Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-0500 State: PUBLISHED Published: 2009-02-10T02:00:00 Last Updated: 2024-08-07T04:40:03.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in course/lib.php in Moodle 1.6 before 1.6.9, 1.7 before 1.7.7, 1.8 before 1.8.8, and 1.9 before 1.9.4 allows remote attackers to inject arbitrary web script or HTML via crafted log table information that is not properly handled when it is displayed in a log report. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html - http://moodle.org/security/ - http://secunia.com/advisories/34418 - http://secunia
rity-announce/2009-03/msg00004.html - http://moodle.org/security/ - http://secunia.com/advisories/34418 - http://secunia.com/advisories/33955 - http://www.debian.org/security/2009/dsa-1724 - http://www.openwall.com/lists/oss-security/2009/02/04/1
CVE ID: CVE-2009-0501 State: PUBLISHED Published: 2009-02-10T02:00:00 Last Updated: 2024-08-07T04:40:03.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Calendar export feature in Moodle 1.8 before 1.8.8 and 1.9 before 1.9.4 allows attackers to obtain sensitive information and conduct "brute force attacks on user accounts" via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html - http://moodle.org/security/ - http://secunia.com/advisories/34418 - http://www.openwall.com/lists/oss-security/2009/02/04/1
CVE ID: CVE-2009-0502 State: PUBLISHED Published: 2009-02-10T02:00:00 Last Updated: 2024-08-07T04:40:03.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in blocks/html/block_html.php in Snoopy 1.2.3, as used in Moodle 1.6 before 1.6.9, 1.7 before 1.7.7, 1.8 before 1.8.8, and 1.9 before 1.9.4, allows remote attackers to inject arbitrary web script or HTML via an HTML block, which is not properly handled when the "Login as" feature is used to visit a MyMoodle or Blog page. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html - http://moodle.org/security
r: References: - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html - http://moodle.org/security/ - http://secunia.com/advisories/34418 - http://secunia.com/advisories/33955 - http://www.debian.org/security/2009/dsa-1724 - http://www.openwall.com/lists/oss-security/2009/02/04/1
CVE ID: CVE-2009-0503 State: PUBLISHED Published: 2009-02-13T17:00:00 Last Updated: 2024-08-07T04:40:03.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Message Broker 6.1.x before 6.1.0.2 writes a database connection password to the Event Log and System Log during exception handling for a JDBC error, which allows local users to obtain sensitive information by reading these logs. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?rs=849&uid=swg27011431 - http://www.vupen.com/english/advisories/2009/0460 - http://www.securitytracker.com/id?1021735 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48642 -
ies/2009/0460 - http://www.securitytracker.com/id?1021735 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48642 - http://www-1.ibm.com/support/docview.wss?uid=swg1IC55298 - http://www.securityfocus.com/bid/33819
CVE ID: CVE-2009-0504 State: PUBLISHED Published: 2009-02-17T17:00:00 Last Updated: 2024-08-07T04:40:03.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: WSPolicy in the Web Services component in IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.1 does not properly recognize the IDAssertion.isUsed binding property, which allows local users to discover a password by reading a SOAP message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/48700 - http://www-01.ibm.com/support/docview.wss?uid=swg27014463 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK73573
CVE ID: CVE-2009-0505 State: PUBLISHED Published: 2009-02-25T16:00:00 Last Updated: 2024-08-07T04:40:03.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CICS listener in IBM TXSeries for Multiplatforms 6.2 GA waits for a forcepurge acknowledgement from the CICS Application Server (CICSAS) after an eci response timeout, which might allow remote authenticated users to cause a denial of service (forcepurge handling delay), or have unspecified other impact, via vectors involving slow or nonexistent acknowledgement. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/48885 - http://www-01.ibm.com/support/docview.
