# Vulnerabilities published in 2009


- [CVE-2009-1279](https://insights.sbomify.com/CVE-2009-1279/): Cross-site scripting in joomla:joomla (low 2.6)
- [CVE-2009-1278](https://insights.sbomify.com/CVE-2009-1278/): Code injection in gravityboardx:gravity board x (high 7.5)
- [CVE-2009-1277](https://insights.sbomify.com/CVE-2009-1277/): SQL injection in gravityboardx:gravity board x (high 7.5)
- [CVE-2009-1276](https://insights.sbomify.com/CVE-2009-1276/): Information disclosure in sun:opensolaris (low 2.1)
- [CVE-2009-1275](https://insights.sbomify.com/CVE-2009-1275/): Apache Tiles Vulnerable to XSS via EL Expression Injection (medium 6.8)
- [CVE-2009-1274](https://insights.sbomify.com/CVE-2009-1274/): Integer overflow in xine:xine-lib (medium 5.0)
- [CVE-2009-1273](https://insights.sbomify.com/CVE-2009-1273/): Information disclosure in andrew j.korty:pam ssh (medium 5.0)
- [CVE-2009-1272](https://insights.sbomify.com/CVE-2009-1272/): Denial of service in php:php (medium 5.0)
- [CVE-2009-1271](https://insights.sbomify.com/CVE-2009-1271/): Denial of service in php:php (medium 5.0)
- [CVE-2009-1270](https://insights.sbomify.com/CVE-2009-1270/): Denial of service in canonical:ubuntu linux (high 7.8)
- [CVE-2009-1269](https://insights.sbomify.com/CVE-2009-1269/): Denial of service in wireshark:wireshark (medium 5.0)
- [CVE-2009-1268](https://insights.sbomify.com/CVE-2009-1268/): Denial of service in wireshark:wireshark (medium 4.3)
- [CVE-2009-1267](https://insights.sbomify.com/CVE-2009-1267/): Denial of service in wireshark:wireshark (medium 5.0)
- [CVE-2009-1266](https://insights.sbomify.com/CVE-2009-1266/): Other in wireshark:wireshark (critical 10.0)
- [CVE-2009-1265](https://insights.sbomify.com/CVE-2009-1265/): Integer overflow in linux:linux kernel (medium 5.0)
- [CVE-2009-1264](https://insights.sbomify.com/CVE-2009-1264/): Frontend User Registration extension for TYPO3 does not properly verify access rights (medium 4.0)
- [CVE-2009-1263](https://insights.sbomify.com/CVE-2009-1263/): SQL injection in alikonweb:com bookjoomlas (high 7.5)
- [CVE-2009-1262](https://insights.sbomify.com/CVE-2009-1262/): Memory corruption in fortinet:forticlient (high 7.2)
- [CVE-2009-1261](https://insights.sbomify.com/CVE-2009-1261/): Cross-site scripting in webhelpdesk:web help desk (medium 4.3)
- [CVE-2009-1260](https://insights.sbomify.com/CVE-2009-1260/): Memory corruption in ezbsystems:ultraiso (critical 9.3)
- [CVE-2009-1259](https://insights.sbomify.com/CVE-2009-1259/): SQL injection in insanevisions:adaptbb (medium 6.8)
- [CVE-2009-1258](https://insights.sbomify.com/CVE-2009-1258/): SQL injection in rd-media:com rdautos (high 7.5)
- [CVE-2009-1257](https://insights.sbomify.com/CVE-2009-1257/): Memory corruption in magic iso maker:magic iso maker (critical 9.0)
- [CVE-2009-1256](https://insights.sbomify.com/CVE-2009-1256/): SQL injection in flexcms:flexcms (high 7.5)
- [CVE-2009-1255](https://insights.sbomify.com/CVE-2009-1255/): Information disclosure in memcachedb:memcached (medium 5.0)
- [CVE-2009-1254](https://insights.sbomify.com/CVE-2009-1254/): Command injection in james stone:tunapie (medium 6.8)
- [CVE-2009-1253](https://insights.sbomify.com/CVE-2009-1253/): Race condition in james stone:tunapie (medium 4.4)
- [CVE-2009-1252](https://insights.sbomify.com/CVE-2009-1252/): Memory corruption in ntp:ntp (medium 6.8)
- [CVE-2009-1251](https://insights.sbomify.com/CVE-2009-1251/): Memory corruption in openafs:openafs (critical 10.0)
- [CVE-2009-1250](https://insights.sbomify.com/CVE-2009-1250/): Null dereference in ibm:afs (high 7.8)
- [CVE-2009-1249](https://insights.sbomify.com/CVE-2009-1249/): Cross-site scripting in drupal:feedapi mapper (medium 4.3)
- [CVE-2009-1248](https://insights.sbomify.com/CVE-2009-1248/): Code injection in acutecp:acute control panel (high 7.5)
- [CVE-2009-1247](https://insights.sbomify.com/CVE-2009-1247/): SQL injection in acutecp.rediscussed:acutecp (high 7.5)
- [CVE-2009-1246](https://insights.sbomify.com/CVE-2009-1246/): Path traversal in blogplus:blogplus (high 7.5)
