# Vulnerabilities published in 2009 - [CVE-2009-4547](https://insights.sbomify.com/CVE-2009-4547/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4546](https://insights.sbomify.com/CVE-2009-4546/): Auth bypass in n/a (high 7.5) - [CVE-2009-4545](https://insights.sbomify.com/CVE-2009-4545/): Information disclosure in n/a (medium 5.0) - [CVE-2009-4544](https://insights.sbomify.com/CVE-2009-4544/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4543](https://insights.sbomify.com/CVE-2009-4543/): Code injection in n/a (medium 6.8) - [CVE-2009-4542](https://insights.sbomify.com/CVE-2009-4542/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4541](https://insights.sbomify.com/CVE-2009-4541/): Code injection in n/a (high 7.5) - [CVE-2009-4540](https://insights.sbomify.com/CVE-2009-4540/): SQL injection in n/a (medium 6.8) - [CVE-2009-4539](https://insights.sbomify.com/CVE-2009-4539/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4538](https://insights.sbomify.com/CVE-2009-4538/): Denial of service in n/a (critical 10.0) - [CVE-2009-4537](https://insights.sbomify.com/CVE-2009-4537/): Denial of service in n/a (high 7.8) - [CVE-2009-4536](https://insights.sbomify.com/CVE-2009-4536/): Security feature bypass in n/a (high 7.8) - [CVE-2009-4535](https://insights.sbomify.com/CVE-2009-4535/): Information disclosure in n/a (medium 5.0) - [CVE-2009-4534](https://insights.sbomify.com/CVE-2009-4534/): Open redirect in n/a (medium 4.3) - [CVE-2009-4533](https://insights.sbomify.com/CVE-2009-4533/): Information disclosure in n/a (medium 5.0) - [CVE-2009-4532](https://insights.sbomify.com/CVE-2009-4532/): Cross-site scripting in n/a (low 3.5) - [CVE-2009-4531](https://insights.sbomify.com/CVE-2009-4531/): Information disclosure in n/a (medium 5.0) - [CVE-2009-4530](https://insights.sbomify.com/CVE-2009-4530/): Information disclosure in n/a (medium 5.0) - [CVE-2009-4529](https://insights.sbomify.com/CVE-2009-4529/): Information disclosure in n/a (medium 5.0) - [CVE-2009-4528](https://insights.sbomify.com/CVE-2009-4528/): Missing authorization in n/a (medium 6.5) - [CVE-2009-4527](https://insights.sbomify.com/CVE-2009-4527/): Privilege escalation in n/a (medium 4.6) - [CVE-2009-4526](https://insights.sbomify.com/CVE-2009-4526/): Missing authorization in n/a (medium 5.0) - [CVE-2009-4525](https://insights.sbomify.com/CVE-2009-4525/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4524](https://insights.sbomify.com/CVE-2009-4524/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4523](https://insights.sbomify.com/CVE-2009-4523/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4522](https://insights.sbomify.com/CVE-2009-4522/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4521](https://insights.sbomify.com/CVE-2009-4521/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4520](https://insights.sbomify.com/CVE-2009-4520/): Missing authorization in n/a (medium 5.0) - [CVE-2009-4519](https://insights.sbomify.com/CVE-2009-4519/): Multiple unspecified vulnerabilities in Ortro before 1.3.4 have unknown impact and attack vectors. (critical 10.0) - [CVE-2009-4518](https://insights.sbomify.com/CVE-2009-4518/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4517](https://insights.sbomify.com/CVE-2009-4517/): Cross-site request forgery in n/a (medium 6.8) - [CVE-2009-4516](https://insights.sbomify.com/CVE-2009-4516/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4515](https://insights.sbomify.com/CVE-2009-4515/): Missing authorization