# Vulnerabilities published in 2009


- [CVE-2009-1381](https://insights.sbomify.com/CVE-2009-1381/): Command injection in squirrelmail:imap general.php (medium 6.8)
- [CVE-2009-1380](https://insights.sbomify.com/CVE-2009-1380/): Cross-site scripting in redhat:jboss enterprise application platform (medium 4.3)
- [CVE-2009-1379](https://insights.sbomify.com/CVE-2009-1379/): Use after free in openssl:openssl (medium 5.0)
- [CVE-2009-1378](https://insights.sbomify.com/CVE-2009-1378/): Denial of service in canonical:ubuntu linux (medium 5.0)
- [CVE-2009-1377](https://insights.sbomify.com/CVE-2009-1377/): Denial of service in openssl:openssl (medium 5.0)
- [CVE-2009-1376](https://insights.sbomify.com/CVE-2009-1376/): Integer overflow in pidgin:pidgin (critical 9.3)
- [CVE-2009-1375](https://insights.sbomify.com/CVE-2009-1375/): Memory corruption in pidgin:pidgin (medium 5.0)
- [CVE-2009-1374](https://insights.sbomify.com/CVE-2009-1374/): Memory corruption in pidgin:pidgin (medium 5.0)
- [CVE-2009-1373](https://insights.sbomify.com/CVE-2009-1373/): Memory corruption in pidgin:pidgin (high 7.1)
- [CVE-2009-1372](https://insights.sbomify.com/CVE-2009-1372/): Memory corruption in clamav:clamav (critical 10.0)
- [CVE-2009-1371](https://insights.sbomify.com/CVE-2009-1371/): Denial of service in clamav:clamav (medium 5.0)
- [CVE-2009-1370](https://insights.sbomify.com/CVE-2009-1370/): Memory corruption in xilisoft:xilisoft video converter (critical 9.3)
- [CVE-2009-1369](https://insights.sbomify.com/CVE-2009-1369/): Information disclosure in mozilo:mozilocms (medium 5.0)
- [CVE-2009-1368](https://insights.sbomify.com/CVE-2009-1368/): Path traversal in mozilo:mozilocms (high 7.5)
- [CVE-2009-1367](https://insights.sbomify.com/CVE-2009-1367/): Cross-site scripting in mozilo:mozilocms (medium 4.3)
- [CVE-2009-1366](https://insights.sbomify.com/CVE-2009-1366/): Cross-site scripting in dnnsoftware:dotnetnuke (medium 4.3)
- [CVE-2009-1365](https://insights.sbomify.com/CVE-2009-1365/): Missing authorization in adobe:flash media server (high 7.5)
- [CVE-2009-1364](https://insights.sbomify.com/CVE-2009-1364/): Use after free in francis james franklin:libwmf (high 7.5)
- [CVE-2009-1362](https://insights.sbomify.com/CVE-2009-1362/): SQL injection in chcounter:chcounter (medium 6.8)
- [CVE-2009-1361](https://insights.sbomify.com/CVE-2009-1361/): Command injection in gscripts:dns tools (critical 10.0)
- [CVE-2009-1360](https://insights.sbomify.com/CVE-2009-1360/): Null dereference in linux:linux kernel (high 7.1)
- [CVE-2009-1359](https://insights.sbomify.com/CVE-2009-1359/): Denial of service in sun:opensolaris (medium 4.9)
- [CVE-2009-1358](https://insights.sbomify.com/CVE-2009-1358/): Security feature bypass in debian:advanced package tool (critical 10.0)
- [CVE-2009-1357](https://insights.sbomify.com/CVE-2009-1357/): Other in sun:java system delegated administrator (medium 6.8)
- [CVE-2009-1356](https://insights.sbomify.com/CVE-2009-1356/): Memory corruption in elecard:elecard avc hd player (critical 9.3)
- [CVE-2009-1355](https://insights.sbomify.com/CVE-2009-1355/): Memory corruption in ibm:aix (high 7.2)
- [CVE-2009-1354](https://insights.sbomify.com/CVE-2009-1354/): Path traversal in sergey lyubka:mongoose (medium 4.0)
- [CVE-2009-1353](https://insights.sbomify.com/CVE-2009-1353/): Memory corruption in sebastian fernandez:zervit (medium 5.0)
- [CVE-2009-1352](https://insights.sbomify.com/CVE-2009-1352/): Memory corruption in dawningsoft:powerchm (critical 9.3)
- [CVE-2009-1351](https://insights.sbomify.com/CVE-2009-1351/): Memory corruption in heikki ylinen:apollo (critical 9.3)
- [CVE-2009-1350](https://insights.sbomify.com/CVE-2009-1350/): Memory corruption in novell:netidentity client1.2.3 (critical 10.0)
- [CVE-2009-1349](https://insights.sbomify.com/CVE-2009-1349/): Cross-site scripting in redhat:stronghold (medium 4.3)
- [CVE-2009-1348](https://insights.sbomify.com/CVE-2009-1348/): Security feature bypass in mcafee:active virus defense (high 7.6)
- [CVE-2009-1347](https://insights.sbomify.com/CVE-2009-1347/): SQL injection in chcounter:chcounter (medium 6.8)
