# Vulnerabilities published in 2009


- [CVE-2009-0441](https://insights.sbomify.com/CVE-2009-0441/): Code injection in technote:technote (medium 6.8)
- [CVE-2009-0440](https://insights.sbomify.com/CVE-2009-0440/): Security feature bypass in ibm:websphere partner gateway (medium 6.5)
- [CVE-2009-0439](https://insights.sbomify.com/CVE-2009-0439/): Privilege escalation in ibm:websphere mq (high 7.2)
- [CVE-2009-0438](https://insights.sbomify.com/CVE-2009-0438/): Auth bypass in ibm:websphere application server (medium 5.0)
- [CVE-2009-0437](https://insights.sbomify.com/CVE-2009-0437/): Information disclosure in ibm:websphere application server (low 1.9)
- [CVE-2009-0436](https://insights.sbomify.com/CVE-2009-0436/): Misconfiguration in ibm:websphere application server (high 7.2)
- [CVE-2009-0435](https://insights.sbomify.com/CVE-2009-0435/): Denial of service in ibm:websphere application server (medium 5.0)
- [CVE-2009-0434](https://insights.sbomify.com/CVE-2009-0434/): Information disclosure in ibm:websphere application server (low 1.9)
- [CVE-2009-0433](https://insights.sbomify.com/CVE-2009-0433/): Denial of service in ibm:websphere application server (low 2.6)
- [CVE-2009-0432](https://insights.sbomify.com/CVE-2009-0432/): Misconfiguration in ibm:websphere application server (medium 5.0)
- [CVE-2009-0431](https://insights.sbomify.com/CVE-2009-0431/): SQL injection in codefixer:linkspro (high 7.5)
- [CVE-2009-0430](https://insights.sbomify.com/CVE-2009-0430/): Cross-site scripting in activewebsoftwares:active bids (medium 4.3)
- [CVE-2009-0429](https://insights.sbomify.com/CVE-2009-0429/): SQL injection in activewebsoftwares:active bids (high 7.5)
- [CVE-2009-0428](https://insights.sbomify.com/CVE-2009-0428/): SQL injection in dmxready:secure document library (high 7.5)
- [CVE-2009-0427](https://insights.sbomify.com/CVE-2009-0427/): SQL injection in dmxready:member directory manager (high 7.5)
- [CVE-2009-0426](https://insights.sbomify.com/CVE-2009-0426/): SQL injection in dmxready:classified listings manager (high 7.5)
- [CVE-2009-0425](https://insights.sbomify.com/CVE-2009-0425/): SQL injection in blue eye cms:blue eye cms (high 7.5)
- [CVE-2009-0424](https://insights.sbomify.com/CVE-2009-0424/): Cross-site scripting in an guestbook:an guestbook (medium 4.3)
- [CVE-2009-0423](https://insights.sbomify.com/CVE-2009-0423/): Path traversal in kevin walker:php photo album (high 7.5)
- [CVE-2009-0422](https://insights.sbomify.com/CVE-2009-0422/): Code injection in tincan:phplist (high 7.5)
- [CVE-2009-0421](https://insights.sbomify.com/CVE-2009-0421/): SQL injection in joomla:com eventing (high 7.5)
- [CVE-2009-0420](https://insights.sbomify.com/CVE-2009-0420/): SQL injection in rd-media:rd-autos (high 7.5)
- [CVE-2009-0419](https://insights.sbomify.com/CVE-2009-0419/): Security feature bypass in microsoft:xml core services (medium 5.0)
- [CVE-2009-0418](https://insights.sbomify.com/CVE-2009-0418/): Other in hp:hp-ux (critical 9.3)
- [CVE-2009-0417](https://insights.sbomify.com/CVE-2009-0417/): Cross-site scripting in agavi:agavi (medium 4.3)
- [CVE-2009-0416](https://insights.sbomify.com/CVE-2009-0416/): Race condition in standards based linux instrumentation:sblim-sfcb (medium 6.9)
- [CVE-2009-0415](https://insights.sbomify.com/CVE-2009-0415/): Code injection in monkey:trickle (low 3.7)
- [CVE-2009-0414](https://insights.sbomify.com/CVE-2009-0414/): Memory corruption in tor:tor (critical 10.0)
- [CVE-2009-0413](https://insights.sbomify.com/CVE-2009-0413/): Cross-site scripting in roundcube:webmail (medium 4.3)
- [CVE-2009-0412](https://insights.sbomify.com/CVE-2009-0412/): Auth bypass in interspire:shopping cart (high 7.5)
- [CVE-2009-0411](https://insights.sbomify.com/CVE-2009-0411/): Information disclosure in google:chrome (medium 5.0)
- [CVE-2009-0410](https://insights.sbomify.com/CVE-2009-0410/): Memory corruption in novell:groupwise (critical 10.0)
- [CVE-2009-0409](https://insights.sbomify.com/CVE-2009-0409/): SQL injection in mzbservices:max.blog (medium 6.8)