in n/a (medium 5.0) - [CVE-2009-4514](https://insights.sbomify.com/CVE-2009-4514/): Cross-site scripting in n/a (low 3.5) - [CVE-2009-4513](https://insights.sbomify.com/CVE-2009-4513/): Cross-site scripting in n/a (low 3.5) - [CVE-2009-4512](https://insights.sbomify.com/CVE-2009-4512/): Path traversal in n/a (medium 5.1) - [CVE-2009-4511](https://insights.sbomify.com/CVE-2009-4511/): Path traversal in n/a (medium 4.0) - [CVE-2009-4510](https://insights.sbomify.com/CVE-2009-4510/): Weak cryptography in n/a (high 8.5) - [CVE-2009-4509](https://insights.sbomify.com/CVE-2009-4509/): Auth bypass in n/a (critical 10.0) - [CVE-2009-4505](https://insights.sbomify.com/CVE-2009-4505/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4502](https://insights.sbomify.com/CVE-2009-4502/): Command injection in n/a (critical 9.3) - [CVE-2009-4501](https://insights.sbomify.com/CVE-2009-4501/): Null dereference in n/a (medium 5.0) - [CVE-2009-4500](https://insights.sbomify.com/CVE-2009-4500/): Null dereference in n/a (medium 5.0) - [CVE-2009-4499](https://insights.sbomify.com/CVE-2009-4499/): SQL injection in n/a (high 7.5) - [CVE-2009-4498](https://insights.sbomify.com/CVE-2009-4498/): Command injection in n/a (medium 6.8) - [CVE-2009-4497](https://insights.sbomify.com/CVE-2009-4497/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4496](https://insights.sbomify.com/CVE-2009-4496/): Command injection in n/a (medium 5.0) - [CVE-2009-4495](https://insights.sbomify.com/CVE-2009-4495/): Command injection in n/a (medium 5.0) - [CVE-2009-4494](https://insights.sbomify.com/CVE-2009-4494/): Command injection in n/a (medium 5.0) - [CVE-2009-4493](https://insights.sbomify.com/CVE-2009-4493/): Command injection in n/a (medium 5.0) - [CVE-2009-4492](https://insights.sbomify.com/CVE-2009-4492/): WEBrick Improper Input Validation vulnerability (high 7.5) - [CVE-2009-4491](https://insights.sbomify.com/CVE-2009-4491/): Code injection in n/a (critical 9.8) - [CVE-2009-4490](https://insights.sbomify.com/CVE-2009-4490/): Command injection in n/a (medium 5.0) - [CVE-2009-4489](https://insights.sbomify.com/CVE-2009-4489/): Command injection in n/a (medium 5.0) - [CVE-2009-4488](https://insights.sbomify.com/CVE-2009-4488/): Other in n/a (critical 9.8) - [CVE-2009-4487](https://insights.sbomify.com/CVE-2009-4487/): Command injection in n/a (medium 6.8) - [CVE-2009-4486](https://insights.sbomify.com/CVE-2009-4486/): Memory corruption in n/a (high 7.5) - [CVE-2009-4484](https://insights.sbomify.com/CVE-2009-4484/): Memory corruption in n/a (high 7.5) - [CVE-2009-4483](https://insights.sbomify.com/CVE-2009-4483/): Denial of service in n/a (medium 5.0) - [CVE-2009-4482](https://insights.sbomify.com/CVE-2009-4482/): Memory corruption in n/a (critical 10.0) - [CVE-2009-4480](https://insights.sbomify.com/CVE-2009-4480/): Memory corruption in n/a (critical 9.3) - [CVE-2009-4479](https://insights.sbomify.com/CVE-2009-4479/): Memory corruption in n/a (high 7.8) - [CVE-2009-4478](https://insights.sbomify.com/CVE-2009-4478/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4477](https://insights.sbomify.com/CVE-2009-4477/): SQL injection in n/a (high 7.5) - [CVE-2009-4476](https://insights.sbomify.com/CVE-2009-4476/): Memory corruption in n/a (critical 10.0) - [CVE-2009-4475](https://insights.sbomify.com/CVE-2009-4475/): SQL injection in n/a (high 7.5) - [CVE-2009-4474](https://insights.sbomify.com/CVE-2009-4474/): SQL injection in n/a (high 