# Vulnerabilities published in 2009


- [CVE-2009-1174](https://insights.sbomify.com/CVE-2009-1174/): Other in ibm:websphere application server (critical 10.0)
- [CVE-2009-1173](https://insights.sbomify.com/CVE-2009-1173/): Misconfiguration in ibm:websphere application server (low 2.1)
- [CVE-2009-1172](https://insights.sbomify.com/CVE-2009-1172/): Other in ibm:websphere application server (critical 10.0)
- [CVE-2009-1171](https://insights.sbomify.com/CVE-2009-1171/): Path traversal in moodle:moodle (medium 4.3)
- [CVE-2009-1170](https://insights.sbomify.com/CVE-2009-1170/): Privilege escalation in sun:opensolaris (medium 6.9)
- [CVE-2009-1169](https://insights.sbomify.com/CVE-2009-1169/): Memory corruption in mozilla:firefox (critical 9.3)
- [CVE-2009-1168](https://insights.sbomify.com/CVE-2009-1168/): Memory corruption in cisco:ios (high 7.1)
- [CVE-2009-1167](https://insights.sbomify.com/CVE-2009-1167/): Other in cisco:catalyst 3750g (critical 10.0)
- [CVE-2009-1166](https://insights.sbomify.com/CVE-2009-1166/): Denial of service in cisco:catalyst (high 7.8)
- [CVE-2009-1165](https://insights.sbomify.com/CVE-2009-1165/): Denial of service in cisco:catalyst 3750g (high 7.8)
- [CVE-2009-1164](https://insights.sbomify.com/CVE-2009-1164/): Denial of service in cisco:catalyst 3750g (high 7.8)
- [CVE-2009-1163](https://insights.sbomify.com/CVE-2009-1163/): Denial of service in cisco:physical access gateway (high 7.8)
- [CVE-2009-1162](https://insights.sbomify.com/CVE-2009-1162/): Cross-site scripting in cisco:ironport asyncos (medium 4.3)
- [CVE-2009-1161](https://insights.sbomify.com/CVE-2009-1161/): Path traversal in cisco:ciscoworks common services (critical 10.0)
- [CVE-2009-1160](https://insights.sbomify.com/CVE-2009-1160/): Security feature bypass in cisco:adaptive security appliance 5500 (medium 4.3)
- [CVE-2009-1159](https://insights.sbomify.com/CVE-2009-1159/): Denial of service in cisco:adaptive security appliance 5500 (high 7.8)
- [CVE-2009-1158](https://insights.sbomify.com/CVE-2009-1158/): Denial of service in cisco:adaptive security appliance 5500 (high 7.8)
- [CVE-2009-1157](https://insights.sbomify.com/CVE-2009-1157/): Denial of service in cisco:adaptive security appliance 5500 (high 7.8)
- [CVE-2009-1156](https://insights.sbomify.com/CVE-2009-1156/): Denial of service in cisco:adaptive security appliance 5500 (medium 5.7)
- [CVE-2009-1155](https://insights.sbomify.com/CVE-2009-1155/): Auth bypass in cisco:adaptive security appliance 5500 (high 7.8)
- [CVE-2009-1154](https://insights.sbomify.com/CVE-2009-1154/): Memory corruption in cisco:ios xr (low 3.3)
- [CVE-2009-1152](https://insights.sbomify.com/CVE-2009-1152/): Denial of service in siemens:gigaset se461 wimax router (high 7.3)
- [CVE-2009-1151](https://insights.sbomify.com/CVE-2009-1151/): phpMyAdmin Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2009-1150](https://insights.sbomify.com/CVE-2009-1150/): Cross-site scripting in phpmyadmin:phpmyadmin (medium 4.3)
- [CVE-2009-1149](https://insights.sbomify.com/CVE-2009-1149/): phpMyAdmin HTTP Response Splitting Vulnerability (high 7.5)
- [CVE-2009-1148](https://insights.sbomify.com/CVE-2009-1148/): Path traversal in phpmyadmin:phpmyadmin (medium 5.0)
- [CVE-2009-1147](https://insights.sbomify.com/CVE-2009-1147/): Privilege escalation in vmware:ace (high 7.2)
- [CVE-2009-1146](https://insights.sbomify.com/CVE-2009-1146/): Denial of service in vmware:ace (medium 4.9)
- [CVE-2009-1144](https://insights.sbomify.com/CVE-2009-1144/): Privilege escalation in foolabs:xpdf (medium 6.9)
- [CVE-2009-1143](https://insights.sbomify.com/CVE-2009-1143/): Race condition in vmware:open-vm-tools (high 7.0)
- [CVE-2009-1142](https://insights.sbomify.com/CVE-2009-1142/): Privilege escalation in vmware:open vm tools (medium 6.7)
- [CVE-2009-1141](https://insights.sbomify.com/CVE-2009-1141/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2009-1140](https://insights.sbomify.com/CVE-2009-1140/): Security feature bypass in microsoft:internet explorer (high 7.1)
