https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 14:40:27 +0000 https://cve.radiocsirt.org/vuln/bdu:2015-11527 bdu:2015-11527 https://cve.radiocsirt.org/vuln/bdu:2015-11527 https://cve.radiocsirt.org/vuln/certfr-2015-avi-404 certfr-2015-avi-404 https://cve.radiocsirt.org/vuln/certfr-2015-avi-404 https://cve.radiocsirt.org/vuln/cnvd-2015-06273 cnvd-2015-06273 https://cve.radiocsirt.org/vuln/cnvd-2015-06273 https://cve.radiocsirt.org/vuln/euvd-2026-93480 EUVD-2026-93480 https://cve.radiocsirt.org/vuln/euvd-2026-93480 https://cve.radiocsirt.org/vuln/fkie_cve-2015-5571 <p>Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK &amp; Compiler before 19.0.0.190 do not properly restrict the SWF file format, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks against JSONP endpoints, and obtain sensitive information, via a crafted OBJECT element with SWF content satisfying the character-set requirements of a callback API. NOTE: this issue exists because of an incomplete fix for CVE-2014-4671 and CVE-2014-5333.</p> <p>Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK &amp; Compiler before 19.0.0.190 do not properly restrict the SWF file format, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks against JSONP endpoints, and obtain sensitive information, via a crafted OBJECT element with SWF content satisfying the character-set requirements of a callback API. NOTE: this issue exists because of an incomplete fix for CVE-2014-4671 and CVE-2014-5333.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-5571 https://cve.radiocsirt.org/vuln/ghsa-9rw6-x6f2-42c3 <p>Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK &amp; Compiler before 19.0.0.190 do not properly restrict the SWF file format, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks against JSONP endpoints, and obtain sensitive information, via a crafted OBJECT element with SWF content satisfying the character-set requirements of a callback API. NOTE: this issue exists because of an incomplete fix for CVE-2014-4671 and CVE-2014-5333.</p> <p>Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK &amp; Compiler before 19.0.0.190 do not properly restrict the SWF file format, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks against JSONP endpoints, and obtain sensitive information, via a crafted OBJECT element with SWF content satisfying the character-set requirements of a callback API. NOTE: this issue exists because of an incomplete fix for CVE-2014-4671 and CVE-2014-5333.</p> https://cve.radiocsirt.org/vuln/ghsa-9rw6-x6f2-42c3 https://cve.radiocsirt.org/vuln/gsd-2015-5571 gsd-2015-5571 https://cve.radiocsirt.org/vuln/gsd-2015-5571 https://cve.radiocsirt.org/vuln/rhsa-2015:1814 <p>flash-plugin: multiple code execution issues fixed in APSB15-23 flash-plugin: information leaks and hardening bypass fixed in APSB15-23 flash-plugin: multiple code execution issues fixed in APSB15-23 flash-plugin: information leaks and hardening bypass fixed in APSB15-23 flash-plugin: information leaks and hardening bypass fixed in APSB15-23 flash-plugin: multiple code execution issues fixed in APSB15-23 flash-plugin: multiple code execution issues fixed in APSB15-23 flash-plugin: multiple code execution issues fixed in APSB15-23 flash-plugin: information leaks and hardening bypass fixed in APSB15-23 flash-plugin: multiple code execution issues fixed in APSB15-23 flash-plugin: multiple code execution issues fixed in APSB15-23 flash-plugin: multiple code execution issues fixed in APSB15-23 flash-plugin: multiple code execution issues fixed in APSB15-23 flash-plugin: multiple code execution issues fixed in APSB15-23 flash-plugin: multiple code execution issues fixed in APSB15-23 flash-plugin: multiple code execution issues fixed in APSB15-23 flash-plugin: multiple code execution issues fixed in APSB15-23 flash-plugin: multiple code execution issues fixed in APSB15-23 flash-plugin: multiple code execution issues fixed in APSB15-23 flash-plugin: multiple code execution issues fixed in APSB15-23 flash-plugin: multiple code execution issues fixed in APSB15-23 flash-plugin: information leaks and hardening bypass fixed in APSB15-23 flash-plugin: multiple code execution issues fixed…</p> <p>flash-plugin: multiple code execution issues fixed in APSB15-23 flash-plugin: information leaks and hardening bypass fixed in APSB15-23 flash-plugin: multiple code execution issues fixed in APSB15-23 flash-plugin: information leaks and hardening bypass fixed in APSB15-23 flash-plugin: information leaks and hardening bypass fixed in APSB15-23 flash-plugin: multiple code execution issues fixed in APSB15-23 flash-plugin: multiple code execution issues fixed in APSB15-23 flash-plugin: multiple code execution issues fixed in APSB15-23 flash-plugin: information leaks and hardening bypass fixed in APSB15-23 flash-plugin: multiple code execution issues fixed in APSB15-23 flash-plugin: multiple code execution issues fixed in APSB15-23 flash-plugin: multiple code execution issues fixed in APSB15-23 flash-plugin: multiple code execution issues fixed in APSB15-23 flash-plugin: multiple code execution issues fixed in APSB15-23 flash-plugin: multiple code execution issues fixed in APSB15-23 flash-plugin: multiple code execution issues fixed in APSB15-23 flash-plugin: multiple code execution issues fixed in APSB15-23 flash-plugin: multiple code execution issues fixed in APSB15-23 flash-plugin: multiple code execution issues fixed in APSB15-23 flash-plugin: multiple code execution issues fixed in APSB15-23 flash-plugin: multiple code execution issues fixed in APSB15-23 flash-plugin: information leaks and hardening bypass fixed in APSB15-23 flash-plugin: multiple code execution issues fixed…</p> https://cve.radiocsirt.org/vuln/rhsa-2015:1814 https://cve.radiocsirt.org/vuln/suse-su-2015:1614-1 <p>Security update for flash-player</p> <p>Security update for flash-player</p> https://cve.radiocsirt.org/vuln/suse-su-2015:1614-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-5571 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: flashplugin-nonfree</p> <p>Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK &amp; Compiler before 19.0.0.190 do not properly restrict the SWF file format, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks against JSONP endpoints, and obtain sensitive information, via a crafted OBJECT element with SWF content satisfying the character-set requirements of a callback API. NOTE: this issue exists because of an incomplete fix for CVE-2014-4671 and CVE-2014-5333.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: flashplugin-nonfree</p> <p>Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK &amp; Compiler before 19.0.0.190 do not properly restrict the SWF file format, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks against JSONP endpoints, and obtain sensitive information, via a crafted OBJECT element with SWF content satisfying the character-set requirements of a callback API. NOTE: this issue exists because of an incomplete fix for CVE-2014-4671 and CVE-2014-5333.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-5571