- [CVE-2009-0408](https://insights.sbomify.com/CVE-2009-0408/): Cross-site request forgery in oscommerce:oscommerce (medium 6.0)
- [CVE-2009-0407](https://insights.sbomify.com/CVE-2009-0407/): SQL injection in humayun shabbir:php-cms project (high 7.5)
- [CVE-2009-0406](https://insights.sbomify.com/CVE-2009-0406/): SQL injection in community cms:community cms (high 7.5)
- [CVE-2009-0405](https://insights.sbomify.com/CVE-2009-0405/): SQL injection in smartsitecms:smartsitecms (high 7.5)
- [CVE-2009-0404](https://insights.sbomify.com/CVE-2009-0404/): Cross-site scripting in bioinformatics:htmlawed (medium 4.3)
- [CVE-2009-0403](https://insights.sbomify.com/CVE-2009-0403/): SQL injection in chipmunk scripts:chipmunk blogger (high 7.5)
- [CVE-2009-0402](https://insights.sbomify.com/CVE-2009-0402/): SQL injection in gplhost:domain technologie control (high 7.5)
- [CVE-2009-0401](https://insights.sbomify.com/CVE-2009-0401/): SQL injection in ephpscripts:e-php cms (high 7.5)
- [CVE-2009-0400](https://insights.sbomify.com/CVE-2009-0400/): SQL injection in socialengine:socialengine (medium 6.8)
- [CVE-2009-0399](https://insights.sbomify.com/CVE-2009-0399/): Missing authorization in chipmunk scripts:chipmunk blogger (high 7.5)
- [CVE-2009-0398](https://insights.sbomify.com/CVE-2009-0398/): Memory corruption in gstreamer:plug-ins (critical 9.3)
- [CVE-2009-0397](https://insights.sbomify.com/CVE-2009-0397/): Memory corruption in gstreamer:good plug-ins (critical 9.3)
- [CVE-2009-0396](https://insights.sbomify.com/CVE-2009-0396/): Denial of service in sony ericsson:k530i (high 7.8)
- [CVE-2009-0395](https://insights.sbomify.com/CVE-2009-0395/): SQL injection in netartmedia:car portal (high 7.5)
- [CVE-2009-0394](https://insights.sbomify.com/CVE-2009-0394/): SQL injection in ple cms:ple cms (high 7.5)
- [CVE-2009-0393](https://insights.sbomify.com/CVE-2009-0393/): Cross-site scripting in motorola:cpei300 (low 3.5)
- [CVE-2009-0392](https://insights.sbomify.com/CVE-2009-0392/): Path traversal in motorola:cpei300 (medium 6.8)
- [CVE-2009-0391](https://insights.sbomify.com/CVE-2009-0391/): Information disclosure in ibm:websphere application server (high 7.8)
- [CVE-2009-0390](https://insights.sbomify.com/CVE-2009-0390/): Command injection in enomaly:elastic computing platform (high 7.2)
- [CVE-2009-0389](https://insights.sbomify.com/CVE-2009-0389/): Code injection in eztools-software:web on windows activex (critical 9.3)
- [CVE-2009-0388](https://insights.sbomify.com/CVE-2009-0388/): Integer overflow in tightvnc:tightvnc (critical 10.0)
- [CVE-2009-0387](https://insights.sbomify.com/CVE-2009-0387/): Memory corruption in gstreamer:good plug-ins (critical 9.3)
- [CVE-2009-0386](https://insights.sbomify.com/CVE-2009-0386/): Memory corruption in gstreamer:good plug-ins (critical 9.3)
- [CVE-2009-0385](https://insights.sbomify.com/CVE-2009-0385/): Integer overflow in canonical:ubuntu linux (critical 9.3)
- [CVE-2009-0384](https://insights.sbomify.com/CVE-2009-0384/): SQL injection in adam tomecek:ownrs (medium 6.8)
- [CVE-2009-0383](https://insights.sbomify.com/CVE-2009-0383/): Missing authorization in mzbservices:max.blog (medium 6.4)
- [CVE-2009-0382](https://insights.sbomify.com/CVE-2009-0382/): Missing authorization in drupal:internationalization (medium 4.3)
- [CVE-2009-0381](https://insights.sbomify.com/CVE-2009-0381/): SQL injection in bazaarbuilder:ecommerce shopping cart (high 7.5)
- [CVE-2009-0380](https://insights.sbomify.com/CVE-2009-0380/): SQL injection in sigsiu.net:sobi2 (high 7.5)
- [CVE-2009-0379](https://insights.sbomify.com/CVE-2009-0379/): SQL injection in joomla:com pcchess (high 7.5)
- [CVE-2009-0378](https://insights.sbomify.com/CVE-2009-0378/): Cross-site scripting in joomla:com beamospetition (medium 4.3)
- [CVE-2009-0377](https://insights.sbomify.com/CVE-2009-0377/): SQL injection in joomla:com beamospetition (high 7.5)
- [CVE-2009-0376](https://insights.sbomify.com/CVE-2009-0376/): Memory corruption in realnetworks:realplayer (critical 9.3)