- [CVE-2009-1245](https://insights.sbomify.com/CVE-2009-1245/): SQL injection in cccp-common-clan-portal-pasterbin:cccp pastebin (high 7.5)
- [CVE-2009-1244](https://insights.sbomify.com/CVE-2009-1244/): Other in vmware:ace (medium 6.8)
- [CVE-2009-1243](https://insights.sbomify.com/CVE-2009-1243/): Denial of service in linux:linux kernel (medium 5.5)
- [CVE-2009-1242](https://insights.sbomify.com/CVE-2009-1242/): Denial of service in canonical:ubuntu linux (medium 4.9)
- [CVE-2009-1241](https://insights.sbomify.com/CVE-2009-1241/): Security feature bypass in clamav:clamav (high 7.5)
- [CVE-2009-1240](https://insights.sbomify.com/CVE-2009-1240/): Security feature bypass in ibm:network multi-function security (critical 10.0)
- [CVE-2009-1239](https://insights.sbomify.com/CVE-2009-1239/): Information disclosure in ibm:db2 (medium 5.0)
- [CVE-2009-1238](https://insights.sbomify.com/CVE-2009-1238/): Race condition in apple:mac os x (high 7.2)
- [CVE-2009-1237](https://insights.sbomify.com/CVE-2009-1237/): Denial of service in apple:mac os x (medium 4.9)
- [CVE-2009-1236](https://insights.sbomify.com/CVE-2009-1236/): Memory corruption in apple:mac os x (critical 10.0)
- [CVE-2009-1235](https://insights.sbomify.com/CVE-2009-1235/): Privilege escalation in apple:mac os x (high 7.2)
- [CVE-2009-1234](https://insights.sbomify.com/CVE-2009-1234/): Denial of service in opera:opera browser (medium 4.3)
- [CVE-2009-1233](https://insights.sbomify.com/CVE-2009-1233/): Denial of service in apple:safari (medium 4.3)
- [CVE-2009-1232](https://insights.sbomify.com/CVE-2009-1232/): Memory corruption in mozilla:firefox (medium 4.3)
- [CVE-2009-1231](https://insights.sbomify.com/CVE-2009-1231/): Other in ibm:db2 content manager (critical 10.0)
- [CVE-2009-1230](https://insights.sbomify.com/CVE-2009-1230/): Code injection in podcast generator:podcast generator (medium 6.5)
- [CVE-2009-1229](https://insights.sbomify.com/CVE-2009-1229/): SQL injection in arcadwy:arcadwy arcade script (high 7.5)
- [CVE-2009-1228](https://insights.sbomify.com/CVE-2009-1228/): Cross-site scripting in arcadwy:arcadwy arcade script cms (medium 4.3)
- [CVE-2009-1227](https://insights.sbomify.com/CVE-2009-1227/): Memory corruption in checkpoint:firewall-1 pki web service (critical 10.0)
- [CVE-2009-1226](https://insights.sbomify.com/CVE-2009-1226/): Missing authorization in podcast generator:podcast generator (high 7.5)
- [CVE-2009-1225](https://insights.sbomify.com/CVE-2009-1225/): Cross-site scripting in platinumprofitzone:turnkey ebook store (medium 4.3)
- [CVE-2009-1224](https://insights.sbomify.com/CVE-2009-1224/): SQL injection in scivox:vsp stats processor (high 7.5)
- [CVE-2009-1223](https://insights.sbomify.com/CVE-2009-1223/): Information disclosure in fullrevolution:aspwebcalendar (medium 5.0)
- [CVE-2009-1222](https://insights.sbomify.com/CVE-2009-1222/): Path traversal in webedition:webedition (medium 5.1)
- [CVE-2009-1220](https://insights.sbomify.com/CVE-2009-1220/): Cross-site scripting in cisco:adaptive security appliance (medium 4.3)
- [CVE-2009-1219](https://insights.sbomify.com/CVE-2009-1219/): Denial of service in sun:java system calendar server (medium 5.0)
- [CVE-2009-1218](https://insights.sbomify.com/CVE-2009-1218/): Cross-site scripting in sun:java system calendar server (medium 4.3)
- [CVE-2009-1217](https://insights.sbomify.com/CVE-2009-1217/): Integer overflow in microsoft:gdi\+ (medium 4.3)
- [CVE-2009-1216](https://insights.sbomify.com/CVE-2009-1216/): Memory corruption in microsoft:subsystem for unix-based applications (critical 10.0)
- [CVE-2009-1215](https://insights.sbomify.com/CVE-2009-1215/): Race condition in gnu:gnu screen (low 1.9)
- [CVE-2009-1214](https://insights.sbomify.com/CVE-2009-1214/): Information disclosure in gnu:screen (medium 4.9)
- [CVE-2009-1213](https://insights.sbomify.com/CVE-2009-1213/): Cross-site request forgery in mozilla:bugzilla (medium 6.8)
