Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-4519 State: PUBLISHED Published: 2008-10-09T18:00:00 Last Updated: 2024-08-07T10:17:09.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Fastpublish CMS 1.9999 d allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the target parameter to (1) index2.php and (2) index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31582 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45673 - http://securityreason.com/securityalert/4383 - http://secunia.com/advisories/32126 - https://www.exploit-db.com/exploits/6678
CVE ID: CVE-2008-4520 State: PUBLISHED Published: 2008-10-09T18:00:00 Last Updated: 2024-08-07T10:17:09.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in bulk_update.pl in AutoNessus before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the remark parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31559 - http://sourceforge.net/project/shownotes.php?group_id=216367&release_id=630124 - http://autonessus.cvs.sourceforge.net/viewvc/autonessus/AutoNessus/www/bulk_update.pl?r1=1.2&r2=1.3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45634 - http://
essus/AutoNessus/www/bulk_update.pl?r1=1.2&r2=1.3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45634 - http://secunia.com/advisories/32046 - http://sourceforge.net/tracker/index.php?func=detail&aid=2141884&group_id=216367&atid=1037394
CVE ID: CVE-2008-4521 State: PUBLISHED Published: 2008-10-09T18:00:00 Last Updated: 2024-08-07T10:17:09.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in thisraidprogress.php in the World of Warcraft tracker infusion (raidtracker_panel) module 2.0 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the INFO_RAID_ID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6682 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45675 - http://www.securityfocus.com/bid/31579 - http://securityreason.com/securityalert/4384
CVE ID: CVE-2008-4522 State: PUBLISHED Published: 2008-10-09T18:00:00 Last Updated: 2024-08-07T10:17:09.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in JMweb MP3 Music Audio Search and Download Script allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the src parameter to (1) listen.php and (2) download.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45672 - http://securityreason.com/securityalert/4386 - https://www.exploit-db.com/exploits/6669 - http://www.securityfocus.com/bid/31573 - http://secunia.com/advisories/
386 - https://www.exploit-db.com/exploits/6669 - http://www.securityfocus.com/bid/31573 - http://secunia.com/advisories/32141
CVE ID: CVE-2008-4523 State: PUBLISHED Published: 2008-10-09T18:00:00 Last Updated: 2024-08-07T10:17:09.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.php in IP Reg 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the user_name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6657 - http://securityreason.com/securityalert/4389 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45641 - http://www.securityfocus.com/bid/31561
CVE ID: CVE-2008-4524 State: PUBLISHED Published: 2008-10-09T18:00:00 Last Updated: 2024-08-07T10:17:09.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the "Check User" feature (includes/check_user.php) in AdaptCMS Lite and AdaptCMS Pro 1.3 allows remote attackers to execute arbitrary SQL commands via the user_name parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31557 - http://www.adaptcms.com/article/51/News/URGENT-AdaptCMS-13-Security-Fix-Released/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/45642 - http://securityreason.com/securityalert/4392 - https://www.exploit-db.com/
e.xforce.ibmcloud.com/vulnerabilities/45642 - http://securityreason.com/securityalert/4392 - https://www.exploit-db.com/exploits/6662 - http://secunia.com/advisories/32171
CVE ID: CVE-2008-4525 State: PUBLISHED Published: 2008-10-09T18:00:00 Last Updated: 2024-08-07T10:17:09.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in AmpJuke 0.7.5 allows remote attackers to execute arbitrary SQL commands via the special parameter in a performerid action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45665 - http://www.securityfocus.com/bid/31592 - http://packetstorm.linuxsecurity.com/0810-exploits/ampjuke-sql.txt - http://secunia.com/advisories/32168
CVE ID: CVE-2008-4526 State: PUBLISHED Published: 2008-10-09T18:00:00 Last Updated: 2024-08-07T10:17:09.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in CCMS 3.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the skin parameter to (1) index.php, (2) forums.php, (3) admin.php, (4) header.php, (5) pages/story.php and (6) pages/poll.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6663 - http://www.securityfocus.com/bid/31566 - http://securityreason.com/securityalert/4387
CVE ID: CVE-2008-4527 State: PUBLISHED Published: 2008-10-09T18:00:00 Last Updated: 2024-08-07T10:17:09.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in recept.php in the Recepies (Recept) module 1.1 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the kat_id parameter in a kategorier action. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45674 - http://www.securityfocus.com/bid/31578 - http://securityreason.com/securityalert/4385 - http://secunia.com/advisories/32004 - https://w
rityfocus.com/bid/31578 - http://securityreason.com/securityalert/4385 - http://secunia.com/advisories/32004 - https://www.exploit-db.com/exploits/6683
