CVEs published July 23, 2009
11 CVEs were published on July 23, 2009: 0 critical, 1 high. 1 is now in CISA KEV.
- Published
- 11
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 10
- Now in CISA KEV
- 1
- Fix available
- 0
High 1
Medium, low and unrated 10
- CVE-2009-2582Stack-based buffer overflow in manager.exe in Akamai Download Manager (aka DLM or dlmanager) before 2.2.4.8 allows remote web servers to exe
- CVE-2009-2583Multiple session fixation vulnerabilities in IBM Tivoli Identity Manager (ITIM) 5.0.0.6 allow remote attackers to hijack web sessions via un
- CVE-2009-2584Off-by-one error in the options_write function in drivers/misc/sgi-gru/gruprocfs.c in the SGI GRU driver in the Linux kernel 2.6.30.2 and ea
- CVE-2008-6868Cross-site scripting (XSS) vulnerability in default/login.php in EditeurScripts EsBaseAdmin 2.1 allows remote attackers to inject arbitrary
- CVE-2008-6869Oramon Oracle Database Monitoring Tool 2.0.1 stores sensitive information under the web root with insufficient access control, which allows
- CVE-2008-6870Merlix Educate Server allows remote attackers to bypass intended security restrictions and obtain sensitive information via a direct request
- CVE-2008-6871Merlix Educate Server stores db.mdb under the web root with insufficient access control, which allows remote attackers to obtain unspecified
- CVE-2008-6872ASPThai.NET ASPThai Forums 8.5 stores sensitive information under the web root with insufficient access control, which allows remote attacke
- CVE-2008-6873SQL injection vulnerability in Active Web Mail 4.0 allows remote attackers to execute arbitrary SQL commands via the TabOpenQuickTab1 parame
- CVE-2009-2581Cross-site scripting (XSS) vulnerability in modifier.php in EditeurScripts EsNews 1.2 allows remote attackers to inject arbitrary web script