CVE-2016-0972

CVE-2016-0972 affects Adobe Flash Player (Windows, OS X, Linux) prior to 18.0.0.329 and 19.x before 20.0.0.306, and Adobe AIR before 20.0.0.260 (and AIR SDK/Compiler before 20.0.0.260). The vulnerability allows attackers to execute arbitrary code or cause a denial of service (memory corruption) v...

Adobe Flash Player Multiple Vulnerabilities -01 (Feb 2016) - Windows

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...

Adobe Flash Player for Mac <= 20.0.0.286 Multiple Vulnerabilities (APSB16-04)

The version of Adobe Flash Player installed on the remote Mac OS X host is prior or equal to version 20.0.0.286. It is, therefore, affected by multiple vulnerabilities : - A type confusion error exists that allows a remote attacker to execute arbitrary code. CVE-2016-0985 - Multiple use-after-fre...

Adobe AIR <= 20.0.0.233 Multiple Vulnerabilities (APSB16-04)

The version of Adobe AIR installed on the remote Windows host is prior or equal to version 20.0.0.233. It is, therefore, affected by multiple vulnerabilities : - A type confusion error exists that allows a remote attacker to execute arbitrary code. CVE-2016-0985 - Multiple use-after-free errors...

Adobe Flash Player <= 20.0.0.286 Multiple Vulnerabilities (APSB16-04)

The version of Adobe Flash Player installed on the remote Windows host is prior or equal to version 20.0.0.286. It is, therefore, affected by multiple vulnerabilities : - A type confusion error exists that allows a remote attacker to execute arbitrary code. CVE-2016-0985 - Multiple use-after-free...

CVE-2015-0972

Pearson ProctorCache (server software installed on Windows, local LAN) prior to version 2015.1.17 is vulnerable due to a hard-coded administrative password that is not unique per installation. This allows an attacker with knowledge of the credential to remotely modify test metadata or disrupt tes...

Pearson ProctorCache contains hard coded credentials

Overview The Pearson ProctorCache software uses a hard coded password for administrative tasks. Description The ProctorCache is designed to cache the testing content, as well as cache the responses and maintain a client list of active test-takers. ProctorCache is a server software package install...

CVE-2014-0972

The kgsl graphics driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, does not properly prevent write access to IOMMU context registers, which allows local users to select a custom page table, and consequently write...

CVE-2014-0972

The CVE-2014-0972 entry concerns the kgsl graphics driver for Linux kernel 3.x (QuIC Android contributions for MSM devices). The vulnerability allows local users to bypass protection of IOMMU context registers by sending a crafted GPU command stream, enabling selection of a custom page table and ...

CVE-2010-0972

Directory traversal vulnerability in the GCalendar comgcalendar component 2.1.5 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php...

CVE-2010-0972

Directory traversal vulnerability in the GCalendar comgcalendar component 2.1.5 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php...

CVE-2010-0972

Affected product/component: Joomla! component com_gcalendar Suite 2.1.5. Vulnerability: Directory traversal / Local File Inclusion (LFI) in the GCalendar module. Root cause: Improper handling of the controller parameter in index.php allows including and executing arbitrary local files via a ../ s...

CVE-2010-0972

creationtimestamp| type| source ---|---|--- 2010-03-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11738...

CVE-2009-0972

CVE-2009-0972 is associated with an unspecified vulnerability in the Workspace Manager component of Oracle Database (versions 11.1.0.6/11.1.0.7/10.2.0.3/10.2.0.4/10.1.0.5/9.2.0.8/9.2.0.8DV). The available documents identify the affected product area and that remote authenticated users could affec...

CentOS Update for kernel CESA-2008:0972 centos4 i386

Check for the Version of kernel OpenVAS Vulnerability Test CentOS Update for kernel CESA-2008:0972 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

RHEL 4 : kernel (RHSA-2008:0972)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2008:0972 advisory. - kernel PWC driver DoS CVE-2007-5093 - kernel: dio: zero struct dio with kzalloc instead of manually CVE-2007-6716 - kernel: ptrace: Paddin...

CVE-2007-0972

The CVE-2007-0972 entry describes an unrestricted file upload in Jupiter CMS 1.1.5 (modules/emoticons.php) where an attacker can upload arbitrary files by crafting the HTTP request with an image content type and omitting is_guest/is_user parameters. This vulnerability could enable remote code exe...

CVE-2006-0972

CVE-2006-0972 describes a SQL injection vulnerability in the News.php of the Fantast ic News 2.1.1 application. The flaw allows remote attackers to execute arbitrary SQL commands via the page parameter. The initial entry notes that the category vector is already covered by CVE-2005-3846, but does...

CVE-2005-0972

CVE-2005-0972 corresponds to an integer overflow in the Mac OS X 10.3.9 and earlier searchfs system call, enabling a local attacker to execute arbitrary code via crafted parameters. The issue affects Mac OS X 10.3.x up to 10.3.9 and is documented across multiple sources (NVD, Red Hat CVE entry, C...

Mandrake Linux Security Advisory : lvm (MDKSA-2004:144)

The Trustix developers discovered that the lvmcreateinitrd script, part of the lvm1 package, created a temporary directory in an insecure manner. This could allow for a symlink attack to create or overwrite arbitrary files with the privileges of the user running the script. The updated packages...