Critical: Red Hat Security Advisory: flash-plugin security update

An updated Adobe Flash Player package that fixes several security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which gi...

SuSE 10 Security Update : flash-player (ZYPP Patch Number 8182)

Flash Player was updated to 11.2.202.236 which fixes various bugs and critical security issues. The advisory published by Adobe can be found here: https://www.adobe.com/support/security/bulletins/apsb12-14.html These updates resolve - a memory corruption vulnerability that could lead to code...

CVE-2012-2037

Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute...

Flash Player <= 10.3.183.19 / 11.3.300.256 Multiple Vulnerabilities (APSB12-14)

According to its version, the instance of Flash Player installed on the remote Windows host is 10.x equal to or earlier than 10.3.183.19 or 11.x equal to or earlier than 11.3.300.256. It is, therefore, potentially affected by multiple vulnerabilities : - Multiple memory corruption vulnerabilities...

CVE-2012-2037

Adobe Flash Player and AIR vulnerability CVE-2012-2037 involves memory corruption that could allow remote code execution orDoS. Affected products span multiple platforms; remediation in the related advisories shows upgrading Flash Player to 11.2.202.236 (and corresponding AIR update 3.3.0.3610) m...

CVE-2012-2034

Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute...

CVE-2010-2037

Directory traversal vulnerability in the Percha Downloads Attach comperchadownloadsattach component 1.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

CVE-2010-2037

CVE-2010-2037 is a directory traversal vulnerability in the Joomla! component Percha Downloads Attach (com_perchadownloadsattach) version 1.1. An attacker can read arbitrary files by providing a ‘..’ in the controller parameter to index.php, enabling potential exposure of sensitive information an...

CVE-2010-2037

creationtimestamp| type| source ---|---|--- 2010-05-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34005...

Debian Security Advisory DSA 2037-1 (kdm (kdebase))

The remote host is missing an update to kdm kdebase announced via advisory DSA 2037-1. OpenVAS Vulnerability Test $Id: deb20371.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2037-1 kdm kdebase Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Debian: Security Advisory (DSA-2037-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2037-1 : kdm (kdebase) - race condition

Sebastian Krahmer discovered that a race condition in the KDE Desktop Environment's KDM display manager, allow a local user to elevate privileges to root. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Securit...

Cross site scripting

Cross-site scripting XSS vulnerability in login.php in EsPartenaires 1.0 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: the EsContacts 1.0 issue is covered in CVE-2008-2037...

CVE-2009-2037

Online Grades & Attendance v3.2.5 and earlier (potentially 3.2.6) are affected by multiple local file include/directory traversal vulnerabilities. The issue stems from insufficient input sanitization in two parameters: GLOBALS[SKIN] in index.php and skin in admin/admin.php, enabling remote attack...

CVE-2009-2037

creationtimestamp| type| source ---|---|--- 2009-06-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8853...

CVE-2008-2037

CVE-2008-2037 describes multiple XSS vulnerabilities in EditeurScripts EsContacts 1.0, exploitable by remote authenticated users via the msg parameter in login.php, importer.php, add_groupe.php, contacts.php, groupes.php, and search.php. The linked evidence from connected sources confirms the aff...

CVE-2007-2037

Cisco Wireless LAN Controller (WLC) versions affected by CVE-2007-2037 are before 3.2.116.21 and 4.0.x before 4.0.155.0. The vulnerability allows remote attackers on a local network to trigger a denial of service (device crash) by sending malformed Ethernet traffic. The issue impacts the WLC’s ab...

CVE-2006-2037

CVE-2006-2037 describes a cross-site scripting (XSS) vulnerability in Thwboard 3.0 Beta 2.84, specifically in index.php where the navpath parameter can be exploited to inject arbitrary script/HTML. The vulnerability affects the index.php handling of navpath and is characterized as an XSS risk tha...

CVE-2002-2037

The CVE-2002-2037 entry concerns the Cisco Media Gateway Controller (MGC) in the following devices: SC2200 7.4 and earlier, VSC3000 9.1 and earlier, PGW 2200 9.1 and earlier, plus BAMS and VSPT. All run on default Solaris 2.6 installations with unnecessary services and without the latest security...

CVE-2004-2037

CVE-2004-2037 describes a buffer overflow in Mollensoft Lightweight FTP Server 3.6. The flaw allows remote authenticated users to crash the server and potentially execute arbitrary code by sending a long CWD command (e.g., via an interactive FTP client). Documents identify the affected product an...