| | CVE-2009-3720 |  Apache | medium | 5.0 | 27.9%
| | The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXM… | Nov 3, 2009 | Jul 20, 2026 |
| | CVE-2009-3733 |  VMware | medium | 5.0 | 90.1%
| | Directory traversal vulnerability in VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0… | Nov 2, 2009 | Apr 23, 2026 |
| | CVE-2009-2267 | VMware | medium | 6.9 | 2.6%
| | VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, V… | Nov 2, 2009 | Apr 23, 2026 |
| | CVE-2009-3830 |  Microsoft | medium | 5.0 | 64.2%
| | The download functionality in Team Services in Microsoft Office SharePoint Server 2007 12.0.0.4518 a… | Oct 30, 2009 | Apr 23, 2026 |
| | CVE-2009-3821 | Apache | medium | 4.3 | 1.5%
| | Cross-site scripting (XSS) vulnerability in the Apache Solr Search (solr) extension 1.0.0 for TYPO3 … | Oct 28, 2009 | Apr 23, 2026 |
| | CVE-2009-3621 | VMware | medium | 5.5 | 0.1%
| | net/unix/af_unix.c in the Linux kernel 2.6.31.4 and earlier allows local users to cause a denial of … | Oct 22, 2009 | Apr 23, 2026 |
| | CVE-2009-3707 | VMware | medium | 5.0 | 21.3%
| | VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware W… | Oct 16, 2009 | Apr 23, 2026 |
| | CVE-2009-3282 | VMware | high | 7.8 | 0.5%
| | Integer overflow in the vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 allows hos… | Oct 16, 2009 | Apr 23, 2026 |
| | CVE-2009-3281 | VMware | high | 7.2 | 0.2%
| | The vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 does not use correct file perm… | Oct 16, 2009 | Apr 23, 2026 |
| | CVE-2009-2874 |  Cisco | high | 7.8 | 3.1%
| | The TimesTenD process in Cisco Unified Presence 1.x, 6.x before 6.0(6), and 7.x before 7.0(4) allows… | Oct 16, 2009 | Apr 23, 2026 |
| | CVE-2009-3126 | Microsoft | critical | 9.3 | 48.5%
| | Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3… | Oct 14, 2009 | Apr 23, 2026 |
| | CVE-2009-2531 | Microsoft | critical | 9.3 | 37.6%
| | Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which all… | Oct 14, 2009 | Apr 23, 2026 |
| | CVE-2009-2530 | Microsoft | critical | 9.3 | 37.6%
| | Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which all… | Oct 14, 2009 | Apr 23, 2026 |
| | CVE-2009-2529 | Microsoft | high | 8.1 | 22.6%
| | Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not properly handle argument validatio… | Oct 14, 2009 | Apr 23, 2026 |
| | CVE-2009-2528 | Microsoft | critical | 9.3 | 38.7%
| | GDI+ in Microsoft Office XP SP3 does not properly handle malformed objects in Office Art Property Ta… | Oct 14, 2009 | Apr 23, 2026 |
| | CVE-2009-2527 | Microsoft | critical | 9.3 | 45.4%
| | Heap-based buffer overflow in Microsoft Windows Media Player 6.4 allows remote attackers to execute … | Oct 14, 2009 | Apr 23, 2026 |
| | CVE-2009-2525 | Microsoft | critical | 9.3 | 33.8%
| | Microsoft Windows Media Runtime, as used in DirectShow WMA Voice Codec, Windows Media Audio Voice De… | Oct 14, 2009 | Apr 23, 2026 |
| | CVE-2009-2518 | Microsoft | critical | 9.3 | 53.2%
| | Integer overflow in GDI+ in Microsoft Office XP SP3 allows remote attackers to execute arbitrary cod… | Oct 14, 2009 | Apr 23, 2026 |
| | CVE-2009-2504 | Microsoft | critical | 9.3 | 46.3%
| | Multiple integer overflows in unspecified APIs in GDI+ in Microsoft .NET Framework 1.1 SP1, .NET Fra… | Oct 14, 2009 | Apr 23, 2026 |
| | CVE-2009-2503 | Microsoft | critical | 9.3 | 41.4%
| | GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Windows Server 2003 SP2, Office X… | Oct 14, 2009 | Apr 23, 2026 |
| | CVE-2009-2502 | Microsoft | high | 8.1 | 47.5%
| | Buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3,… | Oct 14, 2009 | Apr 23, 2026 |
| | CVE-2009-2501 | Microsoft | critical | 9.3 | 53.1%
| | Heap-based buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Off… | Oct 14, 2009 | Apr 23, 2026 |
| | CVE-2009-2500 | Microsoft | critical | 9.3 | 56.8%
| | Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3… | Oct 14, 2009 | Apr 23, 2026 |
| | CVE-2009-2497 | Microsoft | critical | 9.3 | 37.2%
| | The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0, 2.0 SP1, 2.0 SP2, 3.5, and 3.5 SP… | Oct 14, 2009 | Apr 23, 2026 |
| | CVE-2009-1547 | Microsoft | high | 8.8 | 29.7%
| | Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 allows remote att… | Oct 14, 2009 | Apr 23, 2026 |
| | CVE-2009-0555 | Microsoft | critical | 9.3 | 31.9%
| | Microsoft Windows Media Runtime, as used in DirectShow WMA Voice Codec, Windows Media Audio Voice De… | Oct 14, 2009 | Apr 23, 2026 |
