# Vulnerabilities published in 2009 - [CVE-2009-1060](https://insights.sbomify.com/CVE-2009-1060/): Other in apple:safari (critical 9.3) - [CVE-2009-1059](https://insights.sbomify.com/CVE-2009-1059/): Memory corruption in powerzip:powerzip (critical 9.3) - [CVE-2009-1058](https://insights.sbomify.com/CVE-2009-1058/): Memory corruption in zipgenius:zipgenius (critical 10.0) - [CVE-2009-1057](https://insights.sbomify.com/CVE-2009-1057/): Memory corruption in microsmarts:zipitfast\! (critical 10.0) - [CVE-2009-1056](https://insights.sbomify.com/CVE-2009-1056/): Missing authorization in ibm:rational appscan (medium 5.0) - [CVE-2009-1055](https://insights.sbomify.com/CVE-2009-1055/): Information disclosure in sitecore:cms (medium 4.0) - [CVE-2009-1054](https://insights.sbomify.com/CVE-2009-1054/): Other in ichitaro:ichitaro (critical 9.3) - [CVE-2009-1053](https://insights.sbomify.com/CVE-2009-1053/): Information disclosure in chaozz:chaozzdb (medium 5.0) - [CVE-2009-1052](https://insights.sbomify.com/CVE-2009-1052/): Information disclosure in chaozz:fireant (medium 5.0) - [CVE-2009-1051](https://insights.sbomify.com/CVE-2009-1051/): Information disclosure in chaozz:fubarforum (medium 5.0) - [CVE-2009-1050](https://insights.sbomify.com/CVE-2009-1050/): Auth bypass in kamads:bloginator (high 7.5) - [CVE-2009-1049](https://insights.sbomify.com/CVE-2009-1049/): SQL injection in kamads:bloginator (high 7.5) - [CVE-2009-1048](https://insights.sbomify.com/CVE-2009-1048/): Auth bypass in snom:snom 300 firmware (critical 9.8) - [CVE-2009-1047](https://insights.sbomify.com/CVE-2009-1047/): Cross-site scripting in drupal:drupal (medium 4.3) - [CVE-2009-1046](https://insights.sbomify.com/CVE-2009-1046/): Memory corruption in linux:linux kernel (medium 4.7) - [CVE-2009-1045](https://insights.sbomify.com/CVE-2009-1045/): Denial of service in videolan:vlc media player (medium 5.0) - [CVE-2009-1044](https://insights.sbomify.com/CVE-2009-1044/): Use after free in mozilla:firefox (critical 9.3) - [CVE-2009-1043](https://insights.sbomify.com/CVE-2009-1043/): Other in microsoft:internet explorer (critical 10.0) - [CVE-2009-1042](https://insights.sbomify.com/CVE-2009-1042/): Other in apple:safari (critical 9.3) - [CVE-2009-1041](https://insights.sbomify.com/CVE-2009-1041/): Memory corruption in freebsd:freebsd (high 7.2) - [CVE-2009-1040](https://insights.sbomify.com/CVE-2009-1040/): Memory corruption in winasm:winasm studio (critical 9.3) - [CVE-2009-1039](https://insights.sbomify.com/CVE-2009-1039/): Memory corruption in cdexos:cdex (high 7.5) - [CVE-2009-1038](https://insights.sbomify.com/CVE-2009-1038/): SQL injection in yap:yap blog (medium 6.5) - [CVE-2009-1037](https://insights.sbomify.com/CVE-2009-1037/): Business logic in drupal:print (medium 5.0) - [CVE-2009-1036](https://insights.sbomify.com/CVE-2009-1036/): Cross-site request forgery in drupal:plus1 (medium 6.8) - [CVE-2009-1035](https://insights.sbomify.com/CVE-2009-1035/): Cross-site scripting in jake gordon:tasks (medium 4.3) - [CVE-2009-1034](https://insights.sbomify.com/CVE-2009-1034/): SQL injection in drupal:tasklist (critical 10.0) - [CVE-2009-1033](https://insights.sbomify.com/CVE-2009-1033/): SQL injection in deluxebb:deluxebb (high 7.5) - [CVE-2009-1032](https://insights.sbomify.com/CVE-2009-1032/): SQL injection in yabsoft:advanced image hosting script (high 7.5) - [CVE-2009-1031](https://insights.sbomify.com/CVE-2009-1031/): Path traversal in solarwinds:serv-u file server (high 7.8) - [CVE-2009-1030](https://insights.sbomify.com/CVE-2009-1030/): Cross-site scripting in wordpress:wordpress mu (medium 4.3) - [CVE-2009-1029](https://insights.sbomify.com/CVE-2009-1029/): Memory corruption in poppeeper:pop peeper (critical 9.3) - [CVE-2009-1028](https://insights.sbomify.com/CVE-2009-1028/): Memory corruption in edisys:ezip wizard (critical 9.3) - [CVE-2009-1027](https://insights.sbomify.com/CVE-2009-1027/): SQL