# CVEs published 2009-07-23

11 CVEs were published on July 23, 2009: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2009-1862](https://cve.now/CVE-2009-1862.md): Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0. (CVSS 7.8, KEV)
- [CVE-2009-2582](https://cve.now/CVE-2009-2582.md): Stack-based buffer overflow in manager.exe in Akamai Download Manager (aka DLM or dlmanager) before 2.2.4.8 allows remote web servers to exe (no CVSS)
- [CVE-2009-2583](https://cve.now/CVE-2009-2583.md): Multiple session fixation vulnerabilities in IBM Tivoli Identity Manager (ITIM) 5.0.0.6 allow remote attackers to hijack web sessions via un (no CVSS)
- [CVE-2009-2584](https://cve.now/CVE-2009-2584.md): Off-by-one error in the options\_write function in drivers/misc/sgi-gru/gruprocfs.c in the SGI GRU driver in the Linux kernel 2.6.30.2 and ea (no CVSS)
- [CVE-2008-6868](https://cve.now/CVE-2008-6868.md): Cross-site scripting (XSS) vulnerability in default/login.php in EditeurScripts EsBaseAdmin 2.1 allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2008-6869](https://cve.now/CVE-2008-6869.md): Oramon Oracle Database Monitoring Tool 2.0.1 stores sensitive information under the web root with insufficient access control, which allows (no CVSS)
- [CVE-2008-6870](https://cve.now/CVE-2008-6870.md): Merlix Educate Server allows remote attackers to bypass intended security restrictions and obtain sensitive information via a direct request (no CVSS)
- [CVE-2008-6871](https://cve.now/CVE-2008-6871.md): Merlix Educate Server stores db.mdb under the web root with insufficient access control, which allows remote attackers to obtain unspecified (no CVSS)
- [CVE-2008-6872](https://cve.now/CVE-2008-6872.md): ASPThai.NET ASPThai Forums 8.5 stores sensitive information under the web root with insufficient access control, which allows remote attacke (no CVSS)
- [CVE-2008-6873](https://cve.now/CVE-2008-6873.md): SQL injection vulnerability in Active Web Mail 4.0 allows remote attackers to execute arbitrary SQL commands via the TabOpenQuickTab1 parame (no CVSS)
- [CVE-2009-2581](https://cve.now/CVE-2009-2581.md): Cross-site scripting (XSS) vulnerability in modifier.php in EditeurScripts EsNews 1.2 allows remote attackers to inject arbitrary web script (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-07-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.