# CVEs published 2009-07-23

11 CVEs were published on July 23, 2009: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2009-1862](https://cve.now/CVE-2009-1862.md): Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0. (CVSS 7.8, KEV)
- [CVE-2009-2582](https://cve.now/CVE-2009-2582.md): Stack-based buffer overflow in manager.exe in Akamai Download Manager (aka DLM or dlmanager) before 2.2.4.8 allows remote web servers to… (no CVSS)
- [CVE-2009-2583](https://cve.now/CVE-2009-2583.md): Multiple session fixation vulnerabilities in IBM Tivoli Identity Manager (ITIM) 5.0.0.6 allow remote attackers to hijack web sessions via… (no CVSS)
- [CVE-2009-2584](https://cve.now/CVE-2009-2584.md): Off-by-one error in the options\_write function in drivers/misc/sgi-gru/gruprocfs.c in the SGI GRU driver in the Linux kernel 2.6.30.2 and… (no CVSS)
- [CVE-2008-6868](https://cve.now/CVE-2008-6868.md): Cross-site scripting (XSS) vulnerability in default/login.php in EditeurScripts EsBaseAdmin 2.1 allows remote attackers to inject… (no CVSS)
- [CVE-2008-6869](https://cve.now/CVE-2008-6869.md): Oramon Oracle Database Monitoring Tool 2.0.1 stores sensitive information under the web root with insufficient access control, which… (no CVSS)
- [CVE-2008-6870](https://cve.now/CVE-2008-6870.md): Merlix Educate Server allows remote attackers to bypass intended security restrictions and obtain sensitive information via a direct… (no CVSS)
- [CVE-2008-6871](https://cve.now/CVE-2008-6871.md): Merlix Educate Server stores db.mdb under the web root with insufficient access control, which allows remote attackers to obtain… (no CVSS)
- [CVE-2008-6872](https://cve.now/CVE-2008-6872.md): ASPThai.NET ASPThai Forums 8.5 stores sensitive information under the web root with insufficient access control, which allows remote… (no CVSS)
- [CVE-2008-6873](https://cve.now/CVE-2008-6873.md): SQL injection vulnerability in Active Web Mail 4.0 allows remote attackers to execute arbitrary SQL commands via the TabOpenQuickTab1… (no CVSS)
- [CVE-2009-2581](https://cve.now/CVE-2009-2581.md): Cross-site scripting (XSS) vulnerability in modifier.php in EditeurScripts EsNews 1.2 allows remote attackers to inject arbitrary web… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2009-07-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.