Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-0483 State: PUBLISHED Published: 2014-08-26T14:00:00 Last Updated: 2024-08-06T09:20:18.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administrative interface (contrib.admin) in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not check if a field represents a relationship between models, which allows remote authenticated users to obtain sensitive information via a to_field parameter in a popup action to an admin change form page, as demonstrated by a /admin/auth/user/?pop=1&t=password URI. Additional Analyst Notes: - CVE Program Container: References: - https://www.djangoproject.com/weblog/2014/aug/20
d URI. Additional Analyst Notes: - CVE Program Container: References: - https://www.djangoproject.com/weblog/2014/aug/20/security/ - http://secunia.com/advisories/61276 - http://secunia.com/advisories/61281 - http://lists.opensuse.org/opensuse-updates/2014-09/msg00023.html - http://www.debian.org/security/2014/dsa-3010 - https://github.com/django/django/commit/2b31342cdf14fc20e07c43d258f1e7334ad664a6 - http://secunia.com/advisories/59782
CVE ID: CVE-2014-0484 State: PUBLISHED Published: 2014-09-22T15:00:00 Last Updated: 2024-08-06T09:20:18.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Debian acpi-support package before 0.140-5+deb7u3 allows local users to gain privileges via vectors related to the "user's environment." Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-3020 - http://secunia.com/advisories/61084
CVE ID: CVE-2014-0485 State: PUBLISHED Published: 2014-09-02T14:00:00 Last Updated: 2024-08-06T09:20:18.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: S3QL 1.18.1 and earlier uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object in (1) common.py or (2) local.py in backends/. Additional Analyst Notes: - CVE Program Container: References: - https://bitbucket.org/nikratio/s3ql/commits/091ac263809b4e8 - http://www.debian.org/security/2014/dsa-3013 - http://www.openwall.com/lists/oss-security/2014/08/28/3
CVE ID: CVE-2014-0486 State: PUBLISHED Published: 2018-03-27T16:00:00 Last Updated: 2024-08-06T09:20:18.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: Knot DNS before 1.5.2 allows remote attackers to cause a denial of service (application crash) via a crafted DNS message. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.labs.nic.cz/knot/knot-dns/issues/294 - http://www.securityfocus.com/bid/70097 - https://exchange.xforce.ibmcloud.com/vulnerabilities/96185
CVE ID: CVE-2014-0487 State: PUBLISHED Published: 2014-11-03T22:00:00 Last Updated: 2024-08-06T09:20:18.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: APT before 1.0.9 does not verify downloaded files if they have been modified as indicated using the If-Modified-Since header, which has unspecified impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/61286 - http://secunia.com/advisories/61275 - http://ubuntu.com/usn/usn-2348-1 - http://www.debian.org/security/2014/dsa-3025
CVE ID: CVE-2014-0488 State: PUBLISHED Published: 2014-11-03T22:00:00 Last Updated: 2024-08-06T09:20:18.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: APT before 1.0.9 does not "invalidate repository data" when moving from an unauthenticated to authenticated state, which allows remote attackers to have unspecified impact via crafted repository data. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/61286 - http://secunia.com/advisories/61275 - http://ubuntu.com/usn/usn-2348-1 - http://www.debian.org/security/2014/dsa-3025
CVE ID: CVE-2014-0489 State: PUBLISHED Published: 2014-11-03T22:00:00 Last Updated: 2024-08-06T09:20:18.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: APT before 1.0.9, when the Acquire::GzipIndexes option is enabled, does not validate checksums, which allows remote attackers to execute arbitrary code via a crafted package. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/61286 - http://secunia.com/advisories/61275 - http://ubuntu.com/usn/usn-2348-1 - http://www.debian.org/security/2014/dsa-3025
CVE ID: CVE-2014-0490 State: PUBLISHED Published: 2014-11-03T22:00:00 Last Updated: 2024-08-06T09:20:18.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: The apt-get download command in APT before 1.0.9 does not properly validate signatures for packages, which allows remote attackers to execute arbitrary code via a crafted package. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/61286 - http://secunia.com/advisories/61275 - http://ubuntu.com/usn/usn-2348-1 - http://www.debian.org/security/2014/dsa-3025