ainer: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/48885 - http://www-01.ibm.com/support/docview.wss?uid=swg24019725 - http://www-1.ibm.com/support/docview.wss?uid=swg1IZ22391 - http://www.vupen.com/english/advisories/2009/0911 - http://www.securityfocus.com/bid/33883
CVE ID: CVE-2009-0506 State: PUBLISHED Published: 2009-02-25T16:00:00 Last Updated: 2024-08-07T04:40:03.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM WebSphere Application Server (WAS) 5.1 and 6.0.2 before 6.0.2.33 on z/OS, when CSIv2 Identity Assertion is enabled and Enterprise JavaBeans (EJB) interaction occurs between a WAS 6.1 instance and a WAS pre-6.1 instance, allows local users to have an unknown impact via vectors related to (1) use of the wrong subject and (2) multiple CBIND checks. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg27006876 - http://www.securityfocus.c
Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg27006876 - http://www.securityfocus.com/bid/33884 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK71143 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48886
CVE ID: CVE-2009-0507 State: PUBLISHED Published: 2009-02-26T16:00:00 Last Updated: 2024-08-07T04:40:03.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Process Server (WPS) 6.1.2 before 6.1.2.3 and 6.2 before 6.2.0.1 does not properly restrict configuration data during an export of the cluster configuration file from the administrative console, which allows remote authenticated users to obtain the (1) JMSAPI, (2) ESCALATION, and (3) MAILSESSION (aka mail session) cleartext passwords via vectors involving access to a cluster member. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/0670 - http://www-01.i
nalyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/0670 - http://www-01.ibm.com/support/docview.wss?uid=swg27015580 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48892 - http://www-1.ibm.com/support/docview.wss?uid=swg1JR30088 - http://secunia.com/advisories/34249
CVE ID: CVE-2009-0508 State: PUBLISHED Published: 2009-03-16T19:00:00 Last Updated: 2024-08-07T04:40:03.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Servlet Engine/Web Container and JSP components in IBM WebSphere Application Server (WAS) 5.1.0, 5.1.1.19, 6.0.2 before 6.0.2.35, 6.1 before 6.1.0.23, and 7.0 before 7.0.0.3 allow remote attackers to read arbitrary files contained in war files in (1) web-inf, (2) meta-inf, and unspecified other directories via unknown vectors, related to (a) web-based applications and (b) the administrative console. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34876 - http://www-01.ibm.com/
ional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/34876 - http://www-01.ibm.com/support/docview.wss?rs=180&uid=swg24022456 - http://secunia.com/advisories/34283 - http://www-01.ibm.com/support/docview.wss?uid=swg21380233 - http://www.vupen.com/english/advisories/2009/1188 - http://www-01.ibm.com/support/docview.wss?uid=swg27006876 - http://www-01.ibm.com/support/docview.wss?uid=swg1PK81387 - http://www.vupen.com/english/advisories/2009/1464 - http://www.securityfocus.com/bid/34104 - http://www.vupen.com/english/advisories/2009/0704 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49085 - http://www-01.ibm.com/support/docview.wss?uid=swg21380376
CVE ID: CVE-2009-0509 State: PUBLISHED Published: 2009-06-11T15:00:00 Last Updated: 2024-08-07T04:40:03.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allows remote attackers to execute arbitrary code via a crafted file that triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35274 - http://www.vupen.com/english/advisories/2009/1547 - http://secunia.com/advisories/35655 - http://www.us-cert.gov/cas/techalerts/TA09-161A.html
nglish/advisories/2009/1547 - http://secunia.com/advisories/35655 - http://www.us-cert.gov/cas/techalerts/TA09-161A.html - http://secunia.com/advisories/35734 - http://www.redhat.com/support/errata/RHSA-2009-1109.html - http://www.adobe.com/support/security/bulletins/apsb09-07.html - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html - http://securitytracker.com/id?1022361 - https://exchange.xforce.ibmcloud.com/vulnerabilities/49239 - http://security.gentoo.org/glsa/glsa-200907-06.xml - http://secunia.com/advisories/34580 - http://secunia.com/advisories/35685 - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html - http://secunia.com/advisories/3
ies/35685 - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html - http://secunia.com/advisories/35496
CVE ID: CVE-2009-0510 State: PUBLISHED Published: 2009-06-11T15:00:00 Last Updated: 2024-08-07T04:40:03.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-0511, CVE-2009-0512, CVE-2009-0888, and CVE-2009-0889. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35274 - http://www.vupen.com/english/advisories/2009/1547 - http://secunia.co
rences: - http://www.securityfocus.com/bid/35274 - http://www.vupen.com/english/advisories/2009/1547 - http://secunia.com/advisories/35655 - http://www.us-cert.gov/cas/techalerts/TA09-161A.html - http://secunia.com/advisories/35734 - http://www.redhat.com/support/errata/RHSA-2009-1109.html - http://www.adobe.com/support/security/bulletins/apsb09-07.html - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html - http://securitytracker.com/id?1022361 - http://security.gentoo.org/glsa/glsa-200907-06.xml - http://secunia.com/advisories/34580 - http://secunia.com/advisories/35685 - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html - http://secunia.com/