- [CVE-2009-1139](https://insights.sbomify.com/CVE-2009-1139/): Denial of service in microsoft:adam (high 7.8)
- [CVE-2009-1138](https://insights.sbomify.com/CVE-2009-1138/): Memory corruption in microsoft:windows 2000 (critical 10.0)
- [CVE-2009-1137](https://insights.sbomify.com/CVE-2009-1137/): Memory corruption in microsoft:office powerpoint (critical 9.3)
- [CVE-2009-1136](https://insights.sbomify.com/CVE-2009-1136/): Code injection in microsoft:isa server (critical 9.3)
- [CVE-2009-1135](https://insights.sbomify.com/CVE-2009-1135/): Auth bypass in microsoft:isa server (critical 9.0)
- [CVE-2009-1134](https://insights.sbomify.com/CVE-2009-1134/): Memory corruption in microsoft:office (critical 9.3)
- [CVE-2009-1133](https://insights.sbomify.com/CVE-2009-1133/): Memory corruption in microsoft:windows 2000 (critical 9.3)
- [CVE-2009-1132](https://insights.sbomify.com/CVE-2009-1132/): Memory corruption in microsoft:windows server 2008 (critical 9.3)
- [CVE-2009-1131](https://insights.sbomify.com/CVE-2009-1131/): Memory corruption in microsoft:office powerpoint (critical 9.3)
- [CVE-2009-1130](https://insights.sbomify.com/CVE-2009-1130/): Memory corruption in microsoft:office (critical 9.3)
- [CVE-2009-1129](https://insights.sbomify.com/CVE-2009-1129/): Memory corruption in microsoft:office powerpoint (critical 9.3)
- [CVE-2009-1128](https://insights.sbomify.com/CVE-2009-1128/): Memory corruption in microsoft:office powerpoint (critical 9.3)
- [CVE-2009-1127](https://insights.sbomify.com/CVE-2009-1127/): Null dereference in microsoft:windows 2000 (high 7.2)
- [CVE-2009-1126](https://insights.sbomify.com/CVE-2009-1126/): Privilege escalation in microsoft:windows 2000 (high 7.2)
- [CVE-2009-1125](https://insights.sbomify.com/CVE-2009-1125/): Privilege escalation in microsoft:windows 2000 (high 7.2)
- [CVE-2009-1124](https://insights.sbomify.com/CVE-2009-1124/): Privilege escalation in microsoft:windows 2000 (high 7.2)
- [CVE-2009-1123](https://insights.sbomify.com/CVE-2009-1123/): Microsoft Windows Improper Input Validation (high 7.8, exploited in the wild)
- [CVE-2009-1122](https://insights.sbomify.com/CVE-2009-1122/): Auth bypass in microsoft:internet information services (high 7.5)
- [CVE-2009-1120](https://insights.sbomify.com/CVE-2009-1120/): Memory corruption in RepliStor (critical 9.8)
- [CVE-2009-1119](https://insights.sbomify.com/CVE-2009-1119/): Memory corruption in emc:replistor (critical 10.0)
- [CVE-2009-1107](https://insights.sbomify.com/CVE-2009-1107/): Security feature bypass in sun:java (medium 4.3)
- [CVE-2009-1106](https://insights.sbomify.com/CVE-2009-1106/): Security feature bypass in sun:jdk (medium 6.4)
- [CVE-2009-1105](https://insights.sbomify.com/CVE-2009-1105/): Security feature bypass in sun:java (high 7.5)
- [CVE-2009-1104](https://insights.sbomify.com/CVE-2009-1104/): Security feature bypass in sun:java (medium 5.8)
- [CVE-2009-1103](https://insights.sbomify.com/CVE-2009-1103/): Deserialization in sun:java (medium 6.4)
- [CVE-2009-1102](https://insights.sbomify.com/CVE-2009-1102/): Code injection in sun:java (medium 6.4)
- [CVE-2009-1101](https://insights.sbomify.com/CVE-2009-1101/): Denial of service in sun:jdk (medium 5.0)
- [CVE-2009-1100](https://insights.sbomify.com/CVE-2009-1100/): Denial of service in sun:jdk (medium 5.0)
- [CVE-2009-1099](https://insights.sbomify.com/CVE-2009-1099/): Integer overflow in sun:java runtime environment (high 7.5)
- [CVE-2009-1098](https://insights.sbomify.com/CVE-2009-1098/): Memory corruption in sun:jdk (critical 9.3)
- [CVE-2009-1097](https://insights.sbomify.com/CVE-2009-1097/): Memory corruption in sun:jdk (critical 9.3)
- [CVE-2009-1096](https://insights.sbomify.com/CVE-2009-1096/): Memory corruption in sun:jdk (critical 10.0)
- [CVE-2009-1095](https://insights.sbomify.com/CVE-2009-1095/): Integer overflow in sun:jdk (critical 10.0)
- [CVE-2009-1094](https://insights.sbomify.com/CVE-2009-1094/): Deserialization in sun:jdk (critical 10.0)
- [CVE-2009-1093](https://insights.sbomify.com/CVE-2009-1093/): Denial of service in sun:jdk (medium 5.0)
