| 35374 | Oracle WebLogic Server Plug-in Remote Overflow (1166189) | Nessus | Web Servers | 1/15/2009 | 11/15/2018 | critical |
| 35468 | GigaTribe Detection | Nessus | Peer-To-Peer File Sharing | 1/28/2009 | 11/22/2019 | info |
| 35556 | Mono ASP.NET action Attribute XSS | Nessus | CGI abuses : XSS | 1/30/2009 | 4/11/2022 | medium |
| 35628 | Openfire < 3.6.3 Multiple Vulnerabilities | Nessus | CGI abuses | 2/9/2009 | 1/19/2021 | medium |
| 35655 | TYPO3 'jumpUrl' Mechanism Information Disclosure | Nessus | CGI abuses | 2/12/2009 | 5/14/2025 | medium |
| 35661 | SquirrelMail HTTPS Session Cookie Secure Flag Weakness | Nessus | CGI abuses | 2/12/2009 | 4/11/2022 | medium |
| 35688 | Sun Java System Directory Server 6.x < 6.3.1 LDAP JDBC Backend DoS | Nessus | Denial of Service | 2/13/2009 | 9/2/2020 | medium |
| 35712 | Web Server UPnP Detection | Nessus | Service detection | 2/19/2009 | 6/12/2020 | info |
| 35749 | Moodle Forum 'post.php' Unauthorized Post Deletion CSRF | Nessus | CGI abuses | 2/27/2009 | 5/14/2025 | medium |
| 35750 | PHP < 5.2.9 Multiple Vulnerabilities | Nessus | CGI abuses | 2/27/2009 | 5/26/2025 | medium |
| 35786 | Zabbix Web Interface Detection | Nessus | CGI abuses | 3/7/2009 | 4/4/2025 | info |
| 35820 | Thecus NAS Device Detection | Nessus | Service detection | 3/10/2009 | 1/22/2020 | info |
| 36051 | Xlight FTP Server Authentication SQL Injection | Nessus | FTP | 3/31/2009 | 7/11/2018 | high |
| 36072 | SAP DB / MaxDB WebDBM Multiple Parameter XSS | Nessus | CGI abuses : XSS | 4/1/2009 | 4/11/2022 | medium |
| 36133 | IBM WebSphere Application Server 7.0 < Fix Pack 3 | Nessus | Web Servers | 4/10/2009 | 8/6/2018 | high |
| 36161 | IBM WebSphere Application Server < 6.1.0.23 Multiple Flaws | Nessus | Web Servers | 4/15/2009 | 8/6/2018 | high |
| 38206 | EMC RepliStor < 6.2 SP5/6.3 SP2 Multiple Heap Overflows | Nessus | Gain a shell remotely | 4/29/2009 | 7/10/2018 | critical |
| 38649 | Atmail WebMail <= 5.6.0 (5.60) Email Body Injection | Nessus | CGI abuses : XSS | 4/30/2009 | 4/11/2022 | medium |
| 38650 | Atmail WebMail <= 5.6.1 (5.61) webadmin/admin.php Multiple Parameter XSS | Nessus | CGI abuses : XSS | 4/30/2009 | 4/11/2022 | medium |
| 38653 | Symantec Reporting Server Improper URL Handling Exposure | Nessus | CGI abuses | 5/1/2009 | 1/19/2021 | medium |
| 38733 | Project Woodstock 404 Error Page UTF-7 Encoded XSS | Nessus | CGI abuses : XSS | 5/11/2009 | 1/19/2021 | medium |
| 38735 | ISC BIND 9 EVP_VerifyFinal() / DSA_do_verify() SSL/TLS Signature Validation Weakness | Nessus | DNS | 5/12/2009 | 6/27/2018 | medium |
| 38794 | SquirrelMail map_yp_alias Username Mapping Alias Arbitrary Code Execution | Nessus | CGI abuses | 5/15/2009 | 4/11/2022 | high |
| 38808 | Microsoft IIS WebDAV Unicode Request Directory Security Bypass | Nessus | Web Servers | 5/18/2009 | 11/15/2018 | high |
| 38832 | HP System Management Homepage < 3.0.1.73 Multiple Flaws | Nessus | CGI abuses | 5/20/2009 | 4/11/2022 | medium |
