# Vulnerabilities published in 2009


- [CVE-2009-0341](https://insights.sbomify.com/CVE-2009-0341/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2009-0340](https://insights.sbomify.com/CVE-2009-0340/): Path traversal in quirm:simple php newsletter (medium 6.8)
- [CVE-2009-0339](https://insights.sbomify.com/CVE-2009-0339/): SQL injection in dmxready:blog manager (high 7.5)
- [CVE-2009-0338](https://insights.sbomify.com/CVE-2009-0338/): Cross-site scripting in dmxready:blog manager (medium 4.3)
- [CVE-2009-0337](https://insights.sbomify.com/CVE-2009-0337/): SQL injection in katywhitton:blogit\! (high 7.5)
- [CVE-2009-0336](https://insights.sbomify.com/CVE-2009-0336/): Information disclosure in katywhitton:blogit\! (medium 5.0)
- [CVE-2009-0335](https://insights.sbomify.com/CVE-2009-0335/): Cross-site scripting in katywhitton:blogit\! (medium 4.3)
- [CVE-2009-0334](https://insights.sbomify.com/CVE-2009-0334/): SQL injection in katywhitton:blogit\! (high 7.5)
- [CVE-2009-0333](https://insights.sbomify.com/CVE-2009-0333/): SQL injection in joomla:com waticketsystem (high 7.5)
- [CVE-2009-0332](https://insights.sbomify.com/CVE-2009-0332/): SQL injection in avbooklibrary:avbooklibrary (high 7.5)
- [CVE-2009-0331](https://insights.sbomify.com/CVE-2009-0331/): Path traversal in quirm:espg (high 7.8)
- [CVE-2009-0330](https://insights.sbomify.com/CVE-2009-0330/): Path traversal in wss-pro:scms (medium 6.8)
- [CVE-2009-0329](https://insights.sbomify.com/CVE-2009-0329/): SQL injection in joomla:com pccookbook (high 7.5)
- [CVE-2009-0328](https://insights.sbomify.com/CVE-2009-0328/): Information disclosure in robs-projects:digital sales ipn (medium 5.0)
- [CVE-2009-0327](https://insights.sbomify.com/CVE-2009-0327/): SQL injection in seraphimtech:free bible search php script (high 7.5)
- [CVE-2009-0326](https://insights.sbomify.com/CVE-2009-0326/): SQL injection in dark age cms:dark age cms (high 7.5)
- [CVE-2009-0325](https://insights.sbomify.com/CVE-2009-0325/): Path traversal in ninjadesigns:ninja blog (medium 4.3)
- [CVE-2009-0324](https://insights.sbomify.com/CVE-2009-0324/): SQL injection in bibciter:bibciter (high 7.5)
- [CVE-2009-0323](https://insights.sbomify.com/CVE-2009-0323/): Memory corruption in w3:amaya (critical 10.0)
- [CVE-2009-0322](https://insights.sbomify.com/CVE-2009-0322/): Denial of service in canonical:ubuntu linux (medium 4.9)
- [CVE-2009-0321](https://insights.sbomify.com/CVE-2009-0321/): Denial of service in apple:safari (medium 4.3)
- [CVE-2009-0320](https://insights.sbomify.com/CVE-2009-0320/): Information disclosure in microsoft:windows server 2003 (medium 4.0)
- [CVE-2009-0319](https://insights.sbomify.com/CVE-2009-0319/): Other in sun:opensolaris (medium 6.9)
- [CVE-2009-0318](https://insights.sbomify.com/CVE-2009-0318/): Code injection in gnome:gnumeric (medium 6.9)
- [CVE-2009-0317](https://insights.sbomify.com/CVE-2009-0317/): Code injection in gnome:nautilus-python (medium 6.9)
- [CVE-2009-0316](https://insights.sbomify.com/CVE-2009-0316/): Code injection in vim:vim (medium 6.9)
- [CVE-2009-0315](https://insights.sbomify.com/CVE-2009-0315/): Code injection in xchat:xchat (medium 6.9)
- [CVE-2009-0314](https://insights.sbomify.com/CVE-2009-0314/): Code injection in fedoraproject:fedora (medium 6.9)
- [CVE-2009-0313](https://insights.sbomify.com/CVE-2009-0313/): Race condition in kegel:winetricks (medium 6.9)
- [CVE-2009-0312](https://insights.sbomify.com/CVE-2009-0312/): MoinMoin Cross-site scripting (XSS) vulnerability in the antispam feature (medium 4.3)
- [CVE-2009-0311](https://insights.sbomify.com/CVE-2009-0311/): Memory corruption in emc:autostart (critical 10.0)
- [CVE-2009-0310](https://insights.sbomify.com/CVE-2009-0310/): Memory corruption in opensuse:opensuse (high 7.2)
- [CVE-2009-0307](https://insights.sbomify.com/CVE-2009-0307/): Cross-site scripting in rim:blackberry enterprise server (medium 4.3)
- [CVE-2009-0306](https://insights.sbomify.com/CVE-2009-0306/): Memory corruption in ibm:lotus notes intellisync (critical 9.3)