CVE ID: CVE-2014-0491 State: PUBLISHED Published: 2014-01-15T02:00:00 Last Updated: 2024-08-06T09:20:18.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 11.7.700.260 and 11.8.x and 11.9.x before 12.0.0.38 on Windows and Mac OS X and before 11.2.202.335 on Linux, Adobe AIR before 4.0.0.1390, Adobe AIR SDK before 4.0.0.1390, and Adobe AIR SDK & Compiler before 4.0.0.1390 allow attackers to bypass unspecified protection mechanisms via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2014-01/msg00006.html - http://rhn.redhat.com/errata/RHSA-2014-0028.html - http://secuni
.org/opensuse-security-announce/2014-01/msg00006.html - http://rhn.redhat.com/errata/RHSA-2014-0028.html - http://secunia.com/advisories/56636 - http://www.securitytracker.com/id/1029602 - http://secunia.com/advisories/56516 - http://helpx.adobe.com/security/products/flash-player/apsb14-02.html
CVE ID: CVE-2014-0492 State: PUBLISHED Published: 2014-01-15T02:00:00 Last Updated: 2024-08-06T09:20:18.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 11.7.700.260 and 11.8.x and 11.9.x before 12.0.0.38 on Windows and Mac OS X and before 11.2.202.335 on Linux, Adobe AIR before 4.0.0.1390, Adobe AIR SDK before 4.0.0.1390, and Adobe AIR SDK & Compiler before 4.0.0.1390 allow attackers to defeat the ASLR protection mechanism by leveraging an "address leak." Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2014-01/msg00006.html - http://rhn.redhat.com/errata/RHSA-2014-0028.html - http:
opensuse.org/opensuse-security-announce/2014-01/msg00006.html - http://rhn.redhat.com/errata/RHSA-2014-0028.html - http://secunia.com/advisories/56636 - http://www.securitytracker.com/id/1029602 - http://secunia.com/advisories/56516 - http://helpx.adobe.com/security/products/flash-player/apsb14-02.html
CVE ID: CVE-2014-0493 State: PUBLISHED Published: 2014-01-15T02:00:00 Last Updated: 2024-08-06T09:20:18.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0.06 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0495. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029604 - http://helpx.adobe.com/security/products/acrobat/apsb14-01.html
CVE ID: CVE-2014-0494 State: PUBLISHED Published: 2014-01-23T19:00:00 Last Updated: 2024-08-06T09:20:18.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Digital Editions 2.0.1 allows attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65091 - http://secunia.com/advisories/56578 - http://www.securitytracker.com/id/1029680 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90648 - http://osvdb.org/102364 - http://helpx.adobe.com/security/products/Digital-Editions/apsb14-03.html
CVE ID: CVE-2014-0495 State: PUBLISHED Published: 2014-01-15T02:00:00 Last Updated: 2024-08-06T09:20:18.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0.06 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0493. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1029604 - http://helpx.adobe.com/security/products/acrobat/apsb14-01.html
CVE ID: CVE-2014-0496 State: PUBLISHED Published: 2014-01-15T02:00:00.000Z Last Updated: 2025-11-21T15:49:18.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0.06 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1029604 - http://helpx.adobe.com/security/products/acrobat/apsb14-01.html
CVE ID: CVE-2014-0497 State: PUBLISHED Published: 2014-02-05T02:00:00.000Z Last Updated: 2025-10-22T00:05:39.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.exploit-db.com/exploits/33212 - http://helpx.adobe.com/security/products/flash-player/apsb14-04.html - http://googlechromereleases.blogspot.com/2014/02/stable-channel-update.html - http://l
cts/flash-player/apsb14-04.html - http://googlechromereleases.blogspot.com/2014/02/stable-channel-update.html - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00006.html - http://rhn.redhat.com/errata/RHSA-2014-0137.html - http://www.osvdb.org/102849 - http://www.securityfocus.com/bid/65327 - http://secunia.com/advisories/56799 - http://www.securitytracker.com/id/1029715 - http://secunia.com/advisories/56737 - http://secunia.com/advisories/56437 - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00001.html - http://secunia.com/advisories/56780 - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00000.html - http://secunia.com/advisories/56839 - h
