120 matches found
CVE-2018-0320
Cisco Prime Collaboration Provisioning (PCP) SQL Injection (CVE-2018-0320) affects PCP releases 12.1 and earlier. The root cause is lack of proper validation of user-supplied input in SQL queries within the web framework code, enabling an unauthenticated, remote attacker to execute arbitrary SQL ...
CVE-2014-0320
CVE-2014-0320 is rejected/not used; this CVE entry does not represent an active vulnerability.
CVE-2017-0320
Summary: NVIDIA Windows GPU Display Driver vulnerable in the kernel mode layer handler (nvlddmkm.sys) where improper handling of values can cause denial of service. This CVE-2017-0320 is cited among a set of kernel-mode vulnerabilities affecting NVIDIA 375.x/378.x driver branches and related comp...
CVE-2016-0320
IBM UrbanCode Deploy could allow an authenticated user to modify Ucd objects due to multiple REST endpoints not properly authorizing users editing UCD objects. This could affect the behavior of legitimately triggered processes...
Oracle: Security Advisory (ELSA-2011-0320)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Flash Player <= 16.0.0.296 Multiple Vulnerabilities (APSB15-04)
Binary data 8660.prm...
Adobe Flash Use After Free Code Execution (APSB15-04: CVE-2015-0320)
A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially craft...
Adobe Flash Player Unspecified Vulnerability - 01 (Feb 2015) - Mac OS X
Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...
Internet Bug Bounty: Use After Free in Flash MessageChannel.send can cause arbitrary code execution
Sending messages between workers while having the animation reloaded can cause an object to be freed while a reference remains in memory. An attacker can use this issue to control eip and potentially execute arbitrary code. Identified as CVE-2015-0320, and reported to Adobe via Chrome VRP:...
Critical: Red Hat Security Advisory: flash-plugin security update
An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...
CVE-2015-0320
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0313, CVE-2015-0315, and...
Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt41
3:11-alt41 built Feb. 6, 2015 Sergey V Turchin in task 139918 Feb. 6, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-0313, CVE-2015-0314, CVE-2015-0315, CVE-2015-0316, CVE-2015-0317, CVE-2015-0318, CVE-2015-0319, CVE-2015-0320, CVE-2015-0321, CVE-2015-0322, CVE-2015-0323,...
CVE-2015-0320
CVE-2015-0320 is a use-after-free vulnerability in Adobe Flash Player (Windows/macOS: affected before 13.0.0.269 and 14.x before 16.0.0.305; Linux: before 11.2.202.442) that allows remote code execution via a specially crafted SWF file. The connected advisory confirms a remote code execution scen...
Google Chrome < 40.0.2214.111 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 40.0.2214.111. It is, therefore, affected by multiple vulnerabilities as referenced in the 201502stable-channel-update advisory. - The OriginCanAccessServiceWorkers function in...
CVE-2015-0320
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0313, CVE-2015-0315, and...
CVE-2015-0320
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0313, CVE-2015-0315, and...
Design/Logic Flaw
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2015, a different...
Flash Player For Mac <= 16.0.0.296 Unspecified Code Execution (APSA15-02 / APSB15-04)
According to its version, the Adobe Flash Player installed on the remote Mac OS X host is equal or prior to 16.0.0.296. It is, therefore, affected by the following vulnerabilities : - Several use-after-free errors exist that allow arbitrary code execution. CVE-2015-0313, CVE-2015-0315,...
Flash Player <= 16.0.0.296 Unspecified Code Execution (APSA15-02 / APSB15-04)
According to its version, the Adobe Flash Player installed on the remote Windows host is equal or prior to 16.0.0.296. It is, therefore, affected by the following vulnerabilities : - Several use-after-free errors exist that allow arbitrary code execution. CVE-2015-0313, CVE-2015-0315,...