7.5) - [CVE-2009-4473](https://insights.sbomify.com/CVE-2009-4473/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4472](https://insights.sbomify.com/CVE-2009-4472/): Code injection in n/a (high 7.5) - [CVE-2009-4471](https://insights.sbomify.com/CVE-2009-4471/): Code injection in n/a (high 7.5) - [CVE-2009-4470](https://insights.sbomify.com/CVE-2009-4470/): SQL injection vulnerability in boardrule.php in DVBBS 2.0 allows remote attackers to execute arbitrary SQL commands via the groupboardid parameter. (high 7.5) - [CVE-2009-4469](https://insights.sbomify.com/CVE-2009-4469/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4468](https://insights.sbomify.com/CVE-2009-4468/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4467](https://insights.sbomify.com/CVE-2009-4467/): Business logic in n/a (medium 4.0) - [CVE-2009-4466](https://insights.sbomify.com/CVE-2009-4466/): Information disclosure in n/a (medium 5.0) - [CVE-2009-4465](https://insights.sbomify.com/CVE-2009-4465/): Information disclosure in n/a (high 7.5) - [CVE-2009-4464](https://insights.sbomify.com/CVE-2009-4464/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4463](https://insights.sbomify.com/CVE-2009-4463/): Hardcoded credentials in n/a (critical 10.0) - [CVE-2009-4462](https://insights.sbomify.com/CVE-2009-4462/): Memory corruption in n/a (critical 10.0) - [CVE-2009-4461](https://insights.sbomify.com/CVE-2009-4461/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4460](https://insights.sbomify.com/CVE-2009-4460/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4459](https://insights.sbomify.com/CVE-2009-4459/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4458](https://insights.sbomify.com/CVE-2009-4458/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4457](https://insights.sbomify.com/CVE-2009-4457/): Other in n/a (high 7.5) - [CVE-2009-4456](https://insights.sbomify.com/CVE-2009-4456/): SQL injection in n/a (high 7.5) - [CVE-2009-4455](https://insights.sbomify.com/CVE-2009-4455/): Security feature bypass in n/a (medium 6.5) - [CVE-2009-4454](https://insights.sbomify.com/CVE-2009-4454/): Path traversal in n/a (low 3.3) - [CVE-2009-4453](https://insights.sbomify.com/CVE-2009-4453/): Path traversal in n/a (high 8.8) - [CVE-2009-4452](https://insights.sbomify.com/CVE-2009-4452/): Privilege escalation in n/a (medium 6.8) - [CVE-2009-4451](https://insights.sbomify.com/CVE-2009-4451/): File upload in n/a (medium 6.8) - [CVE-2009-4450](https://insights.sbomify.com/CVE-2009-4450/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4449](https://insights.sbomify.com/CVE-2009-4449/): Path traversal in n/a (medium 6.5) - [CVE-2009-4448](https://insights.sbomify.com/CVE-2009-4448/): Denial of service in n/a (medium 5.0) - [CVE-2009-4447](https://insights.sbomify.com/CVE-2009-4447/): Auth bypass in n/a (high 7.5) - [CVE-2009-4446](https://insights.sbomify.com/CVE-2009-4446/): Cross-site scripting in n/a (medium 4.3) - [CVE-2009-4445](https://insights.sbomify.com/CVE-2009-4445/): File upload in n/a (medium 6.0) - [CVE-2009-4444](https://insights.sbomify.com/CVE-2009-4444/): File upload in n/a (medium 6.0) - [CVE-2009-4443](https://insights.sbomify.com/CVE-2009-4443/): Denial of service in n/a (medium 4.3) - [CVE-2009-4442](https://insights.sbomify.com/CVE-2009-4442/): Denial of service in n/a (medium 5.0) - [CVE-2009-4441](https://insights.sbomify.com/CVE-2009-4441/): Denial of service in n/a (medium 5.0) --- From sbomify Insights: https://insights.sbomify.com/years/2009/page/7/