197 matches found
SuSE 10 Security Update : flash-player (ZYPP Patch Number 7832)
flash-player update to version 11.1.102.55 to fix the following critical %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000 exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid57195;...
Adobe Flash Player Action Tag Buffer Overflow (APSB11-28; CVE-2011-2454)
A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insufficient bounds checking while checking the payload contents of an ActionDefineFunction2 tag. A remote attacker could exploit this vulnerability by enticing a user to open a web page...
Flash Player for Mac <= 10.3.183.10 / 11.0.1.152 Multiple Vulnerabilities (APSB11-28)
According to its version, the instance of Flash Player installed on the remote Mac OS X host is 10.x equal to or earlier than 10.3.183.10 or 11.x equal to or earlier than 11.0.1.152. It is therefore reportedly affected by several critical vulnerabilities : - Several unspecified memory corruption...
VUL-0: flash-player: sec. update to version 11.1.102.55 (critical)
flash-player update to version 11.1.102.55 to fix the following critical security issues: CVE-2011-2445, CVE-2011-2450, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, CVE-2011-2456, CVE-2011-2457, CVE-2011-2458, CVE-2011-2459, CVE-2011-2460...
RHEL 6 : flash-plugin (RHSA-2011:1445)
The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2011:1445 advisory. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes multiple...
CVE-2011-2454
Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a...
CVE-2011-2454
Adobe Flash Player prior to 10.3.183.11 and 11.x prior to 11.1.102.55 (Windows/macOS/Linux/Solaris) and prior to 11.1.102.59 on Android, plus Adobe AIR prior to 3.1.0.4880, is affected by CVE-2011-2454 (memory corruption) and likely related issues; OpenSUSE-2011-4 patch updates Flash Player to 11...
CVE-2010-2454
Technical details for CVE-2010-2454 are not provided in the connected documents; only a related issue (CVE-2010-1206) is noted without specifics on affected products, versions, or remediation for this CVE.
FreeBSD Ports: firefox, linux-firefox-devel
The remote host is missing an update to the system as announced in the referenced advisory. VID 49e8f2ee-8147-11de-a994-0030843d3802 OpenVAS Vulnerability Test $ Description: Auto generated from VID 49e8f2ee-8147-11de-a994-0030843d3802 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
CVE-2009-2454
CVE-2009-2454 is an XSS vulnerability in Citrix Web Interface affecting version 4.6, 5.0 and 5.0.1, enabling remote attackers to inject arbitrary web script or HTML via unspecified vectors. The connected records confirm the vulnerability class and affected product line, with CVSS base score 4.3 (...
CVE-2008-2454
SQL injection vulnerability in the xsstream-dm comxsstream-dm component 0.01 Beta for Joomla! allows remote attackers to execute arbitrary SQL commands via the movie parameter to index.php...
CVE-2008-2454
creationtimestamp| type| source ---|---|--- 2008-05-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5587...
CVE-2007-2454
CVE-2007-2454 describes a heap-based buffer overflow in the VGA device used by Parallels. The flaw allows local users with root access inside the guest to terminate the virtual machine and potentially execute arbitrary code on the host via vectors related to bitblt operations. Documents do not pr...
Secunia Research: IBM Lotus Notes Insecure Default FolderPermissions
====================================================================== Secunia Research 18/10/2006 - IBM Lotus Notes Insecure Default Folder Permissions - ====================================================================== Table of Contents Affected...
CVE-2005-2454
IBM Lotus Notes 6.5.4/6.5.5 and 7.0.0/7.0.1 are affected by insecure default permissions on the Notes directory (Everyone: Full Control), enabling local users to gain unintended access and modify, add, or delete files in that folder. The issue is due to default folder permissions applied to the N...
CVE-2004-2454
CVE-2004-2454 affects aMSN 0.90 for Windows . The vulnerability allows local users to obtain sensitive information, specifically hashed passwords, from hotlog.htm and config.xml . The root cause is described at a high level as an information-disclosure flaw; explicit technical details such as exa...