CVE ID: CVE-2008-4528 State: PUBLISHED Published: 2008-10-09T18:00:00 Last Updated: 2024-08-07T10:17:09.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in notes.php in Phlatline's Personal Information Manager (pPIM) 1.01 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the id parameter in an edit action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6667 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45681 - http://www.securityfocus.com/bid/31571 - http://securityreason.com/securityalert/4390
CVE ID: CVE-2008-4529 State: PUBLISHED Published: 2008-10-09T18:00:00 Last Updated: 2024-08-07T10:17:09.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in asiCMS alpha 0.208 allow remote attackers to execute arbitrary PHP code via a URL in the _ENV[asicms][path] parameter to (1) Association.php, (2) BigMath.php, (3) DiffieHellman.php, (4) DumbStore.php, (5) Extension.php, (6) FileStore.php, (7) HMAC.php, (8) MemcachedStore.php, (9) Message.php, (10) Nonce.php, (11) SQLStore.php, (12) SReg.php, (13) TrustRoot.php, and (14) URINorm.php in classes/Auth/OpenID/; and (15) XRDS.php, (16) XRI.php and (17) XRIRes.php in classes/Auth/
.php, and (14) URINorm.php in classes/Auth/OpenID/; and (15) XRDS.php, (16) XRI.php and (17) XRIRes.php in classes/Auth/Yadis/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31601 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45684 - http://www.vupen.com/english/advisories/2008/2755 - http://securityreason.com/securityalert/4391 - https://www.exploit-db.com/exploits/6685
CVE ID: CVE-2008-4530 State: PUBLISHED Published: 2008-10-09T18:00:00 Last Updated: 2024-08-07T10:17:09.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Brilliant Gallery 5.x before 5.x-4.2, a module for Drupal, allows remote authenticated users with permissions to inject arbitrary web script or HTML via unspecified vectors related to posting of answers. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45636 - http://secunia.com/advisories/32106 - http://drupal.org/node/315919 - http://www.securityfocus.com/bid/31554
CVE ID: CVE-2008-4531 State: PUBLISHED Published: 2008-10-09T18:00:00 Last Updated: 2024-08-07T10:17:09.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Brilliant Gallery 5.x before 5.x-4.2, a module for Drupal, allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to queries. NOTE: this might be the same issue as CVE-2008-4338. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32106 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45637 - http://drupal.org/node/315919 - http://www.securityfocus.com/bid/31554
CVE ID: CVE-2008-4532 State: PUBLISHED Published: 2008-10-09T18:00:00 Last Updated: 2024-08-07T10:17:09.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in MaxiScript Website Directory allows remote attackers to inject arbitrary web script or HTML via the keyword parameter in a search action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32176 - http://securityreason.com/securityalert/4393 - http://www.securityfocus.com/archive/1/496967/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/45657 - http://www.securityfocus.com/bid/31562
CVE ID: CVE-2008-4533 State: PUBLISHED Published: 2008-10-10T10:00:00 Last Updated: 2024-08-07T10:17:09.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Kantan WEB Server 1.8 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN94163107/index.html - http://www.securityfocus.com/bid/31244 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45242 - http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000060.html - http://secunia.com/advisories/31917 - http://www.osvdb.org/48222
CVE ID: CVE-2008-4534 State: PUBLISHED Published: 2008-10-10T18:00:00 Last Updated: 2024-08-07T10:17:09.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in EC-CUBE Ver2 2.1.2a and earlier, and Ver2 RC 2.3.0-rc1 and earlier, allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31509 - http://jvn.jp/en/jp/JVN81111541/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/45593 - http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000065.html - http://secunia.com/advisories/32065 - http://www.ec-cube.net/info/080829
CVE ID: CVE-2008-4535 State: PUBLISHED Published: 2008-10-10T18:00:00 Last Updated: 2024-08-07T10:17:09.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in EC-CUBE Ver2 2.1.2a and earlier, EC-CUBE Ver2 Beta(RC) 2.2.0-beta and earlier, and EC-CUBE Community Edition Nighly-Build r17623 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-4536 and CVE-2008-4537. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31509 - http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000064.html - http://jvn.jp/en/jp/JVN99916563/ind
yfocus.com/bid/31509 - http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000064.html - http://jvn.jp/en/jp/JVN99916563/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/45591 - http://www.ec-cube.net/release/detail.php?release_id=193 - http://secunia.com/advisories/32065
CVE ID: CVE-2008-4536 State: PUBLISHED Published: 2008-10-10T18:00:00 Last Updated: 2024-08-07T10:17:10.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in EC-CUBE Ver1 1.4.6 and earlier, Ver1 Beta 1.5.0-beta and earlier, Ver2 2.1.2a and earlier, Ver2 Beta(RC) 2.2.0-beta and earlier, Community Edition 1.3.4 and earlier, and Community Edition Nightly-Build r17319 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-4535 and CVE-2008-4537. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31509 - https://exchange.