- [CVE-2009-0305](https://insights.sbomify.com/CVE-2009-0305/): Memory corruption in research in motion limited:blackberry application web loader (critical 9.3)
- [CVE-2009-0304](https://insights.sbomify.com/CVE-2009-0304/): Denial of service in sun:opensolaris (high 7.8)
- [CVE-2009-0303](https://insights.sbomify.com/CVE-2009-0303/): Cross-site scripting in webhelpdesk:web help desk (medium 4.3)
- [CVE-2009-0302](https://insights.sbomify.com/CVE-2009-0302/): SQL injection in php-nuke:downloads module (medium 4.6)
- [CVE-2009-0301](https://insights.sbomify.com/CVE-2009-0301/): Other in grid2000:flexcell grid control (medium 6.8)
- [CVE-2009-0299](https://insights.sbomify.com/CVE-2009-0299/): SQL injection in groonesworld:glinks (high 7.5)
- [CVE-2009-0298](https://insights.sbomify.com/CVE-2009-0298/): Memory corruption in mw6 technologies:barcode activex (critical 9.3)
- [CVE-2009-0297](https://insights.sbomify.com/CVE-2009-0297/): SQL injection in clicktech:clickauction (high 7.5)
- [CVE-2009-0296](https://insights.sbomify.com/CVE-2009-0296/): SQL injection in gempar:script toko online (high 7.5)
- [CVE-2009-0295](https://insights.sbomify.com/CVE-2009-0295/): SQL injection in itlpoll:itpoll (medium 6.8)
- [CVE-2009-0294](https://insights.sbomify.com/CVE-2009-0294/): Code injection in webmobo:wbnews (medium 6.8)
- [CVE-2009-0293](https://insights.sbomify.com/CVE-2009-0293/): SQL injection in wazzum:wazzum dating software (high 7.5)
- [CVE-2009-0292](https://insights.sbomify.com/CVE-2009-0292/): SQL injection in shop-inet:shop-inet (high 7.5)
- [CVE-2009-0291](https://insights.sbomify.com/CVE-2009-0291/): Path traversal in openx:openx (high 7.5)
- [CVE-2009-0290](https://insights.sbomify.com/CVE-2009-0290/): Path traversal in sir:gnuboard (medium 6.8)
- [CVE-2009-0289](https://insights.sbomify.com/CVE-2009-0289/): Denial of service in windows tftp utility:tftputil (medium 5.0)
- [CVE-2009-0288](https://insights.sbomify.com/CVE-2009-0288/): Path traversal in windows tftp utility:tftputil (medium 5.0)
- [CVE-2009-0287](https://insights.sbomify.com/CVE-2009-0287/): SQL injection in keep toolkit:keep toolkit (high 7.5)
- [CVE-2009-0286](https://insights.sbomify.com/CVE-2009-0286/): Path traversal in opengoo:opengoo (low 2.6)
- [CVE-2009-0285](https://insights.sbomify.com/CVE-2009-0285/): Cross-site scripting in bbsxp:bbsxp (medium 4.3)
- [CVE-2009-0284](https://insights.sbomify.com/CVE-2009-0284/): SQL injection in flaxweb:flax article manager (high 7.5)
- [CVE-2009-0283](https://insights.sbomify.com/CVE-2009-0283/): Cross-site scripting in aobosoft:oblog (medium 4.3)
- [CVE-2009-0282](https://insights.sbomify.com/CVE-2009-0282/): Integer overflow in ralinktech:rt73 (critical 9.3)
- [CVE-2009-0281](https://insights.sbomify.com/CVE-2009-0281/): SQL injection in warhound:walking club (high 7.5)
- [CVE-2009-0280](https://insights.sbomify.com/CVE-2009-0280/): Auth bypass in asp-project:asp-project (high 7.5)
- [CVE-2009-0279](https://insights.sbomify.com/CVE-2009-0279/): SQL injection in pardalcms:pardalcms (high 7.5)
- [CVE-2009-0278](https://insights.sbomify.com/CVE-2009-0278/): Information disclosure in sun:java system application server (medium 5.0)
- [CVE-2009-0277](https://insights.sbomify.com/CVE-2009-0277/): Denial of service in sun:opensolaris (high 7.8)
- [CVE-2009-0276](https://insights.sbomify.com/CVE-2009-0276/): Security feature bypass in google:chrome (medium 5.0)
- [CVE-2009-0275](https://insights.sbomify.com/CVE-2009-0275/): Code injection in ryneezy:phosheezy (medium 6.5)
- [CVE-2009-0274](https://insights.sbomify.com/CVE-2009-0274/): Information disclosure in novell:groupwise (medium 5.0)
- [CVE-2009-0273](https://insights.sbomify.com/CVE-2009-0273/): Cross-site scripting in novell:groupwise (medium 4.3)
- [CVE-2009-0272](https://insights.sbomify.com/CVE-2009-0272/): Cross-site request forgery in novell:groupwise (medium 6.8)
- [CVE-2009-0271](https://insights.sbomify.com/CVE-2009-0271/): Path traversal in fujitsu:systemcastwizard lite (medium 5.0)
