Mac OS X 10.6.1 Update

The remote host is missing Mac OS X 10.6.1 Update. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Mac OS X 10.6.1 Update

The remote host is missing Mac OS X 10.6.1 Update. One or more of the following components are affected: Flash Player plug-in OpenVAS Vulnerability Test Mac OS X 10.6.1 Update LSS-NVT-2010-026 Developed by LSS Security Team Copyright C 2010 LSS This program is free software; you can redistribute ...

CVE-2010-1868

CVE-2010-1868 affects PHP 5.2.x (through 5.2.13) and 5.3.x (through 5.3.2). The vulnerability occurs in ext/sqlite/sqlite.c functions sqlite_single_query and sqlite_array_query, where calling with an empty SQL query can trigger access to uninitialized memory, potentially allowing context-dependen...

CVE-2010-1868

The 1 sqlitesinglequery and 2 sqlitearrayquery functions in ext/sqlite/sqlite.c in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to execute arbitrary code by calling these functions with an empty SQL query, which triggers access of uninitialized memory...

Debian DSA-1868-1 : kde4libs - several vulnerabilities

Several security issues have been discovered in kde4libs, core libraries for all KDE 4 applications. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-1690 It was discovered that there is a use-after-free flaw in handling certain DOM event handlers...

openSUSE 10 Security Update : flash-player (flash-player-6387)

Specially crafted Flash SWF files can cause a buffer overflow in flash-player. Attackers could potentially exploit that to execute arbitrary code CVE-2009-1862, CVE-2009-0901, CVE-2009-2395, CVE-2009-2493, CVE-2009-1863, CVE-2009-1864, CVE-2009-1865, CVE-2009-1866, CVE-2009-1867, CVE-2009-1868,...

SuSE 11 Security Update : flash-player (SAT Patch Number 1149)

Specially crafted Flash SWF files can cause a buffer overflow in flash-player. Attackers could potentially exploit that to execute arbitrary code. CVE-2009-1862 / CVE-2009-0901 / CVE-2009-2395 / CVE-2009-2493 / CVE-2009-1863 / CVE-2009-1864 / CVE-2009-1865 / CVE-2009-1866 / CVE-2009-1867 /...

Mac OS X 10.6.x < 10.6.1 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.1. Mac OS X 10.6.1 contains security fixes for the following product : - Flash Player plug-in C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'compat.inc'; if description scriptid40946;...

Mac OS X Multiple Vulnerabilities (Security Update 2009-005)

The remote host is running a version of Mac OS X 10.5 or 10.4 that does not have Security Update 2009-005 applied. This security update contains fixes for the following products : - Alias Manager - CarbonCore - ClamAV - ColorSync - CoreGraphics - CUPS - Flash Player plug-in - ImageIO - Launch...

Gentoo Security Advisory GLSA 200908-04 (adobe-flash acroread)

The remote host is missing updates announced in advisory GLSA 200908-04. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

iDefense Security Advisory 08.06.09: Adobe Flash Player URL Parsing Heap Overflow Vulnerability

iDefense Security Advisory 08.06.09 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 06, 2009 I. BACKGROUND Adobe Flash Player is Flash Player is a cross-platform browser plug-in that delivers interactive content for Web experiences. For more information, please visit following page:...

openSUSE Security Update : flash-player (flash-player-1148)

Specially crafted Flash SWF files can cause a buffer overflow in flash-player. Attackers could potentially exploit that to execute arbitrary code CVE-2009-1862, CVE-2009-0901, CVE-2009-2395, CVE-2009-2493, CVE-2009-1863, CVE-2009-1864, CVE-2009-1865, CVE-2009-1866, CVE-2009-1867, CVE-2009-1868,...

openSUSE Security Update : flash-player (flash-player-1148)

Specially crafted Flash SWF files can cause a buffer overflow in flash-player. Attackers could potentially exploit that to execute arbitrary code CVE-2009-1862, CVE-2009-0901, CVE-2009-2395, CVE-2009-2493, CVE-2009-1863, CVE-2009-1864, CVE-2009-1865, CVE-2009-1866, CVE-2009-1867, CVE-2009-1868,...

CVE-2009-1868

CVE-2009-1868 describes a heap-based buffer overflow in Adobe Flash Player (before 9.0.246.0 and in 10.x before 10.0.32.18) and Adobe AIR (before 1.5.2) that can allow a denial of service or possibly arbitrary code execution via unspecified vectors involving URL parsing. Connected advisories note...

Adobe Flash Player和AIR存在多个安全漏洞

Bugraq ID: 35890 CVE ID：CVE-2009-1863 CVE-2009-1864 CVE-2009-1865 CVE-2009-1866 CVE-2009-1867 CVE-2009-1868 CVE-2009-1869 CVE-2009-1870 CNCVE ID：CNCVE-20091863 CNCVE-20091864 CNCVE-20091865 CNCVE-20091866 CNCVE-20091867 CNCVE-20091868 CNCVE-20091869 CNCVE-20091870 Adobe Flash...

CVE-2009-1868

creationtimestamp| type| source ---|---|--- 2009-07-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33133...

CVE-2008-1868

admin/sauvBase.php in Blog Pixel Motion aka Blog PixelMotion does not require authentication, which allows remote attackers to trigger a database backup dump, and obtain the resulting blogPM.sql file that contains sensitive information...

CVE-2008-1868

CVE-2008-1868 affects Blog Pixel Motion (Blog Pixel Motion) via admin/sauvBase.php, where authentication is not required. The underlying issue allows remote attackers to trigger a database backup dump and retrieve the resulting blogPM.sql, which contains sensitive information. The vulnerability e...

CVE-2008-1868

creationtimestamp| type| source ---|---|--- 2008-04-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5380...

CVE-2007-1868

CVE-2007-1868 affects IBM Tivoli Provisioning Manager for OS Deployment (rembo.exe HTTP service). The vulnerability arises in the handling of multipart/form-data in HTTP POST requests, enabling a remote attacker to cause a denial of service (daemon crash) or execute arbitrary code via crafted req...