itional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31509 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45850 - http://jvn.jp/en/jp/JVN36085487/index.html - http://www.ec-cube.net/release/detail.php?release_id=193 - http://secunia.com/advisories/32065
CVE ID: CVE-2008-4537 State: PUBLISHED Published: 2008-10-10T18:00:00 Last Updated: 2024-08-07T10:17:09.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in EC-CUBE Ver1 1.4.6 and earlier, Ver1 Beta 1.5.0-beta and earlier, Ver2 2.1.2a and earlier, Ver2 Beta(RC) 2.1.1-beta and earlier, Community Edition 1.3.4 and earlier, and Community Edition Nightly-Build r17336 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-4535 and CVE-2008-4536. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31509 - https://exchange.
itional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/31509 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45851 - http://jvn.jp/en/jp/JVN26621646/index.html - http://www.ec-cube.net/release/detail.php?release_id=193 - http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000062.html - http://secunia.com/advisories/32065
CVE ID: CVE-2008-4539 State: PUBLISHED Published: 2008-12-29T15:00:00 Last Updated: 2024-08-07T10:17:09.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Cirrus VGA implementation in (1) KVM before kvm-82 and (2) QEMU on Debian GNU/Linux and Ubuntu might allow local users to gain privileges by using the VNC console for a connection, aka the LGD-54XX "bitblt" heap overflow. NOTE: this issue exists because of an incorrect fix for CVE-2007-1320. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35062 - http://www.mail-archive.com/secure-testing-commits%40lists.alioth.debian.org/msg09322.html - http://ww
dvisories/35062 - http://www.mail-archive.com/secure-testing-commits%40lists.alioth.debian.org/msg09322.html - http://www.mail-archive.com/cvs-all%40freebsd.org/msg129730.html - https://www.redhat.com/archives/fedora-package-announce/2008-December/msg01223.html - http://secunia.com/advisories/25073 - http://secunia.com/advisories/34642 - https://bugzilla.redhat.com/show_bug.cgi?id=466890 - http://www.ubuntu.com/usn/usn-776-1 - http://secunia.com/advisories/33350 - https://bugzilla.redhat.com/show_bug.cgi?id=448525 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47736 - https://bugzilla.redhat.com/show_bug.cgi?id=237342 - http://lists.opensuse.org/opensuse-security-announce/2009-04/msg
- https://bugzilla.redhat.com/show_bug.cgi?id=237342 - http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html - http://secunia.com/advisories/29129 - http://svn.savannah.gnu.org/viewvc/?view=rev&root=qemu&revision=5587 - http://www.debian.org/security/2009/dsa-1799 - http://groups.google.com/group/linux.debian.changes.devel/msg/9e0dc008572f2867?dmode=source - http://git.kernel.dk/?p=qemu.git%3Ba=commitdiff%3Bh=65d35a09979e63541afc5bfc595b9f1b1b4ae069 - http://secunia.com/advisories/35031 - https://launchpad.net/ubuntu/jaunty/+source/qemu/0.9.1+svn20081112-1ubuntu1
CVE ID: CVE-2008-4540 State: PUBLISHED Published: 2008-10-13T18:00:00 Last Updated: 2024-08-07T10:17:09.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: Windows Mobile 6 on the HTC Hermes device makes WLAN passwords available to an auto-completion mechanism for the password input field, which allows physically proximate attackers to bypass password authentication and obtain WLAN access. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4402 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45857 - http://www.securityfocus.com/archive/1/497151/100/0/threaded
CVE ID: CVE-2008-4541 State: PUBLISHED Published: 2008-10-13T18:00:00 Last Updated: 2024-08-07T10:17:09.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the FTP subsystem in Sun Java System Web Proxy Server 4.0 through 4.0.7 allows remote attackers to execute arbitrary code via a crafted HTTP GET request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45782 - http://www.securityfocus.com/bid/31691 - http://secunia.com/advisories/32227 - http://securitytracker.com/id?1021038 - http://www.vupen.com/english/advisories/2008/2781 - http://labs.idefense.com/intelligence/vulnerabiliti
com/id?1021038 - http://www.vupen.com/english/advisories/2008/2781 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=747 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-242986-1
CVE ID: CVE-2008-4542 State: PUBLISHED Published: 2008-10-13T18:00:00 Last Updated: 2024-08-07T10:17:09.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cisco Unity 4.x before 4.2(1)ES162, 5.x before 5.0(1)ES56, and 7.x before 7.0(2)ES8 allows remote authenticated administrators to inject arbitrary web script or HTML by entering it in the database (aka data store). Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/45744 - http://www.voipshield.com/research-details.php?id=127 - http://www.securityfocus.com/bid/31642 - http://securitytracker.com/id?1021012 - http://sec
