# Vulnerabilities published in 2009


- [CVE-2009-0756](https://insights.sbomify.com/CVE-2009-0756/): Memory corruption in poppler:poppler (medium 5.0)
- [CVE-2009-0755](https://insights.sbomify.com/CVE-2009-0755/): Denial of service in poppler:poppler (medium 5.0)
- [CVE-2009-0754](https://insights.sbomify.com/CVE-2009-0754/): Misconfiguration in php:php (low 2.1)
- [CVE-2009-0753](https://insights.sbomify.com/CVE-2009-0753/): Path traversal in mldonkey:mldonkey (medium 5.0)
- [CVE-2009-0752](https://insights.sbomify.com/CVE-2009-0752/): Other in sixapart:movable type (critical 10.0)
- [CVE-2009-0751](https://insights.sbomify.com/CVE-2009-0751/): Denial of service in yaws:yaws (medium 5.0)
- [CVE-2009-0750](https://insights.sbomify.com/CVE-2009-0750/): SQL injection in tombstone:smnews (high 7.5)
- [CVE-2009-0749](https://insights.sbomify.com/CVE-2009-0749/): Use after free in opensuse:opensuse (high 7.8)
- [CVE-2009-0748](https://insights.sbomify.com/CVE-2009-0748/): Null dereference in linux:linux kernel (medium 4.9)
- [CVE-2009-0747](https://insights.sbomify.com/CVE-2009-0747/): Denial of service in linux:linux kernel (medium 4.9)
- [CVE-2009-0746](https://insights.sbomify.com/CVE-2009-0746/): Denial of service in linux:linux kernel (medium 4.9)
- [CVE-2009-0745](https://insights.sbomify.com/CVE-2009-0745/): Null dereference in linux:linux kernel (medium 4.9)
- [CVE-2009-0744](https://insights.sbomify.com/CVE-2009-0744/): Null dereference in apple:safari (medium 5.0)
- [CVE-2009-0743](https://insights.sbomify.com/CVE-2009-0743/): Cross-site scripting in cisco:unified meetingplace (low 3.5)
- [CVE-2009-0742](https://insights.sbomify.com/CVE-2009-0742/): Information disclosure in cisco:ace 4710 (high 7.8)
- [CVE-2009-0741](https://insights.sbomify.com/CVE-2009-0741/): SQL injection in craftsilicon:banking\@home (high 7.5)
- [CVE-2009-0740](https://insights.sbomify.com/CVE-2009-0740/): SQL injection in frankmancuso:bluebird (high 7.5)
- [CVE-2009-0739](https://insights.sbomify.com/CVE-2009-0739/): SQL injection in frankmancuso:mynews (high 7.5)
- [CVE-2009-0738](https://insights.sbomify.com/CVE-2009-0738/): SQL injection in frankmancuso:auth php (high 7.5)
- [CVE-2009-0737](https://insights.sbomify.com/CVE-2009-0737/): Cross-site scripting in mediawiki:mediawiki (low 2.6)
- [CVE-2009-0736](https://insights.sbomify.com/CVE-2009-0736/): Cross-site scripting in simon brown:pebble (medium 4.3)
- [CVE-2009-0735](https://insights.sbomify.com/CVE-2009-0735/): Path traversal in papoo:papoo (medium 5.1)
- [CVE-2009-0734](https://insights.sbomify.com/CVE-2009-0734/): Memory corruption in nokia:nokia pc suite (critical 9.3)
- [CVE-2009-0733](https://insights.sbomify.com/CVE-2009-0733/): Memory corruption in gimp:gimp (critical 9.3)
- [CVE-2009-0732](https://insights.sbomify.com/CVE-2009-0732/): Information disclosure in lingx:downloadcenter (medium 5.0)
- [CVE-2009-0731](https://insights.sbomify.com/CVE-2009-0731/): Path traversal in freearcadescript:free arcade script (critical 9.3)
- [CVE-2009-0730](https://insights.sbomify.com/CVE-2009-0730/): SQL injection in gigcalendar:com gigcalendar (medium 6.8)
- [CVE-2009-0729](https://insights.sbomify.com/CVE-2009-0729/): Path traversal in lingx:page engine cms (medium 6.8)
- [CVE-2009-0728](https://insights.sbomify.com/CVE-2009-0728/): SQL injection in maxdev:my egallery (high 7.5)
- [CVE-2009-0727](https://insights.sbomify.com/CVE-2009-0727/): SQL injection in tony iha kazungu:taifajobs (high 7.5)
- [CVE-2009-0726](https://insights.sbomify.com/CVE-2009-0726/): SQL injection in gigcalendar:com gigcalendar (high 7.5)
- [CVE-2009-0723](https://insights.sbomify.com/CVE-2009-0723/): Integer overflow in gimp:gimp (critical 9.3)
- [CVE-2009-0722](https://insights.sbomify.com/CVE-2009-0722/): Path traversal in potato-scripts:potato news (high 7.5)
- [CVE-2009-0721](https://insights.sbomify.com/CVE-2009-0721/): Other in hp:remote graphics software (critical 10.0)