| | CVE-2009-0091 | Microsoft | critical | 9.3 | 42.0%
| | Microsoft .NET Framework 2.0, 2.0 SP1, and 3.5 does not properly enforce a certain type-equality con… | Oct 14, 2009 | Apr 23, 2026 |
| | CVE-2009-0090 | Microsoft | critical | 9.3 | 42.1%
| | Microsoft .NET Framework 1.0 SP3, 1.1 SP1, and 2.0 SP1 does not properly validate .NET verifiable co… | Oct 14, 2009 | Apr 23, 2026 |
| | CVE-2009-3693 |  HPE | critical | 9.3 | 72.6%
| | Directory traversal vulnerability in the Persits.XUpload.2 ActiveX control (XUpload.ocx) in HP LoadR… | Oct 13, 2009 | Apr 23, 2026 |
| | CVE-2009-2699 | Apache | high | 7.5 | 8.7%
| | The Solaris pollset feature in the Event Port backend in poll/unix/port.c in the Apache Portable Run… | Oct 13, 2009 | Apr 23, 2026 |
| | CVE-2009-3569 | Apache | critical | 9.3 | 4.4%
| | Stack-based buffer overflow in OpenOffice.org (OOo) allows remote attackers to execute arbitrary cod… | Oct 6, 2009 | Apr 23, 2026 |
| | CVE-2009-2683 | HPE | high | 7.1 | 0.3%
| | Unspecified vulnerability in the Sender module in HP Remote Graphics Software (RGS) 5.1.3 through 5.… | Sep 29, 2009 | Apr 23, 2026 |
| | CVE-2009-2681 | HPE | medium | 6.8 | 0.0%
| | Unspecified vulnerability in HP ProCurve Identity Driven Manager (IDM) A.02.x through A.02.03 and A.… | Sep 29, 2009 | Apr 23, 2026 |
| | CVE-2009-2865 | Cisco | high | 7.6 | 3.7%
| | Buffer overflow in the login implementation in the Extension Mobility feature in the Unified Communi… | Sep 28, 2009 | Apr 23, 2026 |
| | CVE-2009-2864 | Cisco | high | 7.8 | 1.6%
| | Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 5.x before 5.1(3g), 6.x before… | Sep 28, 2009 | Apr 23, 2026 |
| | CVE-2009-3339 |  Trellix | high | 7.8 | 0.3%
| | Unspecified vulnerability in McAfee Email and Web Security Appliance 5.1 VMtrial allows remote attac… | Sep 24, 2009 | Apr 23, 2026 |
| | CVE-2009-3275 | Microsoft | medium | 5.0 | 9.9%
| | Blocks/Common/Src/Configuration/Manageability/Adm/AdmContentBuilder.cs in Microsoft patterns & pract… | Sep 21, 2009 | Apr 23, 2026 |
| | CVE-2009-3270 | Microsoft | medium | 5.0 | 41.5%
| | Microsoft Internet Explorer 7 through 7.0.6000.16711 allows remote attackers to cause a denial of se… | Sep 18, 2009 | Apr 23, 2026 |
| | CVE-2009-3267 | Microsoft | medium | 5.0 | 13.8%
| | Microsoft Internet Explorer 6 through 6.0.2900.2180, and 7.0.6000.16711, allows remote attackers to … | Sep 18, 2009 | Apr 23, 2026 |
| | CVE-2009-2629 |  F5 | high | 7.5 | 78.1%
| | Buffer underflow in src/http/ngx_http_parse.c in nginx 0.1.0 through 0.5.37, 0.6.x before 0.6.39, 0.… | Sep 15, 2009 | Apr 23, 2026 |
| | CVE-2008-7217 | Microsoft | medium | 4.6 | 0.3%
| | Microsoft Office 2008 for Mac, when running on Macintosh systems that restrict Office access to admi… | Sep 13, 2009 | Apr 23, 2026 |
| | CVE-2009-2628 | VMware | critical | 9.3 | 12.8%
| | The VMnc media codec in vmnc.dll in VMware Movie Decoder before 6.5.3 build 185404, VMware Workstati… | Sep 8, 2009 | Apr 23, 2026 |
| | CVE-2009-2499 | Microsoft | high | 8.5 | 30.7%
| | Microsoft Windows Media Format Runtime 9.0, 9.5, and 11; and Microsoft Media Foundation on Windows V… | Sep 8, 2009 | Apr 23, 2026 |
| | CVE-2009-2498 | Microsoft | critical | 9.3 | 29.6%
| | Microsoft Windows Media Format Runtime 9.0, 9.5, and 11 and Windows Media Services 9.1 and 2008 do n… | Sep 8, 2009 | Apr 23, 2026 |
| | CVE-2009-0199 | VMware | critical | 9.3 | 12.0%
| | Heap-based buffer overflow in the VMnc media codec in vmnc.dll in VMware Movie Decoder before 6.5.3 … | Sep 8, 2009 | Apr 23, 2026 |
| | CVE-2009-3099 | HPE | critical | 10.0 | 11.3%
| | Unspecified vulnerability in HP OpenView Operations Manager 8.1 on Windows Server 2003 SP2 allows re… | Sep 8, 2009 | Apr 23, 2026 |
| | CVE-2009-3098 | HPE | critical | 10.0 | 2.5%
| | Unspecified vulnerability in the Portal in HP Operations Dashboard 2.1 on Windows Server 2003 SP2 al… | Sep 8, 2009 | Apr 23, 2026 |
| | CVE-2009-3097 | HPE | high | 7.8 | 0.6%
| | Multiple unspecified vulnerabilities in HP Performance Insight 5.3 on Windows allow attackers to obt… | Sep 8, 2009 | Apr 23, 2026 |
| | CVE-2009-3096 | HPE | critical | 10.0 | 1.5%
| | Multiple unspecified vulnerabilities in HP Performance Insight 5.3 allow remote attackers to have an… | Sep 8, 2009 | Apr 23, 2026 |
| | CVE-2009-3095 | Apache | medium | 5.0 | 3.0%
| | The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended access… | Sep 8, 2009 | Apr 23, 2026 |