.com/advisories/35685 - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html - http://secunia.com/advisories/35496
CVE ID: CVE-2009-0511 State: PUBLISHED Published: 2009-06-11T15:00:00 Last Updated: 2024-08-07T04:40:03.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-0510, CVE-2009-0512, CVE-2009-0888, and CVE-2009-0889. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35274 - http://www.vupen.com/english/advisories/2009/1547 - http://secunia.co
CVE ID: CVE-2009-0512 State: PUBLISHED Published: 2009-06-11T15:00:00 Last Updated: 2024-08-07T04:40:03.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-0510, CVE-2009-0511, CVE-2009-0888, and CVE-2009-0889. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35274 - http://www.vupen.com/english/advisories/2009/1547 - http://secunia.co
rences: - http://www.securityfocus.com/bid/35274 - http://www.vupen.com/english/advisories/2009/1547 - http://secunia.com/advisories/35655 - http://www.us-cert.gov/cas/techalerts/TA09-161A.html - http://secunia.com/advisories/35734 - http://www.redhat.com/support/errata/RHSA-2009-1109.html - http://www.adobe.com/support/security/bulletins/apsb09-07.html - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html - http://securitytracker.com/id?1022361 - http://security.gentoo.org/glsa/glsa-200907-06.xml - http://www.securityfocus.com/bid/35293 - http://secunia.com/advisories/34580 - http://secunia.com/advisories/35685 - http://lists.opensuse.org/opensuse-security-announce/20
nia.com/advisories/34580 - http://secunia.com/advisories/35685 - http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html - http://secunia.com/advisories/35496
CVE ID: CVE-2009-0513 State: PUBLISHED Published: 2009-02-11T00:00:00 Last Updated: 2024-08-07T04:40:03.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in WebFrame 0.76 allow remote attackers to execute arbitrary PHP code via a URL in the classFiles parameter to (1) admin/doc/index.php, (2) index.php, and (3) base/menu.php in mod/. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8025 - http://www.securityfocus.com/bid/33701
CVE ID: CVE-2009-0514 State: PUBLISHED Published: 2009-02-11T00:00:00 Last Updated: 2024-08-07T04:40:03.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in WebFrame 0.76 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the (1) currentmod and (2) LANG parameters to mod/index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8025 - http://www.securityfocus.com/bid/33701
CVE ID: CVE-2009-0515 State: PUBLISHED Published: 2009-02-11T00:00:00 Last Updated: 2024-08-07T04:40:05.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in check_lang.php in Yet Another NOCC (YANOCC) 0.1.0 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2009/0383 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48608 - http://www.securityfocus.com/bid/33704 - https://www.exploit-db.com/exploits/8020 - http://secunia.com/advisories/33862
CVE ID: CVE-2009-0516 State: PUBLISHED Published: 2009-02-11T00:00:00 Last Updated: 2024-08-07T04:40:03.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the classified page (classified.php) in BusinessSpace 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/48606 - http://secunia.com/advisories/33875 - https://www.exploit-db.com/exploits/8011 - http://www.securityfocus.com/bid/33692 - http://www.securityfocus.com/archive/1/500787/100/0/threaded
CVE ID: CVE-2009-0517 State: PUBLISHED Published: 2009-02-11T00:00:00 Last Updated: 2024-08-07T04:40:04.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in index.php in phpSlash 0.8.1.1 and earlier allows remote attackers to execute arbitrary PHP code via the fields parameter, which is supplied to an eval function call within the generic function in include/class/tz_env.class. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33717 - http://www.securityfocus.com/bid/33572 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48441 -
dvisories/33717 - http://www.securityfocus.com/bid/33572 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48441 - https://www.exploit-db.com/exploits/7948 - http://osvdb.org/51727 - http://www.securityfocus.com/archive/1/500664/100/0/threaded
CVE ID: CVE-2009-0518 State: PUBLISHED Published: 2009-04-06T15:00:00 Last Updated: 2024-08-07T04:40:04.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: VI Client in VMware VirtualCenter before 2.5 Update 4, VMware ESXi 3.5 before Update 4, and VMware ESX 3.5 before Update 4 retains the VirtualCenter Server password in process memory, which might allow local users to obtain this password. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2009/Apr/0036.html - http://www.securityfocus.com/bid/34373 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6376 - http://www.vupen.com/english/advisori
l.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6376 - http://www.vupen.com/english/advisories/2009/0944 - http://lists.vmware.com/pipermail/security-announce/2009/000054.html - http://www.vmware.com/security/advisories/VMSA-2009-0005.html - http://secunia.com/advisories/34585
