DEBIAN-CVE-2009-10007

Catalyst::Plugin::Authentication versions before 0.10027 for Perl is susceptible to session fixation attacks. Catalyst::Plugin::Authentication does not automatically change the session id after authentication. An attacker that obtains a session id cookie can use this to impersonate the victim...

CVE-2009-2843

creationtimestamp| type| source ---|---|--- 2025-08-31 03:01:21+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d...

Low: Red Hat Security Advisory: openldap security update

An update for openldap is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2022-2985

In music service, there is a missing permission check. This could lead to elevation of privilege in contacts service with no additional execution privileges needed...

CVE-2009-3616

creationtimestamp| type| source ---|---|--- 2024-02-16 02:16:32+00:00| seen| https://t.me/ctinow/186057...

CVE-2021-29052

Affected products: Liferay Portal 7.3.0–7.3.5 and Liferay DXP 7.3 before fix pack 1. Issue: Data Engine module fails to check permissions in DataDefinitionResourceImpl.getSiteDataDefinitionByContentTypeByDataDefinitionKey, enabling remote authenticated users to view DDMStructures via GET API call...

CVE-2009-20004

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/galanfileformatbof.rb 2025-08-22 00:28:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwx76fgmoa22 2025-10-...

BELL-CVE-2009-5064 CVE-2009-5064 does not affect BellSoft software

Bulletin has no description...

acroread: media.newplayer JavaScript API code execution vulnerability (APSB10-02)

Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted PDF file using ZLib compressed streams, as exploited in the wild...

CVE-2009-4096

creationtimestamp| type| source ---|---|--- 2009-11-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10231...

CVE-2009-0795

creationtimestamp| type| source ---|---|--- 2009-11-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9993...

CVE-2009-3499

creationtimestamp| type| source ---|---|--- 2009-09-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9834...

CVE-2009-3241

creationtimestamp| type| source ---|---|--- 2009-09-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33222...

CVE-2009-3208

creationtimestamp| type| source ---|---|--- 2009-08-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9465...

flash-plugin: Remote code execution vulnerability via malicious SWF (Shockwave Flash) content

Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0.22.87, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via 1 a crafted Flash application in a .pdf file or 2...

CVE-2009-3535

creationtimestamp| type| source ---|---|--- 2009-07-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9089...

CVE-2008-0015

Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library ATL, as used in the MPEG2TuneRequest ActiveX control in msvidctl.dll in DirectShow, in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold...

IMG-BBS from MT312 vulnerable to cross-site scripting

Overview IMG-BBS from MT312 contains a cross-site scripting vulnerability. IMG-BBS from MT312, is a web log system that supports posting picture files via email from a mobile phone. IMG-BBS contains a cross-site scripting vulnerability. Note that versions of IMG-BBS imgbbs.lzh that contain...

CVE-2009-1846

creationtimestamp| type| source ---|---|--- 2009-05-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8816...

CVE-2009-1607

creationtimestamp| type| source ---|---|--- 2009-05-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8618...