0 - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00000.html - http://secunia.com/advisories/56839 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90884
CVE ID: CVE-2014-0498 State: PUBLISHED Published: 2014-02-21T02:00:00 Last Updated: 2024-08-06T09:20:19.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 allows attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00015.html - http://security.gentoo.org/glsa
ferences: - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00015.html - http://security.gentoo.org/glsa/glsa-201405-04.xml - http://helpx.adobe.com/security/products/flash-player/apsb14-07.html - http://rhn.redhat.com/errata/RHSA-2014-0196.html - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00017.html - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00014.html
CVE ID: CVE-2014-0499 State: PUBLISHED Published: 2014-02-21T02:00:00 Last Updated: 2024-08-06T09:20:19.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 do not prevent access to address information, which makes it easier for attackers to bypass the ASLR protection mechanism via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2014-02
ional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00015.html - http://security.gentoo.org/glsa/glsa-201405-04.xml - http://helpx.adobe.com/security/products/flash-player/apsb14-07.html - http://rhn.redhat.com/errata/RHSA-2014-0196.html - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00017.html - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00014.html
CVE ID: CVE-2014-0500 State: PUBLISHED Published: 2014-02-12T02:00:00 Last Updated: 2024-08-06T09:20:19.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Shockwave Player before 12.0.9.149 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0501. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/65490 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91007 - http://osvdb.org/103157 - http://secunia.com/advisories/56740 - http://www.securitytracker.com/id/1029740 - http://helpx.adobe.com/security/products/shock
ecunia.com/advisories/56740 - http://www.securitytracker.com/id/1029740 - http://helpx.adobe.com/security/products/shockwave/apsb14-06.html
CVE ID: CVE-2014-0501 State: PUBLISHED Published: 2014-02-12T02:00:00 Last Updated: 2024-08-06T09:20:19.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Shockwave Player before 12.0.9.149 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0500. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/91008 - http://secunia.com/advisories/56740 - http://www.securitytracker.com/id/1029740 - http://www.securityfocus.com/bid/65493 - http://helpx.adobe.com/security/products/shockwave/apsb14-06.html - http
9740 - http://www.securityfocus.com/bid/65493 - http://helpx.adobe.com/security/products/shockwave/apsb14-06.html - http://osvdb.org/103158
CVE ID: CVE-2014-0502 State: PUBLISHED Published: 2014-02-21T02:00:00.000Z Last Updated: 2025-10-22T00:05:38.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2014. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://lists.opensuse.org/open
Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00015.html - https://volatility-labs.blogspot.com/2014/04/building-decoder-for-cve-2014-0502.html - http://security.gentoo.org/glsa/glsa-201405-04.xml - http://helpx.adobe.com/security/products/flash-player/apsb14-07.html - http://rhn.redhat.com/errata/RHSA-2014-0196.html - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00017.html - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00014.html - http://www.alienvault.com/open-threat-exchange/blog/analysis-of-an-attack-exploiting-the-adobe-zero-day-cve-2014-0502
- http://www.alienvault.com/open-threat-exchange/blog/analysis-of-an-attack-exploiting-the-adobe-zero-day-cve-2014-0502/
CVE ID: CVE-2014-0503 State: PUBLISHED Published: 2014-03-12T01:00:00 Last Updated: 2024-08-06T09:20:18.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 11.7.700.272 and 11.8.x through 12.0.x before 12.0.0.77 on Windows and OS X, and before 11.2.202.346 on Linux, allows remote attackers to bypass the Same Origin Policy via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00013.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00014.html - http://helpx.adobe.com/security/products/flash-player/apsb14-08.html - http://security.gentoo.
