https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:32:04 +0000 https://cve.radiocsirt.org/vuln/certa-2007-avi-553 certa-2007-avi-553 https://cve.radiocsirt.org/vuln/certa-2007-avi-553 https://cve.radiocsirt.org/vuln/euvd-2026-137130 EUVD-2026-137130 https://cve.radiocsirt.org/vuln/euvd-2026-137130 https://cve.radiocsirt.org/vuln/fkie_cve-2007-5275 <p>The Adobe Macromedia Flash 9 plug-in allows remote attackers to cause a victim machine to establish TCP sessions with arbitrary hosts via a Flash (SWF) movie, related to lack of pinning of a hostname to a single IP address after receiving an allow-access-from element in a cross-domain-policy XML document, and the availability of a Flash Socket class that does not use the browser&#39;s DNS pins, aka DNS rebinding attacks, a different issue than CVE-2002-1467 and CVE-2007-4324.</p> <p>The Adobe Macromedia Flash 9 plug-in allows remote attackers to cause a victim machine to establish TCP sessions with arbitrary hosts via a Flash (SWF) movie, related to lack of pinning of a hostname to a single IP address after receiving an allow-access-from element in a cross-domain-policy XML document, and the availability of a Flash Socket class that does not use the browser&#39;s DNS pins, aka DNS rebinding attacks, a different issue than CVE-2002-1467 and CVE-2007-4324.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2007-5275 https://cve.radiocsirt.org/vuln/ghsa-pwqr-x6x9-wjxj <p>The Adobe Macromedia Flash 9 plug-in allows remote attackers to cause a victim machine to establish TCP sessions with arbitrary hosts via a Flash (SWF) movie, related to lack of pinning of a hostname to a single IP address after receiving an allow-access-from element in a cross-domain-policy XML document, and the availability of a Flash Socket class that does not use the browser&#39;s DNS pins, aka DNS rebinding attacks, a different issue than CVE-2002-1467 and CVE-2007-4324.</p> <p>The Adobe Macromedia Flash 9 plug-in allows remote attackers to cause a victim machine to establish TCP sessions with arbitrary hosts via a Flash (SWF) movie, related to lack of pinning of a hostname to a single IP address after receiving an allow-access-from element in a cross-domain-policy XML document, and the availability of a Flash Socket class that does not use the browser&#39;s DNS pins, aka DNS rebinding attacks, a different issue than CVE-2002-1467 and CVE-2007-4324.</p> https://cve.radiocsirt.org/vuln/ghsa-pwqr-x6x9-wjxj https://cve.radiocsirt.org/vuln/gsd-2007-5275 gsd-2007-5275 https://cve.radiocsirt.org/vuln/gsd-2007-5275 https://cve.radiocsirt.org/vuln/rhsa-2007:1126 <p>Flash movie can determine whether a TCP port is open : pcre before 7.3 incorrect unicode in char class optimization Flash plugin DNS rebinding flash: abitrary code execution Flash Player cross-domain and cross-site scripting flaws flash: XSS via asfunction protocol flash: HTTP headers modification flash: privilege escalation</p> <p>Flash movie can determine whether a TCP port is open : pcre before 7.3 incorrect unicode in char class optimization Flash plugin DNS rebinding flash: abitrary code execution Flash Player cross-domain and cross-site scripting flaws flash: XSS via asfunction protocol flash: HTTP headers modification flash: privilege escalation</p> https://cve.radiocsirt.org/vuln/rhsa-2007:1126