- [CVE-2009-0375](https://insights.sbomify.com/CVE-2009-0375/): Memory corruption in realnetworks:realplayer (critical 9.3)
- [CVE-2009-0374](https://insights.sbomify.com/CVE-2009-0374/): Other in google:chrome (medium 4.3)
- [CVE-2009-0373](https://insights.sbomify.com/CVE-2009-0373/): SQL injection in elearningforce:flash magazine deluxe (high 7.5)
- [CVE-2009-0372](https://insights.sbomify.com/CVE-2009-0372/): File upload in memht:memht portal (medium 6.5)
- [CVE-2009-0371](https://insights.sbomify.com/CVE-2009-0371/): Path traversal in sitexs cms:sitexs cms (medium 6.8)
- [CVE-2009-0370](https://insights.sbomify.com/CVE-2009-0370/): Other in ibm:aix (high 7.2)
- [CVE-2009-0369](https://insights.sbomify.com/CVE-2009-0369/): Other in microsoft:internet explorer (medium 4.3)
- [CVE-2009-0368](https://insights.sbomify.com/CVE-2009-0368/): Security feature bypass in opensc-project:opensc (low 2.1)
- [CVE-2009-0367](https://insights.sbomify.com/CVE-2009-0367/): Code injection in wesnoth:wesnoth (critical 9.3)
- [CVE-2009-0366](https://insights.sbomify.com/CVE-2009-0366/): Denial of service in wesnoth:wesnoth (medium 4.3)
- [CVE-2009-0365](https://insights.sbomify.com/CVE-2009-0365/): Misconfiguration in ubuntu:ubuntu linux (medium 4.6)
- [CVE-2009-0364](https://insights.sbomify.com/CVE-2009-0364/): Memory corruption in citadel:webcit (high 7.5)
- [CVE-2009-0363](https://insights.sbomify.com/CVE-2009-0363/): Memory corruption in barnowl:barnowl (high 7.5)
- [CVE-2009-0362](https://insights.sbomify.com/CVE-2009-0362/): Denial of service in fail2ban:fail2ban (medium 4.0)
- [CVE-2009-0361](https://insights.sbomify.com/CVE-2009-0361/): Privilege escalation in eyrie:pam-krb5 (medium 4.6)
- [CVE-2009-0360](https://insights.sbomify.com/CVE-2009-0360/): Privilege escalation in eyrie:pam-krb5 (medium 6.2)
- [CVE-2009-0359](https://insights.sbomify.com/CVE-2009-0359/): Cross-site scripting in nongnu:samizdat (low 3.5)
- [CVE-2009-0358](https://insights.sbomify.com/CVE-2009-0358/): Information disclosure in mozilla:firefox (low 3.3)
- [CVE-2009-0357](https://insights.sbomify.com/CVE-2009-0357/): Security feature bypass in mozilla:firefox (medium 5.0)
- [CVE-2009-0356](https://insights.sbomify.com/CVE-2009-0356/): Security feature bypass in mozilla:firefox (medium 5.1)
- [CVE-2009-0355](https://insights.sbomify.com/CVE-2009-0355/): Information disclosure in mozilla:firefox (medium 5.4)
- [CVE-2009-0354](https://insights.sbomify.com/CVE-2009-0354/): Security feature bypass in mozilla:firefox (low 2.6)
- [CVE-2009-0353](https://insights.sbomify.com/CVE-2009-0353/): Memory corruption in mozilla:firefox (critical 10.0)
- [CVE-2009-0352](https://insights.sbomify.com/CVE-2009-0352/): Memory corruption in mozilla:firefox (critical 10.0)
- [CVE-2009-0351](https://insights.sbomify.com/CVE-2009-0351/): Memory corruption in wftpserver:winftp ftp server (critical 9.0)
- [CVE-2009-0350](https://insights.sbomify.com/CVE-2009-0350/): Memory corruption in merak:media player (critical 9.3)
- [CVE-2009-0349](https://insights.sbomify.com/CVE-2009-0349/): Memory corruption in ftpshell:ftpshell server (critical 9.3)
- [CVE-2009-0348](https://insights.sbomify.com/CVE-2009-0348/): Information disclosure in sun:java system access manager (medium 5.0)
- [CVE-2009-0347](https://insights.sbomify.com/CVE-2009-0347/): Open redirect in autonomy:ultraseek (medium 5.8)
- [CVE-2009-0346](https://insights.sbomify.com/CVE-2009-0346/): Denial of service in sun:opensolaris (medium 4.9)
- [CVE-2009-0345](https://insights.sbomify.com/CVE-2009-0345/): Auth bypass in sun:fire x2100 m2 (critical 10.0)
- [CVE-2009-0344](https://insights.sbomify.com/CVE-2009-0344/): Auth bypass in sun:fire x2100 m2 (critical 10.0)
- [CVE-2009-0343](https://insights.sbomify.com/CVE-2009-0343/): Security feature bypass in niels provos:systrace (high 7.2)
- [CVE-2009-0342](https://insights.sbomify.com/CVE-2009-0342/): Security feature bypass in provos:systrace (high 7.2)

---
From sbomify Insights: https://insights.sbomify.com/years/2009/page/46/