- [CVE-2009-1346](https://insights.sbomify.com/CVE-2009-1346/): SQL injection in interguias:nethoteles (high 7.5)
- [CVE-2009-1345](https://insights.sbomify.com/CVE-2009-1345/): SQL injection in cpcommerce:cpcommerce (high 7.5)
- [CVE-2009-1344](https://insights.sbomify.com/CVE-2009-1344/): Cross-site scripting in drupal:localization client (medium 4.3)
- [CVE-2009-1343](https://insights.sbomify.com/CVE-2009-1343/): Cross-site scripting in drupal:print (medium 4.3)
- [CVE-2009-1342](https://insights.sbomify.com/CVE-2009-1342/): Cross-site scripting in drupal:cck comment reference (medium 4.3)
- [CVE-2009-1341](https://insights.sbomify.com/CVE-2009-1341/): Denial of service in debian:libdbd-pg-perl (medium 5.0)
- [CVE-2009-1339](https://insights.sbomify.com/CVE-2009-1339/): Cross-site request forgery in twiki:twiki (medium 6.0)
- [CVE-2009-1338](https://insights.sbomify.com/CVE-2009-1338/): Security feature bypass in linux:linux kernel (medium 4.6)
- [CVE-2009-1337](https://insights.sbomify.com/CVE-2009-1337/): Privilege escalation in linux:linux kernel (medium 4.4)
- [CVE-2009-1336](https://insights.sbomify.com/CVE-2009-1336/): Denial of service in linux:linux kernel (medium 4.9)
- [CVE-2009-1335](https://insights.sbomify.com/CVE-2009-1335/): Denial of service in microsoft:internet explorer (medium 4.3)
- [CVE-2009-1334](https://insights.sbomify.com/CVE-2009-1334/): Cross-site scripting in ibm:tivoli continuous data protection for files (medium 4.3)
- [CVE-2009-1333](https://insights.sbomify.com/CVE-2009-1333/): Cross-site scripting in hp:deskjet 6840 (medium 4.3)
- [CVE-2009-1332](https://insights.sbomify.com/CVE-2009-1332/): Information disclosure in sun:java system directory server (medium 5.0)
- [CVE-2009-1331](https://insights.sbomify.com/CVE-2009-1331/): Integer overflow in microsoft:windows media player (critical 9.3)
- [CVE-2009-1330](https://insights.sbomify.com/CVE-2009-1330/): Memory corruption in mini-stream:easy rm to mp3 converter (critical 9.3)
- [CVE-2009-1329](https://insights.sbomify.com/CVE-2009-1329/): Memory corruption in mini-stream:shadow stream recorder (critical 9.3)
- [CVE-2009-1328](https://insights.sbomify.com/CVE-2009-1328/): Memory corruption in mini-stream:rm-mp3 converter (critical 9.3)
- [CVE-2009-1327](https://insights.sbomify.com/CVE-2009-1327/): Memory corruption in mini-stream:wm downloader (critical 9.3)
- [CVE-2009-1326](https://insights.sbomify.com/CVE-2009-1326/): Memory corruption in mini-stream:rm downloader (critical 9.3)
- [CVE-2009-1325](https://insights.sbomify.com/CVE-2009-1325/): Memory corruption in mini-stream:ripper (critical 9.3)
- [CVE-2009-1324](https://insights.sbomify.com/CVE-2009-1324/): Memory corruption in mini-stream:asx to mp3 converter (critical 9.3)
- [CVE-2009-1323](https://insights.sbomify.com/CVE-2009-1323/): SQL injection in webfileexplorer:web file explorer (high 7.5)
- [CVE-2009-1322](https://insights.sbomify.com/CVE-2009-1322/): Information disclosure in humayun shabbir bhutta:asp product catalog (medium 5.0)
- [CVE-2009-1321](https://insights.sbomify.com/CVE-2009-1321/): Cross-site scripting in humayun shabbir bhutta:asp product catalog (medium 4.3)
- [CVE-2009-1320](https://insights.sbomify.com/CVE-2009-1320/): Cross-site scripting in zazzle:store builder (medium 4.3)
- [CVE-2009-1319](https://insights.sbomify.com/CVE-2009-1319/): Path traversal in guestcal:guest cal (high 7.5)
- [CVE-2009-1318](https://insights.sbomify.com/CVE-2009-1318/): Path traversal in jamroom:jamroom (medium 6.5)
- [CVE-2009-1317](https://insights.sbomify.com/CVE-2009-1317/): SQL injection in aquacms:aqua cms (medium 6.8)
- [CVE-2009-1316](https://insights.sbomify.com/CVE-2009-1316/): SQL injection in abk-soft:ablespace (high 7.5)
- [CVE-2009-1315](https://insights.sbomify.com/CVE-2009-1315/): Cross-site scripting in abk-soft:ablespace (medium 4.3)
- [CVE-2009-1314](https://insights.sbomify.com/CVE-2009-1314/): File upload in webfileexplorer:web file explorer (critical 10.0)