- [CVE-2009-0720](https://insights.sbomify.com/CVE-2009-0720/): Code injection in hp:openview network node manager (critical 10.0)
- [CVE-2009-0719](https://insights.sbomify.com/CVE-2009-0719/): Other in hp:hp-ux (medium 6.0)
- [CVE-2009-0718](https://insights.sbomify.com/CVE-2009-0718/): Other in hp:storageworks storage mirroring (critical 10.0)
- [CVE-2009-0717](https://insights.sbomify.com/CVE-2009-0717/): Denial of service in hp:storageworks storage mirroring (medium 5.0)
- [CVE-2009-0716](https://insights.sbomify.com/CVE-2009-0716/): Other in hp:storageworks storage mirroring (high 7.5)
- [CVE-2009-0715](https://insights.sbomify.com/CVE-2009-0715/): Privilege escalation in hp:storage essentials (medium 6.5)
- [CVE-2009-0714](https://insights.sbomify.com/CVE-2009-0714/): Memory corruption in hp:data protector express (high 7.2)
- [CVE-2009-0713](https://insights.sbomify.com/CVE-2009-0713/): Information disclosure in hp:systems insight manager (medium 5.0)
- [CVE-2009-0712](https://insights.sbomify.com/CVE-2009-0712/): Privilege escalation in hp:wmi mapper (high 7.2)
- [CVE-2009-0711](https://insights.sbomify.com/CVE-2009-0711/): SQL injection in vlad alexa mancini:phpfootball (medium 5.0)
- [CVE-2009-0710](https://insights.sbomify.com/CVE-2009-0710/): Cross-site scripting in vlad alexa mancini:phpfootball (medium 4.3)
- [CVE-2009-0709](https://insights.sbomify.com/CVE-2009-0709/): SQL injection in vlad alexa mancini:phpfootball (high 7.5)
- [CVE-2009-0708](https://insights.sbomify.com/CVE-2009-0708/): Cross-site request forgery in semanticscuttle:semanticscuttle (medium 6.8)
- [CVE-2009-0707](https://insights.sbomify.com/CVE-2009-0707/): SQL injection in powerscripts:powerclan (high 7.5)
- [CVE-2009-0706](https://insights.sbomify.com/CVE-2009-0706/): SQL injection in simple-review:com simple review (high 7.5)
- [CVE-2009-0705](https://insights.sbomify.com/CVE-2009-0705/): SQL injection in powerscripts:powernews (medium 6.8)
- [CVE-2009-0704](https://insights.sbomify.com/CVE-2009-0704/): SQL injection in webmastersite:wsn guest (high 7.5)
- [CVE-2009-0703](https://insights.sbomify.com/CVE-2009-0703/): SQL injection in aspthai.net:aspthai.net webboard (high 7.5)
- [CVE-2009-0702](https://insights.sbomify.com/CVE-2009-0702/): SQL injection in phoca:com phocadocumentation (high 7.5)
- [CVE-2009-0701](https://insights.sbomify.com/CVE-2009-0701/): Code injection in cybershade:cybershadecms (medium 6.8)
- [CVE-2009-0700](https://insights.sbomify.com/CVE-2009-0700/): Missing authorization in plunet:business manager (medium 4.0)
- [CVE-2009-0699](https://insights.sbomify.com/CVE-2009-0699/): Cross-site scripting in plunet:business manager (low 3.5)
- [CVE-2009-0698](https://insights.sbomify.com/CVE-2009-0698/): Integer overflow in xine:xine-lib (high 7.5)
- [CVE-2009-0696](https://insights.sbomify.com/CVE-2009-0696/): Denial of service in isc:bind (medium 4.3)
- [CVE-2009-0695](https://insights.sbomify.com/CVE-2009-0695/): Missing authorization in dell:wyse device manager (high 7.5)
- [CVE-2009-0693](https://insights.sbomify.com/CVE-2009-0693/): Memory corruption in dell:wyse device manager (high 7.5)
- [CVE-2009-0692](https://insights.sbomify.com/CVE-2009-0692/): Memory corruption in isc:dhcp (critical 10.0)
- [CVE-2009-0691](https://insights.sbomify.com/CVE-2009-0691/): Memory corruption in foxitsoftware:foxit reader (critical 9.3)
- [CVE-2009-0690](https://insights.sbomify.com/CVE-2009-0690/): Memory corruption in foxitsoftware:foxit reader (critical 9.3)
- [CVE-2009-0689](https://insights.sbomify.com/CVE-2009-0689/): Memory corruption in freebsd:freebsd (medium 6.8)
- [CVE-2009-0688](https://insights.sbomify.com/CVE-2009-0688/): Memory corruption in carnegie mellon university:cyrus-sasl (high 7.5)
- [CVE-2009-0687](https://insights.sbomify.com/CVE-2009-0687/): Null dereference in midnightbsd:midnightbsd (high 7.8)
- [CVE-2009-0686](https://insights.sbomify.com/CVE-2009-0686/): Memory corruption in trendmicro:internet security (high 7.2)