- [CVE-2009-1092](https://insights.sbomify.com/CVE-2009-1092/): Use after free in geovision:liveaudio activex control (critical 9.3)
- [CVE-2009-1091](https://insights.sbomify.com/CVE-2009-1091/): Cross-site scripting in rapidleech:rapidleech (medium 4.3)
- [CVE-2009-1090](https://insights.sbomify.com/CVE-2009-1090/): Path traversal in rapidleech:rapidleech (medium 6.8)
- [CVE-2009-1089](https://insights.sbomify.com/CVE-2009-1089/): Path traversal in rapidleech:rapidleech (medium 5.0)
- [CVE-2009-1088](https://insights.sbomify.com/CVE-2009-1088/): Code injection in hannonhill:cascade (critical 9.0)
- [CVE-2009-1087](https://insights.sbomify.com/CVE-2009-1087/): Command injection in pplive:pplive (critical 9.3)
- [CVE-2009-1086](https://insights.sbomify.com/CVE-2009-1086/): Memory corruption in nlnetlabs:ldns (medium 6.4)
- [CVE-2009-1085](https://insights.sbomify.com/CVE-2009-1085/): Information disclosure in matomo:matomo (medium 5.0)
- [CVE-2009-1084](https://insights.sbomify.com/CVE-2009-1084/): Missing authorization in sun:java system identity manager (medium 6.4)
- [CVE-2009-1083](https://insights.sbomify.com/CVE-2009-1083/): Command injection in sun:java system identity manager (critical 9.0)
- [CVE-2009-1082](https://insights.sbomify.com/CVE-2009-1082/): Privilege escalation in sun:java system identity manager (critical 9.0)
- [CVE-2009-1081](https://insights.sbomify.com/CVE-2009-1081/): Cross-site scripting in sun:java system identity manager (medium 4.3)
- [CVE-2009-1080](https://insights.sbomify.com/CVE-2009-1080/): Cross-site scripting in sun:java system identity manager (medium 4.3)
- [CVE-2009-1079](https://insights.sbomify.com/CVE-2009-1079/): Cross-site scripting in sun:java system identity manager (medium 4.3)
- [CVE-2009-1078](https://insights.sbomify.com/CVE-2009-1078/): Missing authorization in sun:java system identity manager (medium 4.0)
- [CVE-2009-1077](https://insights.sbomify.com/CVE-2009-1077/): Missing authorization in sun:java system identity manager (medium 6.5)
- [CVE-2009-1076](https://insights.sbomify.com/CVE-2009-1076/): Information disclosure in sun:java system identity manager (medium 5.0)
- [CVE-2009-1075](https://insights.sbomify.com/CVE-2009-1075/): Information disclosure in sun:java system identity manager (medium 5.0)
- [CVE-2009-1074](https://insights.sbomify.com/CVE-2009-1074/): Information disclosure in sun:java system identity manager (medium 5.0)
- [CVE-2009-1073](https://insights.sbomify.com/CVE-2009-1073/): Misconfiguration in debian:debian linux (medium 5.5)
- [CVE-2009-1072](https://insights.sbomify.com/CVE-2009-1072/): Privilege escalation in canonical:ubuntu linux (medium 4.9)
- [CVE-2009-1071](https://insights.sbomify.com/CVE-2009-1071/): Memory corruption in randomsoftware:icarus (critical 9.3)
- [CVE-2009-1070](https://insights.sbomify.com/CVE-2009-1070/): Cross-site scripting in expressionengine:expressionengine (medium 4.3)
- [CVE-2009-1069](https://insights.sbomify.com/CVE-2009-1069/): Cross-site scripting in drupal:content construction kit (medium 4.3)
- [CVE-2009-1068](https://insights.sbomify.com/CVE-2009-1068/): Memory corruption in bsplayer:bs.player (critical 9.3)
- [CVE-2009-1067](https://insights.sbomify.com/CVE-2009-1067/): Cross-site scripting in getpixie:pixie cms (medium 4.3)
- [CVE-2009-1066](https://insights.sbomify.com/CVE-2009-1066/): SQL injection in getpixie:pixie cms (high 7.5)
- [CVE-2009-1065](https://insights.sbomify.com/CVE-2009-1065/): SQL injection in getpixie:pixie cms (high 7.5)
- [CVE-2009-1064](https://insights.sbomify.com/CVE-2009-1064/): Command injection in orbit downloader:orbit downloader (medium 5.8)
- [CVE-2009-1063](https://insights.sbomify.com/CVE-2009-1063/): Memory corruption in brother soft:exescope (medium 6.8)
- [CVE-2009-1062](https://insights.sbomify.com/CVE-2009-1062/): Memory corruption in adobe:acrobat (critical 9.3)
- [CVE-2009-1061](https://insights.sbomify.com/CVE-2009-1061/): Other in adobe:acrobat reader (critical 9.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2009/page/39/