Search
37,428 CVEs · Critical severity
CVEs (37,428, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 151–175 of 37,428 (capped at 500)
| CVE ID ↑ | Severity | Patch | CVSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2009-20005 | CRITICAL | — | 2025-09-16 | A stack-based buffer overflow exists in the UtilConfigHome.csp endpoint of InterSystems Caché 2009.1. The vulnerability is triggered by sending a specially crafted HTTP GET… | |
| CVE-2009-20006 | CRITICAL | — | 2025-09-16 | osCommerce versions up to and including 2.2 RC2a contain a vulnerability in its administrative file manager utility (admin/file_manager.php). The interface allows file uplo… | |
| CVE-2009-20007 | CRITICAL | — | 2025-09-16 | Talkative IRC v0.4.4.16 is vulnerable to a stack-based buffer overflow when processing specially crafted response strings sent to a connected client. An attacker can exploi… | |
| CVE-2009-20009 | CRITICAL | — | 2025-08-30 | Belkin Bulldog Plus version 4.0.2 build 1219 contains a stack-based buffer overflow vulnerability in its web service authentication handler. When a specially crafted HTTP r… | |
| CVE-2009-20010 | CRITICAL | — | 2025-08-30 | Dogfood CRM version 2.0.10 contains a remote command execution vulnerability in the spell.php script used by its mail subsystem. The vulnerability arises from unsanitized u… | |
| CVE-2009-20011 | CRITICAL | — | 2025-08-30 | ContentKeeper Web Appliance (now maintained by Impero Software) versions prior to 125.10 are vulnerable to remote command execution due to insecure handling of file uploads… | |
| CVE-2009-2168 | CRITICAL | Patched | 9.8 | 2009-06-22 | cpanel/login.php in EgyPlus 7ammel (aka 7ml) 1.0.1 and earlier sends a redirect to the web browser but does not exit when the supplied credentials are incorrect, which allo… |
| CVE-2009-2367 | CRITICAL | 9.8 | 2009-07-08 | cgi-bin/makecgi-pro in Iomega StorCenter Pro generates predictable session IDs, which allows remote attackers to hijack active sessions and gain privileges via brute force … | |
| CVE-2009-2382 | CRITICAL | 9.8 | 2009-07-08 | admin.php in phpMyBlockchecker 1.0.0055 allows remote attackers to bypass authentication and gain administrative access by setting the PHPMYBCAdmin cookie to LOGGEDIN. | |
| CVE-2009-2422 | CRITICAL | Patched | 9.8 | 2009-07-10 | The example code for the digest authentication functionality (http_authentication.rb) in Ruby on Rails before 2.3.3 defines an authenticate_or_request_with_http_digest bloc… |
| CVE-2009-2494 | CRITICAL | 9.8 | 2009-08-12 | The Active Template Library (ATL) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attac… | |
| CVE-2009-2512 | CRITICAL | 9.8 | 2009-11-11 | The Web Services on Devices API (WSDAPI) in Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 does not properly process the headers of WSD messages, which allow… | |
| CVE-2009-3421 | CRITICAL | 9.8 | 2009-09-25 | login.php in Zenas PaoBacheca Guestbook 2.1, when register_globals is enabled, allows remote attackers to bypass authentication and gain administrative access by setting th… | |
| CVE-2009-3555 | CRITICAL | Patched | 9.8 | 2009-11-09 | The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and … |
| CVE-2009-3616 | CRITICAL | Patched | 9.9 | 2009-10-23 | Multiple use-after-free vulnerabilities in vnc.c in the VNC server in QEMU 0.10.6 and earlier might allow guest OS users to execute arbitrary code on the host OS by establi… |
| CVE-2009-3887 | CRITICAL | 9.8 | 2019-10-29 | ytnef has directory traversal | |
| CVE-2009-4013 | CRITICAL | Patched | 9.8 | 2010-02-02 | Multiple directory traversal vulnerabilities in Lintian 1.23.x through 1.23.28, 1.24.x through 1.24.2.1, and 2.x before 2.3.2 allow remote attackers to overwrite arbitrary … |
| CVE-2009-4488 | CRITICAL | 9.8 | 2010-01-13 | Varnish 2.0.6 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbi… | |
| CVE-2009-4491 | CRITICAL | 9.8 | 2010-01-13 | thttpd 2.25b0 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbi… | |
| CVE-2009-4581 | CRITICAL | Patched | 9.8 | 2010-01-06 | Directory traversal vulnerability in modules/admincp.php in RoseOnlineCMS 3 B1 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execut… |
| CVE-2009-4899 | CRITICAL | 9.8 | 2019-10-28 | pixelpost 1.7.1 has SQL injection | |
| CVE-2009-5041 | CRITICAL | Patched | 9.8 | 2019-10-31 | overkill has buffer overflow via long player names that can corrupt data on the server machine |
| CVE-2009-5042 | CRITICAL | 9.1 | 2019-10-31 | python-docutils allows insecure usage of temporary files | |
| CVE-2009-5043 | CRITICAL | 9.8 | 2019-10-31 | burn allows file names to escape via mishandled quotation marks | |
| CVE-2009-5153 | CRITICAL | Patched | 9.8 | 2018-11-21 | In Novell NetWare before 6.5 SP8, a stack buffer overflow in processing of CALLIT RPC calls in the NFS Portmapper daemon in PKERNEL.NLM allowed remote unauthenticated attac… |