- [CVE-2009-1313](https://insights.sbomify.com/CVE-2009-1313/): Memory corruption in mozilla:firefox (critical 9.3)
- [CVE-2009-1312](https://insights.sbomify.com/CVE-2009-1312/): Cross-site scripting in mozilla:firefox (medium 4.3)
- [CVE-2009-1311](https://insights.sbomify.com/CVE-2009-1311/): Information disclosure in mozilla:firefox (medium 4.3)
- [CVE-2009-1310](https://insights.sbomify.com/CVE-2009-1310/): Cross-site scripting in mozilla:firefox (medium 4.3)
- [CVE-2009-1309](https://insights.sbomify.com/CVE-2009-1309/): Security feature bypass in mozilla:firefox (medium 4.3)
- [CVE-2009-1308](https://insights.sbomify.com/CVE-2009-1308/): Cross-site scripting in mozilla:firefox (medium 4.3)
- [CVE-2009-1307](https://insights.sbomify.com/CVE-2009-1307/): Security feature bypass in mozilla:firefox (medium 6.8)
- [CVE-2009-1306](https://insights.sbomify.com/CVE-2009-1306/): Cross-site scripting in mozilla:firefox (medium 4.3)
- [CVE-2009-1305](https://insights.sbomify.com/CVE-2009-1305/): Memory corruption in mozilla:firefox (medium 5.0)
- [CVE-2009-1304](https://insights.sbomify.com/CVE-2009-1304/): Memory corruption in mozilla:firefox (medium 5.0)
- [CVE-2009-1303](https://insights.sbomify.com/CVE-2009-1303/): Memory corruption in mozilla:firefox (medium 5.0)
- [CVE-2009-1302](https://insights.sbomify.com/CVE-2009-1302/): Memory corruption in mozilla:firefox (medium 5.0)
- [CVE-2009-1301](https://insights.sbomify.com/CVE-2009-1301/): Integer overflow in mpg123:mpg123 (critical 10.0)
- [CVE-2009-1300](https://insights.sbomify.com/CVE-2009-1300/): Security feature bypass in debian:advanced package tool (critical 10.0)
- [CVE-2009-1299](https://insights.sbomify.com/CVE-2009-1299/): Race condition in pulseaudio:pulseaudio (medium 6.9)
- [CVE-2009-1298](https://insights.sbomify.com/CVE-2009-1298/): Null dereference in linux:linux kernel (high 7.8)
- [CVE-2009-1297](https://insights.sbomify.com/CVE-2009-1297/): Race condition in novell:suse linux (medium 4.4)
- [CVE-2009-1296](https://insights.sbomify.com/CVE-2009-1296/): Information disclosure in ubuntu:73-oubuntu (low 1.9)
- [CVE-2009-1295](https://insights.sbomify.com/CVE-2009-1295/): Other in apport:apport (low 1.9)
- [CVE-2009-1294](https://insights.sbomify.com/CVE-2009-1294/): Cross-site scripting in liferay:liferay enterprise portal (medium 4.3)
- [CVE-2009-1293](https://insights.sbomify.com/CVE-2009-1293/): Information disclosure in novell:teaming (medium 5.0)
- [CVE-2009-1292](https://insights.sbomify.com/CVE-2009-1292/): Information disclosure in ibm:rational clearcase (low 2.1)
- [CVE-2009-1291](https://insights.sbomify.com/CVE-2009-1291/): Memory corruption in tibco:enterprise message service (critical 10.0)
- [CVE-2009-1290](https://insights.sbomify.com/CVE-2009-1290/): Cross-site request forgery in ibm:advanced management module (medium 6.8)
- [CVE-2009-1289](https://insights.sbomify.com/CVE-2009-1289/): Information disclosure in ibm:advanced management module (medium 4.0)
- [CVE-2009-1288](https://insights.sbomify.com/CVE-2009-1288/): Cross-site scripting in ibm:advanced management module (medium 4.3)
- [CVE-2009-1287](https://insights.sbomify.com/CVE-2009-1287/): Cross-site scripting in cisco:subscriber edge services manager (medium 4.3)
- [CVE-2009-1286](https://insights.sbomify.com/CVE-2009-1286/): Denial of service in ibm:lotus domino (medium 5.0)
- [CVE-2009-1285](https://insights.sbomify.com/CVE-2009-1285/): Code injection in phpmyadmin:phpmyadmin (high 7.5)
- [CVE-2009-1284](https://insights.sbomify.com/CVE-2009-1284/): Memory corruption in bibtex:bibtex (medium 5.0)
- [CVE-2009-1283](https://insights.sbomify.com/CVE-2009-1283/): Auth bypass in glfusion:glfusion (medium 6.8)
- [CVE-2009-1282](https://insights.sbomify.com/CVE-2009-1282/): SQL injection in glfusion:glfusion (high 7.5)
- [CVE-2009-1281](https://insights.sbomify.com/CVE-2009-1281/): Cross-site scripting in glfusion:glfusion (medium 4.3)
- [CVE-2009-1280](https://insights.sbomify.com/CVE-2009-1280/): Cross-site request forgery in joomla:joomla (medium 6.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2009/page/37/