Lucene search
K

16 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2008-3858

Malware in sbrugna...

9.3CVSS6.3AI score0.02149EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2021-31413

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.00368EPSS
Exploits1References2
Veracode
Veracode
added 2025/02/26 12:19 a.m.6 views

Denial Of Service (DoS)

libming.so is vulnerable to Denial Of Service DoS. The vulnerability is due to a memory leak in the parseSWFFILTERLIST function in util/parser.c and by improper memory management when processing crafted SWF files, allowing attackers to exhaust system memory and trigger a denial of service...

6.5CVSS6.6AI score0.00336EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2025/02/20 5:15 p.m.5 views

CVE-2025-26311

Multiple memory leaks have been identified in the clip actions parsing functions parseSWFCLIPACTIONS and parseSWFCLIPACTIONRECORD in util/parser.c of libming v0.4.8, which allow attackers to cause a denial of service via a crafted SWF file...

6.5CVSS7AI score
Exploits0References1
OSV
OSV
added 2025/02/20 5:15 p.m.4 views

CVE-2025-26309

A memory leak has been identified in the parseSWFDEFINESCENEANDFRAMEDATA function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service via a crafted SWF file...

6.5CVSS6.8AI score
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/02/20 12:0 a.m.9 views

CVE-2025-26311

Multiple memory leaks have been identified in the clip actions parsing functions parseSWFCLIPACTIONS and parseSWFCLIPACTIONRECORD in util/parser.c of libming v0.4.8, which allow attackers to cause a denial of service via a crafted SWF file...

6.4AI score0.00431EPSS
Exploits1References1
SUSE CVE
SUSE CVE
added 2023/02/15 6:9 a.m.2 views

SUSE CVE-2007-6637

Multiple cross-site scripting XSS vulnerabilities in Adobe Flash Player allow remote attackers to inject arbitrary web script or HTML via a crafted SWF file, related to "pre-generated SWF files" and Adobe Dreamweaver CS3 or Adobe Acrobat Connect. NOTE: the asfunction: vector is already covered by...

4.3CVSS5.8AI score0.38242EPSS
Exploits1References4
CNNVD
CNNVD
added 2021/09/20 12:0 a.m.1 views

swftools 缓冲区错误漏洞

SWFTools is a collection of utilities to work with Adobe Flash files SWF files. SWFTools suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to cause code execution...

7.8CVSS7.9AI score0.00451EPSS
Exploits1References1
CNVD
CNVD
added 2017/08/09 12:0 a.m.1 views

Adobe Flash Player Type Obfuscation Remote Code Execution Vulnerability

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A type-obfuscated remote code execution vulnerability exists in Adobe Flash Player 26.0.0.137 and prior versions...

9.3CVSS9.5AI score0.53254EPSS
Exploits2References1
Check Point Advisories
Check Point Advisories
added 2015/12/17 12:0 a.m.1 views

Adobe Flash Player Integer Overflow Remote Code Execution (APSB15-32: CVE-2015-8445)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a design flaw that could lead to integer overflow. A remote attacker can exploit this vulnerability by enticing a victim to open specially crafted SWF files...

9.3CVSS4.7AI score0.06287EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2015/10/06 12:0 a.m.1 views

Vulnerability of the Flash Player and Adobe Integrated Runtime software platforms, which allows attackers to access protected information

The vulnerability of the Flash Player and Adobe Integrated Runtime software platforms is related to the lack of protection for service data. Exploiting this vulnerability can allow attackers, operating remotely, to gain access to protected information by conducting attacks based on manipulating...

4.3CVSS0.01366EPSS
Exploits3References2Affected Software2
Check Point Advisories
Check Point Advisories
added 2015/08/12 12:0 a.m.3 views

Adobe Flash Player Use After Free Code Execution (APSB15-19: CVE-2015-3107; CVE-2015-5565)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a use-after-free error while loading specially crafted SWF files. A remote attacker can exploit this issue by enticing the victim to open a specially crafted SWF file...

10CVSS3.5AI score0.50806EPSS
Exploits4
Check Point Advisories
Check Point Advisories
added 2015/06/09 12:0 a.m.2 views

Adobe Flash Player Out of Bounds Memory Corruption (APSB15-11: CVE-2015-3105)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an out-of-bounds memory write while handling specially crafted SWF files. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file...

10CVSS3AI score0.90264EPSS
Exploits4
RedHat Linux
RedHat Linux
added 2008/04/08 11:28 p.m.1 views

Flash Player content injection flaw

Multiple cross-site scripting XSS vulnerabilities in Adobe Flash Player allow remote attackers to inject arbitrary web script or HTML via a crafted SWF file, related to "pre-generated SWF files" and Adobe Dreamweaver CS3 or Adobe Acrobat Connect. NOTE: the asfunction: vector is already covered by...

4.3CVSS5.8AI score0.69076EPSS
Exploits2References4
Prion
Prion
added 2008/01/04 12:46 a.m.26 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Adobe Flash Player allow remote attackers to inject arbitrary web script or HTML via a crafted SWF file, related to "pre-generated SWF files" and Adobe Dreamweaver CS3 or Adobe Acrobat Connect. NOTE: the asfunction: vector is already covered by...

4.3CVSS5.5AI score0.69076EPSS
Exploits2References18Affected Software1
CVE
CVE
added 2006/03/23 11:0 p.m.61 views

CVE-2006-0323

RealPlayer/RealOne (including RealPlayer 10.x, RealOne Player, Rhapsody 3, and Helix Player) are affected by CVE-2006-0323 due to a buffer overflow when processing malformed SWF (Flash) files. The underlying issue is an improper validation/parsing of SWF content, allowing a remote attacker to exe...

9.3CVSS7.5AI score0.68467EPSS
Exploits11References15Affected Software4
Rows per page
Query Builder