# CVEs published 2009-12-15

6 CVEs were published on December 15, 2009: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2009-1380](https://cve.now/CVE-2009-1380.md): Cross-site scripting (XSS) vulnerability in JMX-Console in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) (no CVSS)
- [CVE-2009-2405](https://cve.now/CVE-2009-2405.md): Multiple cross-site scripting (XSS) vulnerabilities in the Web Console in the Application Server in Red Hat JBoss Enterprise Application Pla (no CVSS)
- [CVE-2009-3554](https://cve.now/CVE-2009-3554.md): Twiddle in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP08 and 4.3 before 4.3.0.CP07 writes the (no CVSS)
- [CVE-2009-4034](https://cve.now/CVE-2009-4034.md): PostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8.3.x before 8.3.9, and 8.4.x before 8.4.2 do (no CVSS)
- [CVE-2009-4136](https://cve.now/CVE-2009-4136.md): PostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8.3.x before 8.3.9, and 8.4.x before 8.4.2 do (no CVSS)
- [CVE-2009-4324](https://cve.now/CVE-2009-4324.md): Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before (CVSS 7.8, KEV)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-12-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.