injection in opencart:opencart (high 7.5) - [CVE-2009-1026](https://insights.sbomify.com/CVE-2009-1026/): SQL injection in kimwebsites:kim websites (high 7.5) - [CVE-2009-1025](https://insights.sbomify.com/CVE-2009-1025/): Code injection in beerwin:phplinkadmin (high 7.5) - [CVE-2009-1024](https://insights.sbomify.com/CVE-2009-1024/): SQL injection in beerwin:phplinkadmin (high 7.5) - [CVE-2009-1023](https://insights.sbomify.com/CVE-2009-1023/): SQL injection in phpcomasy:phpcomasy (high 7.5) - [CVE-2009-1022](https://insights.sbomify.com/CVE-2009-1022/): Memory corruption in gomlab:gom encoder (critical 9.3) - [CVE-2009-1021](https://insights.sbomify.com/CVE-2009-1021/): Other in oracle:database server (medium 5.5) - [CVE-2009-1020](https://insights.sbomify.com/CVE-2009-1020/): Other in oracle:database server (critical 9.0) - [CVE-2009-1019](https://insights.sbomify.com/CVE-2009-1019/): Other in oracle:database server (high 7.5) - [CVE-2009-1018](https://insights.sbomify.com/CVE-2009-1018/): Other in oracle:database server (medium 5.5) - [CVE-2009-1017](https://insights.sbomify.com/CVE-2009-1017/): Other in oracle:application server (medium 4.0) - [CVE-2009-1016](https://insights.sbomify.com/CVE-2009-1016/): Memory corruption in oracle:bea product suite (high 8.5) - [CVE-2009-1015](https://insights.sbomify.com/CVE-2009-1015/): Other in oracle:database server (medium 4.0) - [CVE-2009-1014](https://insights.sbomify.com/CVE-2009-1014/): Other in oracle:jd edwards enterpriseone (medium 5.8) - [CVE-2009-1013](https://insights.sbomify.com/CVE-2009-1013/): Other in oracle:jd edwards enterpriseone (medium 6.4) - [CVE-2009-1012](https://insights.sbomify.com/CVE-2009-1012/): Integer overflow in oracle:bea product suite (critical 10.0) - [CVE-2009-1011](https://insights.sbomify.com/CVE-2009-1011/): Integer overflow in oracle:application server (medium 4.4) - [CVE-2009-1010](https://insights.sbomify.com/CVE-2009-1010/): Other in ibm:websphere portal (medium 4.4) - [CVE-2009-1009](https://insights.sbomify.com/CVE-2009-1009/): Other in ibm:websphere portal (medium 4.4) - [CVE-2009-1008](https://insights.sbomify.com/CVE-2009-1008/): Other in ibm:websphere portal (medium 4.4) - [CVE-2009-1007](https://insights.sbomify.com/CVE-2009-1007/): Other in oracle:database server (medium 6.5) - [CVE-2009-1006](https://insights.sbomify.com/CVE-2009-1006/): Other in oracle:jrockit (critical 10.0) - [CVE-2009-1005](https://insights.sbomify.com/CVE-2009-1005/): Other in oracle:bea product suite (medium 4.1) - [CVE-2009-1004](https://insights.sbomify.com/CVE-2009-1004/): Other in oracle:bea product suite (medium 4.0) - [CVE-2009-1003](https://insights.sbomify.com/CVE-2009-1003/): Other in oracle:bea product suite (medium 5.0) - [CVE-2009-1002](https://insights.sbomify.com/CVE-2009-1002/): Privilege escalation in oracle:bea product suite (medium 5.8) - [CVE-2009-1001](https://insights.sbomify.com/CVE-2009-1001/): Privilege escalation in oracle:bea product suite (medium 5.5) - [CVE-2009-10007](https://insights.sbomify.com/CVE-2009-10007/): Catalyst::Plugin::Authentication versions before 0.10_027 for Perl is susceptible to session fixation attacks (critical 9.1) - [CVE-2009-10006](https://insights.sbomify.com/CVE-2009-10006/): UFO: Alien Invasion <= 2.2.1 IRC Client Buffer Overflow (critical 9.3) - [CVE-2009-10005](https://insights.sbomify.com/CVE-2009-10005/): ContentKeeper Web Appliance < 125.10 Arbitrary File Access via mimencode (high 8.7) - [CVE-2009-10004](https://insights.sbomify.com/CVE-2009-10004/): Turante Sandbox Theme functions.php sandbox_body_class cross site scripting (low 3.5) - [CVE-2009-10003](https://insights.sbomify.com/CVE-2009-10003/): capnsquarepants wordcraft tag.php cross site scripting (low 3.5) - [CVE-2009-10002](https://insights.sbomify.com/CVE-2009-10002/): dpup fittr-flickr EXIF Preview easy-exif.js cross site scripting (low 