5853 matches found
CVE-2009-4132
CVE-2009-4132 is rejected/not used; duplicate of CVE-2009-4214.
CVE-2009-4054
CVE-2009-3672 affects Microsoft Internet Explorer 6 and 7. The vulnerability stems from improper handling of memory objects by getElementsByTagName for the STYLE tag, leading to a memory corruption that enables remote code execution via mshtml.dll. The issue was originally tracked as CVE-2009-405...
Firefox 3.5.3 Remote Array Overrun (UPDATE)
Please update CVE-2009-1563 BID:36851 and BID:36843 Mozilla has changed credit. http://www.mozilla.org/security/announce/2009/mfsa2009-59.html and add correct CVE: CVE-2009-0689. CVE-2009-1563 shouldn't never exists. It is duplicate...
CVE-2008-4826
CVE-2008-4826 is rejected; duplicate of CVE-2009-3853 and not an active vulnerability entry.
CVE-2009-1563
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2009-0689. Reason: This candidate is a duplicate of CVE-2009-0689. Certain codebase relationships were not originally clear. Notes: All CVE users should reference CVE-2009-0689 instead of this candidate. All references and...
CVE-2009-1563
CVE-2009-0689 is the active vulnerability; CVE-2009-1563 is a duplicate. Connected advisories show this flaw affects multiple projects via a boundary/array-index condition in floating-point conversion code (e.g., Mono’s string-to-double parser) that may crash and, in some contexts, allow arbitrar...
CVE-2009-3454
CVE-2009-2510 describes a spoofing vulnerability in the Windows CryptoAPI where the Common Name (CN) field in X.509 certificates containing a NULL terminator is misparsed, allowing MITM-style impersonation if a malicious cert is issued by a trusted CA. The issue affects multiple Windows versions ...
CVE-2009-3239
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2009-2139, CVE-2009-2140. Reason: This candidate is a duplicate of CVE-2009-2139 and CVE-2009-2140. Notes: All CVE users should reference CVE-2009-2139 and CVE-2009-2140 instead of this candidate. All references and descriptions i...
CVE-2009-3239
CVE-2009-3239 is rejected/not used; refer to CVE-2009-2139 and CVE-2009-2140.
Live For Speed S2 - Duplicate Join Packet Remote Denial of Service
Live For Speed S2 - Duplicate Join Packet Remote Denial of Service source: https://www.securityfocus.com/bid/36114/info Live For Speed S2 is prone to a remote denial-of-service vulnerability because the application fails to handle exceptional conditions. An attacker could exploit this issue to...
CVE-2009-2962
CVE-2009-2692 is a Linux kernel local privilege-escalation/DoS flaw arising from SOCKOPS_WRAP not initializing the sendpage operation in proto_ops, enabling a local user to escalate privileges via sock_sendpage(). Public references indicate affected kernel 2.4/2.6 platforms; exploits exist (e.g.,...
CVE-2009-2845
The CVE-2009-2768 entry describes a vulnerability in the Linux kernel flat subsystem (fs/binfmt_flat.c: load_flat_shared_library) prior to 2.6.31-rc6. Local users could trigger a denial of service by executing a shared flat binary, causing a NULL pointer dereference and a system crash (potential ...
CVE-2009-0907
CVE-2009-0907 is rejected/not used and does not represent an active vulnerability entry.
CVE-2009-2086
CVE-2009-2086 is rejected/not used; duplicate of CVE-2009-1900.
CVE-2009-2580
CVE-2009-2580 is rejected and not used; duplicates CVE-2009-1862.
CVE-2009-2315
CVE-2009-2315 is a duplicate entry of CVE-2009-2204 and has concrete details in connected sources about an Apple iPhone OS memory-corruption vulnerability. The issue affects CoreTelephony in iPhone OS prior to 3.0.1 and can be triggered by a specially crafted SMS, enabling remote code execution, ...
CVE-2009-2259
CVE-2009-2259 is a duplicate of CVE-2009-2608 and should reference that entry. Connected records confirm that PHP Address Book 4.0.x contains multiple SQL injection vulnerabilities exploitable via delete.php (id) or index.php (alphabet), enabling remote arbitrary SQL commands. The root cause is u...
XSS vulnerability in space name when page move would create a duplicate
Create a space called alert"XSS"; Find a page named 'Home' in a different space Move this page, choosing the previously created space as the destination The move will fail due to the duplicate page name, and the script will be run...
XSS vulnerability in space name when page move would create a duplicate
Create a space called alert"XSS"; Find a page named 'Home' in a different space Move this page, choosing the previously created space as the destination The move will fail due to the duplicate page name, and the script will be run...