e/2014-03/msg00014.html - http://helpx.adobe.com/security/products/flash-player/apsb14-08.html - http://security.gentoo.org/glsa/glsa-201405-04.xml - http://rhn.redhat.com/errata/RHSA-2014-0289.html
CVE ID: CVE-2014-0504 State: PUBLISHED Published: 2014-03-12T01:00:00 Last Updated: 2024-08-06T09:20:19.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 11.7.700.272 and 11.8.x through 12.0.x before 12.0.0.77 on Windows and OS X, and before 11.2.202.346 on Linux, allows attackers to read the clipboard via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00013.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00014.html - http://helpx.adobe.com/security/products/flash-player/apsb14-08.html - http://security.gentoo.org/glsa/glsa-2014
.html - http://helpx.adobe.com/security/products/flash-player/apsb14-08.html - http://security.gentoo.org/glsa/glsa-201405-04.xml - http://rhn.redhat.com/errata/RHSA-2014-0289.html
CVE ID: CVE-2014-0505 State: PUBLISHED Published: 2014-03-14T10:00:00 Last Updated: 2024-08-06T09:20:19.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Shockwave Player before 12.1.0.150 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://helpx.adobe.com/security/products/shockwave/apsb14-10.html
CVE ID: CVE-2014-0506 State: PUBLISHED Published: 2014-03-27T10:00:00 Last Updated: 2024-08-06T09:20:19.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allows remote attackers to execute arbitrary code, and possibly bypass an Internet Explorer sandbox protection mechanism, via unspecified vectors, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2014. Additional Analyst Notes:
unspecified vectors, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2014. Additional Analyst Notes: - CVE Program Container: References: - http://twitter.com/thezdi/statuses/443886338077495296 - http://helpx.adobe.com/security/products/flash-player/apsb14-09.html - http://www.pwn2own.com/2014/03/pwn2own-results-for-wednesday-day-one/ - http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00012.html - http://security.gentoo.org/glsa/glsa-201405-04.xml - http://lists.opensuse.org/opensuse-updates/2014-04/msg00036.html - http://rhn.redhat.com/errata/RHSA-2014-0380.html - http://lists.opensuse.org/opensuse-updates/2014-04/msg00050.html
CVE ID: CVE-2014-0507 State: PUBLISHED Published: 2014-04-08T21:00:00 Last Updated: 2024-08-06T09:20:19.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allows attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://helpx.adobe.com/security/products/flash-player/apsb14-09.html - http://lists.opensuse.org/opensuse-security-announce/20
/helpx.adobe.com/security/products/flash-player/apsb14-09.html - http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00012.html - http://security.gentoo.org/glsa/glsa-201405-04.xml - http://lists.opensuse.org/opensuse-updates/2014-04/msg00036.html - http://rhn.redhat.com/errata/RHSA-2014-0380.html - http://lists.opensuse.org/opensuse-updates/2014-04/msg00050.html - http://www.securitytracker.com/id/1030035 - http://www.securityfocus.com/bid/66701
CVE ID: CVE-2014-0508 State: PUBLISHED Published: 2014-04-08T21:00:00 Last Updated: 2024-08-06T09:20:18.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allow attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://helpx.adobe.com/security/products/flash-player/apsb14-09.html - http://lists.opensuse.org/ope
iner: References: - http://helpx.adobe.com/security/products/flash-player/apsb14-09.html - http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00012.html - http://security.gentoo.org/glsa/glsa-201405-04.xml - http://lists.opensuse.org/opensuse-updates/2014-04/msg00036.html - http://rhn.redhat.com/errata/RHSA-2014-0380.html - http://lists.opensuse.org/opensuse-updates/2014-04/msg00050.html - http://www.securitytracker.com/id/1030035
CVE ID: CVE-2014-0509 State: PUBLISHED Published: 2014-04-08T21:00:00 Last Updated: 2024-08-06T09:20:19.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://helpx.adobe.com/security/products/flash-player/apsb14-09.html - http://www
- CVE Program Container: References: - http://helpx.adobe.com/security/products/flash-player/apsb14-09.html - http://www.securityfocus.com/bid/66703 - http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00012.html - http://security.gentoo.org/glsa/glsa-201405-04.xml - http://lists.opensuse.org/opensuse-updates/2014-04/msg00036.html - http://rhn.redhat.com/errata/RHSA-2014-0380.html - http://lists.opensuse.org/opensuse-updates/2014-04/msg00050.html - http://www.securitytracker.com/id/1030035
CVE ID: CVE-2014-0510 State: PUBLISHED Published: 2014-03-27T10:00:00 Last Updated: 2024-08-06T09:20:19.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Adobe Flash Player 12.0.0.77 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism via unspecified vectors, as demonstrated by Zeguang Zhao and Liang Chen during a Pwn2Own competition at CanSecWest 2014. Additional Analyst Notes: - CVE Program Container: References: - http://www.pwn2own.com/2014/03/pwn2own-results-thursday-day-two/ - http://www.securityfocus.com/bid/66241 - http://twitter.com/thezdi/statuses/444262022444621824 - http://security.gentoo.org/glsa