| 38877 | Sendmail < 8.13.2 Mail X-Header Handling Remote Overflow | Nessus | SMTP problems | 5/24/2009 | 1/22/2026 | medium |
| 38928 | DNN (DotNetNuke) ErrorPage.aspx XSS | Nessus | CGI abuses : XSS | 5/27/2009 | 9/29/2025 | medium |
| 38952 | CrashPlan Server Default Administrative Credentials | Nessus | CGI abuses | 5/29/2009 | 1/19/2021 | high |
| 38974 | JVideo! Component for Joomla! 'user_id' Parameter SQLi | Nessus | CGI abuses | 6/1/2009 | 5/14/2025 | high |
| 39314 | Sun Java System Directory Server Online Help Feature Information Disclosure | Nessus | CGI abuses | 6/4/2009 | 1/19/2021 | medium |
| 39328 | Vulture Reverse Proxy Detection | Nessus | Web Servers | 6/8/2009 | 11/22/2019 | info |
| 39331 | Joomla! < 1.5.11 JA_Purity Template Multiple XSS | Nessus | CGI abuses : XSS | 6/9/2009 | 5/14/2025 | medium |
| 39354 | Kerio MailServer < 6.6.2 Patch 3 / 6.7.0 Patch 1 XSS (KSEC-2009-06-08-01) | Nessus | CGI abuses : XSS | 6/11/2009 | 4/11/2022 | medium |
| 39365 | Drupal SA-CONTRIB-2009-036: Services Module Key-Based Access Bypass | Nessus | CGI abuses | 6/11/2009 | 4/11/2022 | medium |
| 39450 | IBM WebSphere Application Server < 6.1.0.25 Multiple Vulnerabilities | Nessus | Web Servers | 6/19/2009 | 8/6/2018 | medium |
| 39469 | CGI Generic Remote File Inclusion | Nessus | CGI abuses | 6/19/2009 | 1/19/2021 | high |
| 39501 | Zen Cart password_forgotten.php Admin Access Bypass | Nessus | CGI abuses | 6/24/2009 | 4/11/2022 | high |
| 39502 | Samba < 3.0.35 / 3.2.13 / 3.3.6 Multiple Vulnerabilities | Nessus | Misc. | 6/24/2009 | 11/15/2018 | low |
| 39536 | BASE < 1.2.5 readRoleCookie() Auth Bypass | Nessus | CGI abuses | 6/26/2009 | 4/11/2022 | high |
| 39588 | RIP-1 Poisoning Routing Table Modification | Nessus | Misc. | 7/2/2009 | 8/3/2015 | medium |
| 39617 | HP DDMI on Windows Unspecified Remote Agent Access | Nessus | CGI abuses | 7/6/2009 | 1/19/2021 | high |
| 39805 | Novell eDirectory < 8.8 SP5 Multiple Vulnerabilities | Nessus | Misc. | 7/15/2009 | 11/15/2018 | medium |
| 40350 | RealNetworks Helix Server < 13.0.0 Multiple Remote DoS | Nessus | Misc. | 7/21/2009 | 11/15/2018 | medium |
| 40352 | phpMyAdmin Installation Not Password Protected | Nessus | CGI abuses | 7/23/2009 | 4/11/2022 | high |
| 40419 | MODx config.js.php Information Disclosure | Nessus | CGI abuses | 7/28/2009 | 4/11/2022 | medium |
| 40450 | ISC BIND 9 Dynamic Update Handling Remote DoS (intrusive check) | Nessus | DNS | 7/31/2009 | 3/19/2020 | medium |
| 40577 | WordPress < 2.8.4 Password Reset | Nessus | CGI abuses | 8/12/2009 | 5/14/2025 | medium |
| 40662 | IBM DB2 8.1 < Fix Pack 18 Multiple Vulnerabilities | Nessus | Databases | 8/20/2009 | 4/11/2022 | medium |
| 40796 | phpSANE file_save Parameter Remote File Include | Nessus | CGI abuses | 8/28/2009 | 4/11/2022 | high |
| 40862 | Wyse Thin Client hagent.exe Unspecified Buffer Overflow | Nessus | Gain a shell remotely | 9/2/2009 | 7/14/2025 | critical |