- [CVE-2009-0682](https://insights.sbomify.com/CVE-2009-0682/): Denial of service in ca:internet security suite (low 2.1)
- [CVE-2009-0681](https://insights.sbomify.com/CVE-2009-0681/): Memory corruption in pgp:desktop (high 7.2)
- [CVE-2009-0680](https://insights.sbomify.com/CVE-2009-0680/): Path traversal in netgear:ssl312 (high 7.8)
- [CVE-2009-0679](https://insights.sbomify.com/CVE-2009-0679/): Cross-site scripting in ravenphpscripts:ravennuke (medium 4.3)
- [CVE-2009-0678](https://insights.sbomify.com/CVE-2009-0678/): Information disclosure in ravenphpscripts:ravennuke (medium 5.0)
- [CVE-2009-0677](https://insights.sbomify.com/CVE-2009-0677/): Code injection in ravenphpscripts:ravennuke (medium 6.5)
- [CVE-2009-0676](https://insights.sbomify.com/CVE-2009-0676/): Information disclosure in linux:linux kernel (low 2.1)
- [CVE-2009-0675](https://insights.sbomify.com/CVE-2009-0675/): Missing authorization in linux:linux kernel (low 2.1)
- [CVE-2009-0674](https://insights.sbomify.com/CVE-2009-0674/): Information disclosure in ravenphpscripts:ravennuke (medium 6.0)
- [CVE-2009-0673](https://insights.sbomify.com/CVE-2009-0673/): Code injection in ravenphpscripts:ravennuke (medium 6.5)
- [CVE-2009-0672](https://insights.sbomify.com/CVE-2009-0672/): SQL injection in ravenphpscripts:ravennuke (medium 6.5)
- [CVE-2009-0669](https://insights.sbomify.com/CVE-2009-0669/): Zope Object Database (ZODB) Authentication bypass in ZEO storage servers (high 7.5)
- [CVE-2009-0668](https://insights.sbomify.com/CVE-2009-0668/): Zope Object Database (ZODB) vulnerable to arbitrary Python code execution in ZEO storage servers (medium 6.5)
- [CVE-2009-0667](https://insights.sbomify.com/CVE-2009-0667/): Privilege escalation in ocsinventory-ng:ocs inventory ng (high 7.2)
- [CVE-2009-0664](https://insights.sbomify.com/CVE-2009-0664/): Cross-site scripting in mahara:mahara (medium 4.3)
- [CVE-2009-0663](https://insights.sbomify.com/CVE-2009-0663/): Memory corruption in cmu:dbd\ (high 7.5)
- [CVE-2009-0662](https://insights.sbomify.com/CVE-2009-0662/): Moderate severity vulnerability that affects Products.PlonePAS (medium 6.0)
- [CVE-2009-0661](https://insights.sbomify.com/CVE-2009-0661/): Memory corruption in flashtux:weechat (medium 5.0)
- [CVE-2009-0660](https://insights.sbomify.com/CVE-2009-0660/): Cross-site scripting in mahara:mahara (medium 4.3)
- [CVE-2009-0659](https://insights.sbomify.com/CVE-2009-0659/): Memory corruption in tptest:tptest (medium 5.0)
- [CVE-2009-0658](https://insights.sbomify.com/CVE-2009-0658/): Memory corruption in adobe:acrobat (high 7.8)
- [CVE-2009-0657](https://insights.sbomify.com/CVE-2009-0657/): Auth bypass in toshiba:face recognition (medium 6.9)
- [CVE-2009-0656](https://insights.sbomify.com/CVE-2009-0656/): Auth bypass in asus:smartlogon (medium 6.9)
- [CVE-2009-0655](https://insights.sbomify.com/CVE-2009-0655/): Auth bypass in lenovo:veriface (medium 6.9)
- [CVE-2009-0654](https://insights.sbomify.com/CVE-2009-0654/): Information disclosure in tor:tor (medium 5.1)
- [CVE-2009-0653](https://insights.sbomify.com/CVE-2009-0653/): Security feature bypass in openssl:openssl (high 7.5)
- [CVE-2009-0652](https://insights.sbomify.com/CVE-2009-0652/): Security feature bypass in mozilla:firefox (medium 5.8)
- [CVE-2009-0651](https://insights.sbomify.com/CVE-2009-0651/): Other in symantec:veritas netbackup server \/enterprise server (medium 6.5)
- [CVE-2009-0650](https://insights.sbomify.com/CVE-2009-0650/): Memory corruption in tptest:tptest (critical 10.0)
- [CVE-2009-0649](https://insights.sbomify.com/CVE-2009-0649/): Denial of service in nokia:n95 (high 7.8)
- [CVE-2009-0648](https://insights.sbomify.com/CVE-2009-0648/): Cross-site request forgery in falt4:falt4 extreme (medium 6.8)
- [CVE-2009-0647](https://insights.sbomify.com/CVE-2009-0647/): Denial of service in microsoft:windows live messenger (medium 5.0)
- [CVE-2009-0646](https://insights.sbomify.com/CVE-2009-0646/): SQL injection in 4site:4site cms (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2009/page/43/