- [CVE-2009-0270](https://insights.sbomify.com/CVE-2009-0270/): Memory corruption in fujitsu:systemcastwizard lite (critical 10.0)
- [CVE-2009-0269](https://insights.sbomify.com/CVE-2009-0269/): Memory corruption in canonical:ubuntu linux (medium 4.9)
- [CVE-2009-0268](https://insights.sbomify.com/CVE-2009-0268/): Race condition in sun:opensolaris (medium 4.9)
- [CVE-2009-0267](https://insights.sbomify.com/CVE-2009-0267/): Denial of service in sun:opensolaris (medium 5.0)
- [CVE-2009-0266](https://insights.sbomify.com/CVE-2009-0266/): Memory corruption in trilogic:media player (critical 9.3)
- [CVE-2009-0265](https://insights.sbomify.com/CVE-2009-0265/): Security feature bypass in isc:bind (high 7.5)
- [CVE-2009-0264](https://insights.sbomify.com/CVE-2009-0264/): Memory corruption in fujitsu:systemcastwizard lite (critical 10.0)
- [CVE-2009-0263](https://insights.sbomify.com/CVE-2009-0263/): Memory corruption in nullsoft:winamp (critical 10.0)
- [CVE-2009-0262](https://insights.sbomify.com/CVE-2009-0262/): Memory corruption in trilogic:media player (critical 9.3)
- [CVE-2009-0261](https://insights.sbomify.com/CVE-2009-0261/): Memory corruption in effectmatrix:total video player (critical 9.3)
- [CVE-2009-0260](https://insights.sbomify.com/CVE-2009-0260/): MoinMoin Multiple cross-site scripting (XSS) vulnerabilities (medium 4.3)
- [CVE-2009-0259](https://insights.sbomify.com/CVE-2009-0259/): Memory corruption in openoffice:openoffice.org (critical 9.3)
- [CVE-2009-0258](https://insights.sbomify.com/CVE-2009-0258/): Indexed Search Engine for TYPO3 Command Execution via Metacharacter Injection (critical 10.0)
- [CVE-2009-0257](https://insights.sbomify.com/CVE-2009-0257/): Cross-site scripting in typo3:typo3 (medium 4.3)
- [CVE-2009-0256](https://insights.sbomify.com/CVE-2009-0256/): Authentication library in TYPO3 vulnerable to session fixation (high 7.5)
- [CVE-2009-0255](https://insights.sbomify.com/CVE-2009-0255/): Weak cryptography in debian:debian linux (high 7.5)
- [CVE-2009-0254](https://insights.sbomify.com/CVE-2009-0254/): Memory corruption in easyhdr:easyhdr (critical 9.3)
- [CVE-2009-0253](https://insights.sbomify.com/CVE-2009-0253/): Security feature bypass in mozilla:firefox (medium 6.8)
- [CVE-2009-0252](https://insights.sbomify.com/CVE-2009-0252/): SQL injection in enthrallweb:ereservations (high 7.5)
- [CVE-2009-0251](https://insights.sbomify.com/CVE-2009-0251/): Code injection in ryneezy:phosheezy (medium 6.5)
- [CVE-2009-0250](https://insights.sbomify.com/CVE-2009-0250/): Information disclosure in ryneezy:phosheezy (medium 5.0)
- [CVE-2009-0249](https://insights.sbomify.com/CVE-2009-0249/): Information disclosure in katywhitton:rankem (medium 5.0)
- [CVE-2009-0248](https://insights.sbomify.com/CVE-2009-0248/): Cross-site scripting in katywhitton:rankem (medium 4.3)
- [CVE-2009-0247](https://insights.sbomify.com/CVE-2009-0247/): Cross-site scripting in 53kf:web im 2009 (medium 4.3)
- [CVE-2009-0246](https://insights.sbomify.com/CVE-2009-0246/): Memory corruption in easyhdr:easyhdr (critical 9.3)
- [CVE-2009-0245](https://insights.sbomify.com/CVE-2009-0245/): Cross-site scripting in usagi:mynets (medium 4.3)
- [CVE-2009-0244](https://insights.sbomify.com/CVE-2009-0244/): Path traversal in microsoft:windows mobile (high 8.8)
- [CVE-2009-0243](https://insights.sbomify.com/CVE-2009-0243/): Security feature bypass in microsoft:windows 2000 (high 7.2)
- [CVE-2009-0241](https://insights.sbomify.com/CVE-2009-0241/): Memory corruption in ganglia:ganglia (high 7.5)
- [CVE-2009-0240](https://insights.sbomify.com/CVE-2009-0240/): Missing authorization in tigris:websvn (low 3.5)
- [CVE-2009-0239](https://insights.sbomify.com/CVE-2009-0239/): Cross-site scripting in microsoft:windows search (medium 4.3)
- [CVE-2009-0238](https://insights.sbomify.com/CVE-2009-0238/): Microsoft Office Remote Code Execution (high 8.8, exploited in the wild)

---
From sbomify Insights: https://insights.sbomify.com/years/2009/page/47/