3.5) - [CVE-2009-10001](https://insights.sbomify.com/CVE-2009-10001/): jianlinwei cool-php-captcha example-form.php cross site scripting (low 3.5) - [CVE-2009-1000](https://insights.sbomify.com/CVE-2009-1000/): Hardcoded credentials in oracle:e-business suite (high 7.5) - [CVE-2009-0999](https://insights.sbomify.com/CVE-2009-0999/): Other in oracle:e-business suite (medium 6.8) - [CVE-2009-0998](https://insights.sbomify.com/CVE-2009-0998/): Other in oracle:jd edwards enterpriseone (medium 5.5) - [CVE-2009-0997](https://insights.sbomify.com/CVE-2009-0997/): Other in oracle:database server (medium 4.0) - [CVE-2009-0996](https://insights.sbomify.com/CVE-2009-0996/): Other in oracle:application server (medium 4.0) - [CVE-2009-0995](https://insights.sbomify.com/CVE-2009-0995/): Other in oracle:e-business suite (medium 4.3) - [CVE-2009-0994](https://insights.sbomify.com/CVE-2009-0994/): Other in oracle:application server (medium 4.0) - [CVE-2009-0993](https://insights.sbomify.com/CVE-2009-0993/): Other in oracle:application server (high 7.5) - [CVE-2009-0992](https://insights.sbomify.com/CVE-2009-0992/): SQL injection in oracle:database 10g (medium 5.5) - [CVE-2009-0991](https://insights.sbomify.com/CVE-2009-0991/): Denial of service in oracle:database 10g (medium 5.0) - [CVE-2009-0990](https://insights.sbomify.com/CVE-2009-0990/): Other in oracle:application server (medium 5.5) - [CVE-2009-0989](https://insights.sbomify.com/CVE-2009-0989/): Other in oracle:application server (medium 5.5) - [CVE-2009-0988](https://insights.sbomify.com/CVE-2009-0988/): Other in oracle:database 11g (low 2.1) - [CVE-2009-0987](https://insights.sbomify.com/CVE-2009-0987/): Other in oracle:database server (medium 5.5) - [CVE-2009-0986](https://insights.sbomify.com/CVE-2009-0986/): Other in oracle:database 10g (medium 5.4) - [CVE-2009-0985](https://insights.sbomify.com/CVE-2009-0985/): Other in oracle:database 10g (high 7.1) - [CVE-2009-0984](https://insights.sbomify.com/CVE-2009-0984/): Other in oracle:database 10g (medium 5.5) - [CVE-2009-0983](https://insights.sbomify.com/CVE-2009-0983/): Other in oracle:application server (medium 4.3) - [CVE-2009-0982](https://insights.sbomify.com/CVE-2009-0982/): Other in oracle:jd edwards enterpriseone (medium 4.0) - [CVE-2009-0981](https://insights.sbomify.com/CVE-2009-0981/): Information disclosure in oracle:database 11g (medium 4.0) - [CVE-2009-0980](https://insights.sbomify.com/CVE-2009-0980/): Other in oracle:database 10g (medium 5.5) - [CVE-2009-0979](https://insights.sbomify.com/CVE-2009-0979/): Other in oracle:database 9i (critical 9.0) - [CVE-2009-0978](https://insights.sbomify.com/CVE-2009-0978/): Other in oracle:database 10g (medium 5.5) - [CVE-2009-0977](https://insights.sbomify.com/CVE-2009-0977/): SQL injection in oracle:database 10g (medium 5.5) - [CVE-2009-0976](https://insights.sbomify.com/CVE-2009-0976/): Other in oracle:database 10g (medium 5.5) - [CVE-2009-0975](https://insights.sbomify.com/CVE-2009-0975/): Other in oracle:database 10g (medium 5.5) - [CVE-2009-0974](https://insights.sbomify.com/CVE-2009-0974/): Other in oracle:application server (medium 4.3) - [CVE-2009-0973](https://insights.sbomify.com/CVE-2009-0973/): Denial of service in oracle:database 10g (medium 5.0) - [CVE-2009-0972](https://insights.sbomify.com/CVE-2009-0972/): Other in oracle:database server (medium 6.5) - [CVE-2009-0971](https://insights.sbomify.com/CVE-2009-0971/): Cross-site scripting in futomi:access analyzer cgi (medium 4.3) - [CVE-2009-0970](https://insights.sbomify.com/CVE-2009-0970/): Code injection in phpprobid:php pro bid (medium 6.8) - [CVE-2009-0969](https://insights.sbomify.com/CVE-2009-0969/): Cross-site request forgery in phpfox:phpfox (medium 6.8) - [CVE-2009-0968](https://insights.sbomify.com/CVE-2009-0968/): SQL injection in fahlstad:fmoblog plugin (high 7.5) --- From sbomify Insights: https://insights.sbomify.com/years/2009/page/40/