbomify.com/CVE-2009-1535/): Auth bypass in microsoft:internet information services (high 7.5)
- [CVE-2009-1534](https://insights.sbomify.com/CVE-2009-1534/): Memory corruption in microsoft:isa server (critical 9.3)
- [CVE-2009-1533](https://insights.sbomify.com/CVE-2009-1533/): Memory corruption in microsoft:office (critical 9.3)
- [CVE-2009-1532](https://insights.sbomify.com/CVE-2009-1532/): Memory corruption in microsoft:internet explorer (high 8.8)
- [CVE-2009-1531](https://insights.sbomify.com/CVE-2009-1531/): Use after free in microsoft:internet explorer (critical 9.3)
- [CVE-2009-1530](https://insights.sbomify.com/CVE-2009-1530/): Use after free in microsoft:internet explorer (critical 9.3)
- [CVE-2009-1529](https://insights.sbomify.com/CVE-2009-1529/): Memory corruption in microsoft:internet explorer (high 8.1)
- [CVE-2009-1528](https://insights.sbomify.com/CVE-2009-1528/): Race condition in microsoft:internet explorer (critical 9.3)
- [CVE-2009-1527](https://insights.sbomify.com/CVE-2009-1527/): Race condition in linux:linux kernel (medium 6.9)
- [CVE-2009-1526](https://insights.sbomify.com/CVE-2009-1526/): Race condition in directadmin:directadmin (medium 6.9)
- [CVE-2009-1525](https://insights.sbomify.com/CVE-2009-1525/): Command injection in directadmin:directadmin (high 8.5)
- [CVE-2009-1524](https://insights.sbomify.com/CVE-2009-1524/): Cross-site scripting in mortbay:jetty (medium 4.3)
- [CVE-2009-1523](https://insights.sbomify.com/CVE-2009-1523/): Directory traversal in Mort Bay Jetty (medium 5.0)
- [CVE-2009-1522](https://insights.sbomify.com/CVE-2009-1522/): Weak cryptography in ibm:tivoli storage manager client (high 7.1)
- [CVE-2009-1521](https://insights.sbomify.com/CVE-2009-1521/): Other in ibm:tivoli storage manager client (high 7.5)
- [CVE-2009-1520](https://insights.sbomify.com/CVE-2009-1520/): Memory corruption in ibm:tivoli storage manager client (critical 10.0)
- [CVE-2009-1519](https://insights.sbomify.com/CVE-2009-1519/): Path traversal in pecio-cms:pecio cms (medium 5.0)
- [CVE-2009-1518](https://insights.sbomify.com/CVE-2009-1518/): Cross-site request forgery in beltane:beltane (medium 6.8)
- [CVE-2009-1517](https://insights.sbomify.com/CVE-2009-1517/): Memory corruption in symantec:norton ghost (medium 4.3)
- [CVE-2009-1516](https://insights.sbomify.com/CVE-2009-1516/): Memory corruption in icewarp:merak mail server (high 7.5)
- [CVE-2009-1515](https://insights.sbomify.com/CVE-2009-1515/): Memory corruption in christos zoulas:file (medium 6.8)
- [CVE-2009-1514](https://insights.sbomify.com/CVE-2009-1514/): Null dereference in google:chrome (medium 5.0)
- [CVE-2009-1513](https://insights.sbomify.com/CVE-2009-1513/): Memory corruption in konstanty bialkowski:libmodplug (medium 6.8)
- [CVE-2009-1512](https://insights.sbomify.com/CVE-2009-1512/): Code injection in keir davis:x-forum (medium 6.5)
- [CVE-2009-1511](https://insights.sbomify.com/CVE-2009-1511/): Denial of service in microsoft:windows xp (high 7.8)
- [CVE-2009-1510](https://insights.sbomify.com/CVE-2009-1510/): Path traversal in koschtit:koschtit image gallery (high 7.5)
- [CVE-2009-1509](https://insights.sbomify.com/CVE-2009-1509/): SQL injection in myiosoft:ajaxportal (high 7.5)
- [CVE-2009-1508](https://insights.sbomify.com/CVE-2009-1508/): SQL injection in keir davis:x-forum (high 7.5)
- [CVE-2009-1507](https://insights.sbomify.com/CVE-2009-1507/): Auth bypass in drupal:nodeaccess userreference (high 7.5)
- [CVE-2009-1506](https://insights.sbomify.com/CVE-2009-1506/): SQL injection in intelliants:elitius (medium 6.8)
- [CVE-2009-1505](https://insights.sbomify.com/CVE-2009-1505/): SQL injection in drupal:news page (medium 6.5)
- [CVE-2009-1504](https://insights.sbomify.com/CVE-2009-1504/): Auth bypass in xigla:absolute control panel xe (high 7.5)
- [CVE-2009-1503](https://insights.sbomify.com/CVE-2009-1503/): SQL injection in tigerdms:tigerdms (high 7.5)
- [CVE-2009-1502](https://insights.sbomify.com/CVE-2009-1502/): Path traversal in matteoiammarrone:s-cms (high 7.5)
- [CVE-2009-1501](https://insights.sbomify.com/CVE-2009-1501/): Cross-site scripting in exif:exif (medium 4.3)
- [CVE-2009-1500](https://insights.sbomify.com/CVE-2009-1500/): SQL injection in projectcms:projectcms (medium 6.8)
- [CVE-2009-1499](https://insights.sbomify.com/CVE-2009-1499/): SQL injection in joomla:com mailto (high 7.5)
- [CVE-2009-1498](https://insights.sbomify.com/CVE-2009-1498/): Path traversal in idb:idb (medium 6.8)
- [CVE-2009-1497](https://insights.sbomify.com/CVE-2009-1497/): Memory corruption in gomlab:gom player (critical 9.3)
- [CVE-2009-1496](https://insights.sbomify.com/CVE-2009-1496/): Path traversal in ijobid:com cmimarketplace (medium 5.0)
- [CVE-2009-1495](https://insights.sbomify.com/CVE-2009-1495/): Information disclosure in webfileexplorer:web file explorer (medium 5.0)
- [CVE-2009-1494](https://insights.sbomify.com/CVE-2009-1494/): Information disclosure in memcachedb:memcached (medium 5.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2009/page/35/