34 matches found
DEBIAN-CVE-2009-10007
Catalyst::Plugin::Authentication versions before 0.10027 for Perl is susceptible to session fixation attacks. Catalyst::Plugin::Authentication does not automatically change the session id after authentication. An attacker that obtains a session id cookie can use this to impersonate the victim...
CVE-2009-2843
creationtimestamp| type| source ---|---|--- 2025-08-31 03:01:21+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d...
Low: Red Hat Security Advisory: openldap security update
An update for openldap is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
CVE-2022-2985
In music service, there is a missing permission check. This could lead to elevation of privilege in contacts service with no additional execution privileges needed...
CVE-2009-3616
creationtimestamp| type| source ---|---|--- 2024-02-16 02:16:32+00:00| seen| https://t.me/ctinow/186057...
CVE-2021-29052
Affected products: Liferay Portal 7.3.0–7.3.5 and Liferay DXP 7.3 before fix pack 1. Issue: Data Engine module fails to check permissions in DataDefinitionResourceImpl.getSiteDataDefinitionByContentTypeByDataDefinitionKey, enabling remote authenticated users to view DDMStructures via GET API call...
CVE-2009-20004
creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/galanfileformatbof.rb 2025-08-22 00:28:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwx76fgmoa22 2025-10-...
BELL-CVE-2009-5064 CVE-2009-5064 does not affect BellSoft software
Bulletin has no description...
acroread: media.newplayer JavaScript API code execution vulnerability (APSB10-02)
Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted PDF file using ZLib compressed streams, as exploited in the wild...
CVE-2009-4096
creationtimestamp| type| source ---|---|--- 2009-11-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10231...
CVE-2009-0795
creationtimestamp| type| source ---|---|--- 2009-11-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9993...
CVE-2009-3499
creationtimestamp| type| source ---|---|--- 2009-09-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9834...
CVE-2009-3241
creationtimestamp| type| source ---|---|--- 2009-09-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33222...
CVE-2009-3208
creationtimestamp| type| source ---|---|--- 2009-08-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9465...
flash-plugin: Remote code execution vulnerability via malicious SWF (Shockwave Flash) content
Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0.22.87, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via 1 a crafted Flash application in a .pdf file or 2...
CVE-2009-3535
creationtimestamp| type| source ---|---|--- 2009-07-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9089...
CVE-2008-0015
Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library ATL, as used in the MPEG2TuneRequest ActiveX control in msvidctl.dll in DirectShow, in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold...
IMG-BBS from MT312 vulnerable to cross-site scripting
Overview IMG-BBS from MT312 contains a cross-site scripting vulnerability. IMG-BBS from MT312, is a web log system that supports posting picture files via email from a mobile phone. IMG-BBS contains a cross-site scripting vulnerability. Note that versions of IMG-BBS imgbbs.lzh that contain...