CVE-2015-0535

Technical details about CVE-2015-0535 are not provided in the connected documents. Public information that is present covers FREAK generally and related CVEs, but does not specify affected products, versions, or fixes for this exact CVE. Monitor for updates.

CVE-2015-0535

EMC RSA BSAFE Micro Edition Suite MES 4.0.x before 4.0.8 and 4.1.x before 4.1.3 and RSA BSAFE SSL-C 2.8.9 and earlier do not properly restrict TLS state transitions, which makes it easier for remote attackers to conduct cipher-downgrade attacks to EXPORTRSA ciphers via crafted TLS traffic, relate...

Oracle Linux 7 : GNOME / Shell (ELSA-2015-0535)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-0535 advisory. clutter 1.14.4-12 - Include upstream patch to prevent a crash when hitting hardware limits Resolves: rhbz1115162 1.14.4-11 - Fix a typo in the Requires 1.14.4-1...

Adobe AIR Multiple Vulnerabilities-01 (Jun 2014) - Mac OS X

Adobe Air is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:adobeair"; ifdescription...

openSUSE Security Update : flash-player (openSUSE-SU-2014:0798-1)

flash-player was updated to version 11.2.202.378 to fix six security issues. These security issues were fixed : - Cross-site-scripting vulnerabilities CVE-2014-0531, CVE-2014-0532, CVE-2014-0533. - Security bypass vulnerabilities CVE-2014-0534, CVE-2014-0535. - A memory corruption vulnerability...

CVE-2014-0535

Adobe Flash Player before 13.0.0.223 and 14.x before 14.0.0.125 on Windows and OS X and before 11.2.202.378 on Linux, Adobe AIR before 14.0.0.110, Adobe AIR SDK before 14.0.0.110, and Adobe AIR SDK & Compiler before 14.0.0.110 allow attackers to bypass intended access restrictions via unspecified...

CVE-2014-0535

CVE-2014-0535 is an Adobe Flash Player and Adobe AIR security bypass vulnerability. It arises from an error in handling specially crafted SWF files, allowing attackers to bypass intended access restrictions. Affected products include Flash Player on Windows/OS X (before 13.0.0.223 and before 14.0...

Flash Player for Mac <= 13.0.0.214 Multiple Vulnerabilities (APSB14-16)

According to its version, the instance of Flash Player installed on the remote Mac OS X host is equal or prior to 13.0.0.214. It is, therefore, affected by the following vulnerabilities : - Multiple, unspecified errors exist that could allow cross-site scripting attacks. CVE-2014-0531,...

MS KB2966072: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer

The remote host is missing KB2966072. It is, therefore, potentially affected by multiple vulnerabilities : - Multiple, unspecified errors exist that could allow cross-site scripting attacks. CVE-2014-0531, CVE-2014-0532, CVE-2014-0533 - Multiple, unspecified errors exist that could allow...

Internet Bug Bounty: Flash Sandbox Bypass

Adobe Flash Player issue 2719 and 2720. Exploit of this bug uses 2 separate vulnerabilities. 2720 is a bug which is able to, from the local-with-file sandbox, default local sandbox, open both local and remote files, local files and http/https resources. An attacker could for example read your...

CVE-2012-0535

Technical details (affected product scope, exploit method, and exact vulnerability vector) are not publicly available in the provided documents. Monitor for updated advisories or patches.

CVE-2012-0535

Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6 and 12.1.3 allows remote attackers to affect confidentiality via unknown vectors related to Change Password Page...

CVE-2011-0535

Cross-site request forgery CSRF vulnerability in the Users module in Zikula before 1.2.5 allows remote attackers to hijack the authentication of administrators for requests that change account privileges via an edit accesspermissions action to index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in the Users module in Zikula before 1.2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: it is possible that this overlaps CVE-2011-0535...

CVE-2011-0535

Cross-site request forgery CSRF vulnerability in the Users module in Zikula before 1.2.5 allows remote attackers to hijack the authentication of administrators for requests that change account privileges via an edit accesspermissions action to index.php...

CVE-2011-0911

Cross-site scripting XSS vulnerability in the Users module in Zikula before 1.2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: it is possible that this overlaps CVE-2011-0535...

CVE-2011-0535

CVE-2011-0535 affects Zikula’s Users module prior to version 1.2.5. The vulnerability is a CSRF flaw that lets an attacker hijack administrator sessions and perform privilege changes via an edit_access_permissions action to index.php. Root cause: CSRF in the Users module. Impact per source: unaut...

CVE-2011-0535

creationtimestamp| type| source ---|---|--- 2011-02-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16097...

CVE-2010-0535

CVE-2010-0535 concerns Dovecot on Mac OS X 10.6 before 10.6.3 with Kerberos enabled. An access control issue causes the SACL to be improperly enforced for sending/receiving mail, allowing a remote authenticated user to bypass intended per-user mail access restrictions. Affected: Mac OS X 10.6.x (...

CVE-2009-0535

Directory traversal vulnerability in export.php in Thyme 1.3 and earlier, when registerglobals is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the exportto parameter...