GCVE - cpe:2.3:a:lunascape:lunascape:5.1.4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:lunascape:lunascape:5.1.4:*:*:*:*:*:*:*

part: a version: 5.1.4 update: *

Vendor	Lunascape (`86946dc3-be7a-53f9-a1bc-dde65d90a433`)
Product	Lunascape (`f67dc3e1-eeec-5e02-b89c-a10cfa79cefe`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-0452`	vulnerable	2026-06-08 04:56:37.260251	Details available Untrusted search path vulnerability in the script function in Lunascape before 6.4.3 allows local users to gain privileges via a Trojan horse executable file in the current working directory. Published: 2011-02-24T20:00:00.000Z Updated: 2024-08-06T21:51:08.960Z Open on db.gcve.eu Reference links http://jvn.jp/en/jp/JVN38362957/ http://lunapedia.lunascape.jp/index.php?title=Lunascape6#2011.2F02.2F18_ver_6.4.3 http://secunia.com/advisories/43441 https://exchange.xforce.ibmcloud.com/vulnerabilities/65592 http://jvndb.jvn.jp/en/contents/2011/JVNDB-2011-000012.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-3927`	vulnerable	2026-06-08 04:55:18.078034	Details available Untrusted search path vulnerability in Lunascape before 6.4.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory. Published: 2011-01-24T17:00:00.000Z Updated: 2024-08-07T03:26:12.205Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/45945 http://lunapedia.lunascape.jp/index.php?title=Lunascape6#2011.2F01.2F19_ver_6.4.1 http://jvn.jp/en/jp/JVN94695018/296426/index.html https://exchange.xforce.ibmcloud.com/vulnerabilities/64849 http://help.lunascape.tv/LunascapeHelp-en/page.aspx?pageid=ver_6_4_11	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3005`	vulnerable	2026-06-08 04:51:31.795849	Details available Lunascape 5.1.3 and 5.1.4 allows remote attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary URL on the web site visited by the victim, as demonstrated by a visit to an attacker-controlled web page, which triggers a spoofed login form for the site containing that page. NOTE: a related attack was reported in which an arbitrary file: URL is shown. Published: 2009-08-28T15:00:00.000Z Updated: 2024-08-07T06:14:55.219Z Open on db.gcve.eu Reference links http://lostmon.blogspot.com/2009/08/multiple-browsers-fake-url-folder-file.html https://exchange.xforce.ibmcloud.com/vulnerabilities/53008	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.