CVSS: 9.1EPSS: 0%CPEs: 3EXPL: 0CVE-2009-0521 – flash-plugin: Linux-specific information disclosure (privilege escalation)
https://notcve.org/view.php?id=CVE-2009-0521
26 Feb 2009 — Untrusted search path vulnerability in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 on Linux allows local users to obtain sensitive information or gain privileges via a crafted library in a directory contained in the RPATH. Vulnerabilidad de ruta de búsqueda no confiable en Adobe Flash Player 9v.x anteriores a v9.0.159.0 y v10.x anteriores a 10.0.22.87 en Linux que permite a los usuarios locales obtener información sensible o obtener privilegios a través de una librería manipulada en u... • http://isc.sans.org/diary.html?storyid=5929 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 9.3EPSS: 88%CPEs: 7EXPL: 1CVE-2008-5499 – Adobe Flash Player - ActionScript Launch Command Execution
https://notcve.org/view.php?id=CVE-2008-5499
18 Dec 2008 — Unspecified vulnerability in Adobe Flash Player for Linux 10.0.12.36, and 9.0.151.0 and earlier, allows remote attackers to execute arbitrary code via a crafted SWF file. Vulnerabilidad sin especificar en Adobe Flash Player para Linux v10.0.12.36, y v9.0.151.0 y versiones anteriores, permite a atacantes remotos ejecutar código de su elección a través de un fichero SWF manipulado. • https://www.exploit-db.com/exploits/18761 • CWE-94: Improper Control of Generation of Code ('Code Injection') •