- [CVE-2009-1212](https://insights.sbomify.com/CVE-2009-1212/): Other in precisionid:data matrix barcode activex control (high 7.8)
- [CVE-2009-1211](https://insights.sbomify.com/CVE-2009-1211/): Security feature bypass in bluecoat:proxysg (medium 5.8)
- [CVE-2009-1210](https://insights.sbomify.com/CVE-2009-1210/): Memory corruption in wireshark:wireshark (critical 10.0)
- [CVE-2009-1209](https://insights.sbomify.com/CVE-2009-1209/): Memory corruption in w3:amaya (critical 9.3)
- [CVE-2009-1208](https://insights.sbomify.com/CVE-2009-1208/): SQL injection in auth2db:auth2db (high 7.5)
- [CVE-2009-1207](https://insights.sbomify.com/CVE-2009-1207/): Race condition in sun:opensolaris (medium 4.4)
- [CVE-2009-1206](https://insights.sbomify.com/CVE-2009-1206/): Privilege escalation in futomi:cgi cafe access analyzer cgi (high 7.5)
- [CVE-2009-1204](https://insights.sbomify.com/CVE-2009-1204/): Cross-site scripting in tiki:tikiwiki cms\/groupware (medium 4.3)
- [CVE-2009-1203](https://insights.sbomify.com/CVE-2009-1203/): Other in cisco:adaptive security appliance (medium 6.0)
- [CVE-2009-1202](https://insights.sbomify.com/CVE-2009-1202/): Cross-site scripting in cisco:adaptive security appliance (medium 4.3)
- [CVE-2009-1201](https://insights.sbomify.com/CVE-2009-1201/): Cross-site scripting in cisco:adaptive security appliance (medium 4.3)
- [CVE-2009-1198](https://insights.sbomify.com/CVE-2009-1198/): Cross-site scripting in apache:juddi (medium 6.1)
- [CVE-2009-1197](https://insights.sbomify.com/CVE-2009-1197/): Other in apache:juddi (medium 5.3)
- [CVE-2009-1196](https://insights.sbomify.com/CVE-2009-1196/): Use after free in apple:cups (medium 5.0)
- [CVE-2009-1195](https://insights.sbomify.com/CVE-2009-1195/): Privilege escalation in apache:http server (medium 4.9)
- [CVE-2009-1194](https://insights.sbomify.com/CVE-2009-1194/): Integer overflow in pango:pango (medium 6.8)
- [CVE-2009-1192](https://insights.sbomify.com/CVE-2009-1192/): Information disclosure in linux:linux kernel (medium 4.9)
- [CVE-2009-1191](https://insights.sbomify.com/CVE-2009-1191/): Information disclosure in apache:http server (medium 5.0)
- [CVE-2009-1190](https://insights.sbomify.com/CVE-2009-1190/): Spring Framework Inefficient Regular Expression Complexity (medium 5.0)
- [CVE-2009-1189](https://insights.sbomify.com/CVE-2009-1189/): Security feature bypass in freedesktop:dbus (low 3.6)
- [CVE-2009-1188](https://insights.sbomify.com/CVE-2009-1188/): Integer overflow in poppler:poppler (medium 5.0)
- [CVE-2009-1187](https://insights.sbomify.com/CVE-2009-1187/): Integer overflow in poppler:poppler (medium 5.0)
- [CVE-2009-1186](https://insights.sbomify.com/CVE-2009-1186/): Memory corruption in canonical:ubuntu linux (low 2.1)
- [CVE-2009-1185](https://insights.sbomify.com/CVE-2009-1185/): Privilege escalation in canonical:ubuntu linux (high 7.2)
- [CVE-2009-1184](https://insights.sbomify.com/CVE-2009-1184/): Security feature bypass in linux:linux kernel (medium 4.4)
- [CVE-2009-1183](https://insights.sbomify.com/CVE-2009-1183/): Denial of service in apple:cups (medium 4.3)
- [CVE-2009-1182](https://insights.sbomify.com/CVE-2009-1182/): Memory corruption in apple:cups (high 7.5)
- [CVE-2009-1181](https://insights.sbomify.com/CVE-2009-1181/): Null dereference in apple:cups (medium 4.3)
- [CVE-2009-1180](https://insights.sbomify.com/CVE-2009-1180/): Memory corruption in apple:cups (medium 6.8)
- [CVE-2009-1179](https://insights.sbomify.com/CVE-2009-1179/): Integer overflow in apple:cups (medium 6.8)
- [CVE-2009-1178](https://insights.sbomify.com/CVE-2009-1178/): Other in ibm:tivoli storage manager (critical 10.0)
- [CVE-2009-1177](https://insights.sbomify.com/CVE-2009-1177/): Memory corruption in osgeo:mapserver (critical 10.0)
- [CVE-2009-1176](https://insights.sbomify.com/CVE-2009-1176/): Memory corruption in osgeo:mapserver (critical 10.0)
- [CVE-2009-1175](https://insights.sbomify.com/CVE-2009-1175/): Cross-site scripting in banshee-project:banshee (medium 4.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2009/page/38/