CVE ID: CVE-2009-0519 State: PUBLISHED Published: 2009-02-26T16:00:00 Last Updated: 2024-08-07T04:40:03.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 allows remote attackers to cause a denial of service (browser crash) or possibly execute arbitrary code via a crafted Shockwave Flash (aka .swf) file. Additional Analyst Notes: - CVE Program Container: References: - http://isc.sans.org/diary.html?storyid=5929 - https://bugzilla.redhat.com/show_bug.cgi?id=487141 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15837 - http://support.apple.com/k
ttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15837 - http://support.apple.com/kb/HT3549 - http://rhn.redhat.com/errata/RHSA-2009-0332.html - http://secunia.com/advisories/35074 - http://secunia.com/advisories/34226 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6470 - http://www.vupen.com/english/advisories/2009/0743 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48900 - http://www.adobe.com/support/security/bulletins/apsb09-01.html - http://www.vupen.com/english/advisories/2009/0513 - http://security.gentoo.org/glsa/glsa-200903
lletins/apsb09-01.html - http://www.vupen.com/english/advisories/2009/0513 - http://security.gentoo.org/glsa/glsa-200903-23.xml - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://www.vupen.com/english/advisories/2009/1297 - http://secunia.com/advisories/34293 - http://www.securityfocus.com/bid/33890 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-254909-1 - http://rhn.redhat.com/errata/RHSA-2009-0334.html - http://secunia.com/advisories/34012
CVE ID: CVE-2009-0520 State: PUBLISHED Published: 2009-02-26T16:00:00 Last Updated: 2024-08-07T04:40:03.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 does not properly remove references to destroyed objects during Shockwave Flash file processing, which allows remote attackers to execute arbitrary code via a crafted file, related to a "buffer overflow issue." Additional Analyst Notes: - CVE Program Container: References: - http://isc.sans.org/diary.html?storyid=5929 - http://support.apple.com/kb/HT3549 - http://rhn.redhat.com/errata/RHSA-2009-0332.html - http://labs.idefense.com/intelligence/vulnerabilities/d
m/kb/HT3549 - http://rhn.redhat.com/errata/RHSA-2009-0332.html - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=773 - http://secunia.com/advisories/35074 - http://secunia.com/advisories/34226 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6593 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48887 - http://www.vupen.com/english/advisories/2009/0743 - http://www.adobe.com/support/security/bulletins/apsb09-01.html - http://www.vupen.com/english/advisories/2009/0513 - http://security.gentoo.org/glsa/glsa-200903-23.xml - http://www.us-cert.gov/cas/techa
com/english/advisories/2009/0513 - http://security.gentoo.org/glsa/glsa-200903-23.xml - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16057 - http://www.vupen.com/english/advisories/2009/1297 - http://www.securityfocus.com/bid/33880 - http://securitytracker.com/id?1021750 - http://secunia.com/advisories/34293 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-254909-1 - http://rhn.redhat.com/errata/RHSA-2009-0334.html - https://bugzilla.redhat.com/show_bug.cgi?id=487142 - http://secunia.com/advisories/34012
CVE ID: CVE-2009-0521 State: PUBLISHED Published: 2009-02-26T16:00:00 Last Updated: 2024-08-07T04:40:03.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 on Linux allows local users to obtain sensitive information or gain privileges via a crafted library in a directory contained in the RPATH. Additional Analyst Notes: - CVE Program Container: References: - http://isc.sans.org/diary.html?storyid=5929 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6160 - http://rhn.redhat.com/errata/RHSA-2009-0332.html - http://secunia.com/advisories/
n/oval%3Aorg.mitre.oval%3Adef%3A6160 - http://rhn.redhat.com/errata/RHSA-2009-0332.html - http://secunia.com/advisories/34226 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48904 - http://www.adobe.com/support/security/bulletins/apsb09-01.html - http://www.vupen.com/english/advisories/2009/0513 - http://security.gentoo.org/glsa/glsa-200903-23.xml - https://bugzilla.redhat.com/show_bug.cgi?id=487144 - http://secunia.com/advisories/34012
CVE ID: CVE-2009-0522 State: PUBLISHED Published: 2009-02-26T16:00:00 Last Updated: 2024-08-07T04:40:03.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 on Windows allows remote attackers to trick a user into visiting an arbitrary URL via an unspecified manipulation of the "mouse pointer display," related to a "Clickjacking attack." Additional Analyst Notes: - CVE Program Container: References: - http://isc.sans.org/diary.html?storyid=5929 - http://securitytracker.com/id?1021752 - http://www.adobe.com/support/security/bulletins/apsb09-01.html - http://www.vupen.com/english/advisories/2009/0513 - https://oval.ci
dobe.com/support/security/bulletins/apsb09-01.html - http://www.vupen.com/english/advisories/2009/0513 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6674 - http://secunia.com/advisories/34012 - https://exchange.xforce.ibmcloud.com/vulnerabilities/48903