esearch-details.php?id=127 - http://www.securityfocus.com/bid/31642 - http://securitytracker.com/id?1021012 - http://secunia.com/advisories/32207 - http://www.vupen.com/english/advisories/2008/2771 - http://www.cisco.com/en/US/products/products_security_response09186a0080a0d861.html
CVE ID: CVE-2008-4543 State: PUBLISHED Published: 2008-10-13T18:00:00 Last Updated: 2024-08-07T10:17:09.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8, when using anonymous authentication (aka native Unity authentication), allows remote attackers to cause a denial of service (session exhaustion) via a large number of connections. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32187 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45743 - http://securitytracker.com/id?1021013 - http://www.securityfocus.com/bid/31642 - http://www.vupen.com/e
bilities/45743 - http://securitytracker.com/id?1021013 - http://www.securityfocus.com/bid/31642 - http://www.vupen.com/english/advisories/2008/2771 - http://www.cisco.com/en/US/products/products_security_response09186a0080a0d861.html - http://www.voipshield.com/research-details.php?id=128
CVE ID: CVE-2008-4544 State: PUBLISHED Published: 2008-10-13T18:00:00 Last Updated: 2024-08-07T10:17:10.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in an unspecified Microsoft API, as used by Cisco Unity and possibly other products, allows remote attackers to cause a denial of service by sending crafted packets to dynamic UDP ports, related to a "processing error." Additional Analyst Notes: - CVE Program Container: References: - http://www.voipshield.com/research-details.php?id=129 - http://www.securityfocus.com/bid/31642 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45746 - http://www.vupen.com/english/advisories/2008/2771 - http://secu
s://exchange.xforce.ibmcloud.com/vulnerabilities/45746 - http://www.vupen.com/english/advisories/2008/2771 - http://securitytracker.com/id?1021020 - http://www.cisco.com/en/US/products/products_security_response09186a0080a0d861.html
CVE ID: CVE-2008-4545 State: PUBLISHED Published: 2008-10-13T18:00:00 Last Updated: 2024-08-07T10:17:09.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8 uses weak permissions for the D:\CommServer\Reports directory, which allows remote authenticated users to obtain sensitive information by reading files in this directory. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/32187 - http://www.voipshield.com/research-details.php?id=130 - http://www.securityfocus.com/bid/31642 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45742 - http://securityt
- http://www.securityfocus.com/bid/31642 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45742 - http://securitytracker.com/id?1021022 - http://www.vupen.com/english/advisories/2008/2771 - http://www.cisco.com/en/US/products/products_security_response09186a0080a0d861.html
CVE ID: CVE-2008-4546 State: PUBLISHED Published: 2008-10-14T15:00:00 Last Updated: 2024-08-07T10:17:10.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows remote web servers to cause a denial of service (NULL pointer dereference and browser crash) by returning a different response when an HTTP request is sent a second time, as demonstrated by two responses that provide SWF files with different SWF version numbers. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4401 - http://www.vupen.com/english/advisories/2011/0192 -
ainer: References: - http://securityreason.com/securityalert/4401 - http://www.vupen.com/english/advisories/2011/0192 - http://www.vupen.com/english/advisories/2010/1421 - http://support.apple.com/kb/HT4435 - http://secunia.com/advisories/40545 - http://www.redhat.com/support/errata/RHSA-2010-0464.html - http://www.vupen.com/english/advisories/2010/1793 - http://secunia.com/advisories/43026 - http://www.vupen.com/english/advisories/2010/1432 - http://security.gentoo.org/glsa/glsa-201101-09.xml - http://www.us-cert.gov/cas/techalerts/TA10-162A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7187 - http://lists.apple.com/archives/security-announce/
org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7187 - http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html - http://securitytracker.com/id?1024085 - http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html - http://securitytracker.com/id?1024086 - http://www.securityfocus.com/archive/1/496929/100/0/threaded - http://www.vupen.com/english/advisories/2010/1434 - https://exchange.xforce.ibmcloud.com/vulnerabilities/45630 - http://www.turbolinux.co.jp/security/2010/TLSA-2010-19j.txt - http://www.mochimedia.com/~matthew/flashcrash/ - http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751 - http://lists.opensuse.org/opensuse-secur