102 matches found
openSUSE: Security Advisory for flash-player (openSUSE-SU-2013:0295-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SuSE 10 Security Update : flash-player (ZYPP Patch Number 8465)
This update for flash-player to version 11.2.202.270, tracked as ABSP13-05 , contains fixes for the following security issues : - Several buffer overflow vulnerabilities that could lead to code execution. CVE-2013-0642 / CVE-2013-0645 / CVE-2013-1365 / CVE-2013-1366 / CVE-2013-1367 / CVE-2013-136...
Flash Player <= 10.3.183.51 / 11.5.502.149 Multiple Vulnerabilities (APSB13-05)
Binary data 6688.prm...
Adobe Flash Player Multiple Vulnerabilities -02 Feb13 (Windows)
This host is installed with Adobe Flash Player and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeflashplayermultvuln02feb13win.nasl 8178 2017-12-19 13:42:38Z cfischer $ Adobe Flash Player Multiple Vulnerabilities -02 Feb13 Windows Authors: Thanga Prakash S Copyright...
flash-plugin: multiple code execution flaws (APSB13-05)
Use-after-free vulnerability in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 o...
CVE-2013-0649
CVE-2013-0649 describes a use-after-free in Adobe Flash Player (multiple platforms: Windows, macOS, Linux) and Adobe AIR that allows arbitrary code execution via unspecified vectors. Affected versions include Flash Player up to 10.3.183.63 and 11.x before 11.6.602.168 on Windows; 10.3.183.61 and ...
Mac OS X Multiple Vulnerabilities (2012-002)
This host is missing an important security update according to Mac OS X 10.6.8 Update/Mac OS X Security Update 2012-002. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Mac OS X Multiple Vulnerabilities (2012-002)
This host is missing an important security update according to Mac OS X 10.6.8 Update/Mac OS X Security Update 2012-002. OpenVAS Vulnerability Test $Id: gbmacosxsu12-002.nasl 6521 2017-07-04 14:51:10Z cfischer $ Mac OS X Multiple Vulnerabilities 2012-002 Authors: Madhuri D Copyright: Copyright c...
CVE-2012-0649
Race condition in the initialization routine in blued in Bluetooth in Apple Mac OS X before 10.7.4 allows local users to gain privileges via vectors involving a temporary file...
CVE-2012-0649
The CVE-2012-0649 entry concerns a race condition in the initialization routine of blued (Bluetooth) in Apple Mac OS X prior to 10.7.4. This vulnerability can allow local users to gain privileges via a temporary-file vector. The issue is categorized as a local-exploit path with medium severity (C...
Microsoft IIS HTTP Internal IP Disclosure
Collect any leaked internal IPs by requesting commonly redirected locations from IIS. CVE-2000-0649 references IIS 5.1 win2k, XP and older. However, in newer servers such as IIS 7+, this occurs when the alternateHostName is not set or misconfigured. Also collects internal IPs leaked from the...
CVE-2011-0649
TIBCO CVE-2011-0649 affects Rendezvous and Enterprise Message Service components on Unix: Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), Rendezvous Secure Routing Daemon (rvsrd), and EMS Server (tibemsd) across Rendezvous 8.2.1–8.3.0, EMS 5.1.0–6.0.0, TRA 5.6.2–5.7.0, Silver B...
TIBCO Security Advisory: February 1, 2011 - TIBCO Rendezvous and Enterprise MessageService
TIBCO Rendezvous and Enterprise Message Service vulnerabilities Original release date: February 1, 2011 Last revised: -- CVE-2011-0649 Source: TIBCOSoftware Inc. TIBCO Rendezvous and Enterprise Message Service vulnerabilities Original release date: February 1, 2011 Last revised: -- Source: TIBCO...
Microsoft SQL Server - Resolution Overflow (MS02-039) (Metasploit)
$Id: ms02039slammer.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...
CVE-2010-0649
Integer overflow in the CrossCallParamsEx::CreateFromBuffer function in sandbox/src/crosscallserver.cc in Google Chrome before 4.0.249.89 allows attackers to leverage renderer access to cause a denial of service heap memory corruption or possibly have unspecified other impact via a malformed...
CVE-2010-0649
CVE-2010-0649 affects Google Chrome prior to 4.0.249.89. The vulnerability lies in the sandbox’s CrossCallParamsEx::CreateFromBuffer (sandbox/src/crosscall_server.cc) where an integer overflow during deserialization of sandbox messages can lead to renderer-accessible heap memory corruption and a ...
CVE-2009-0649
The CVE concerns the web browser in Symbian OS on the Nokia N95. The vulnerability is triggered by JavaScript invoking setAttributeNode, causing a denial of service (crash). The available sources confirm the affected platform and the root cause (JavaScript interaction with DOM API). No explicit r...
Gentoo Security Advisory GLSA 200407-17 (net-dialup/l2tpd)
The remote host is missing updates announced in advisory GLSA 200407-17. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2008-0649
CVE-2008-0649 affects Astanda Directory Project (ADP) versions 1.2 and 1.3. The vulnerability is a SQL injection in detail.php via the link_id parameter, enabling remote attackers to execute arbitrary SQL commands. Root cause is improper input handling in the detail.php script. The connected docu...
CVE-2007-0649
Variable overwrite vulnerability in interface/globals.php in OpenEMR 2.8.2 and earlier allows remote attackers to overwrite arbitrary program variables and conduct other unauthorized activities, such as conduct a remote file inclusion attacks via the srcdir parameter in custom/importxml.php or b...