SuSE 10 Security Update : flash-player (ZYPP Patch Number 8539)

Adobe Flash Player has been updated to 11.2.202.280 to fix various bugs and security issues. More information can be found on: http://www.adobe.com/support/security/bulletins/apsb13-11.html - APSB13-11, CVE-2013-1378 / CVE-2013-1379 / CVE-2013-1380 / CVE-2013-2555 %NASLMINLEVEL 70300 C Tenable...

SuSE 11.2 Security Update : flash-player (SAT Patch Number 7613)

Adobe Flash Player has been updated to 11.2.202.280 to fix various bugs and security issues. More information can be found on : http://www.adobe.com/support/security/bulletins/apsb13-11.html - APSB13-11, CVE-2013-1378 / CVE-2013-1379 / CVE-2013-1380 / CVE-2013-2555 %NASLMINLEVEL 70300 C Tenable...

Adobe Flash Player和AIR远程整数溢出漏洞(CVE-2013-2555)

BUGTRAQ ID: 58952 CVECAN ID: CVE-2013-2555 Adobe Flash Player是一个集成的多媒体播放器。AIR是针对网络与桌面应用的结合所开发出来的技术，可以不必经由浏览器而对网络上的云端程式做控制。 Adobe Flash Player存在整数溢出安全漏洞，此漏洞可导致远程代码执行。 0 Adobe Flash Player 11.x Adobe AIR 3.x 厂商补丁： Adobe ----- Adobe已经为此发布了一个安全公告（apsb13-11）以及相应补丁: apsb13-11：Security updates available...

Flash Player <= 10.3.183.68 / 11.6.602.180 Multiple Vulnerabilities (APSB13-11)

Binary data 6752.prm...

Critical: Red Hat Security Advisory: flash-plugin security update

An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which...

MS KB2833510: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer 10

The remote host is missing KB2833510. It may, therefore, be affected by the following vulnerabilities related to the installed version of the Adobe Flash ActiveX control : - Multiple memory corruption errors exist that could lead to code execution. CVE-2013-1378, CVE-2013-1379, CVE-2013-1380 - An...

Adobe AIR 3.x <= 3.6.0.6090 Multiple Vulnerabilities (APSB13-11)

According to its version, the instance of Adobe AIR 3.x on the remote Windows host is 3.6.0.6090 or earlier. It is, therefore, potentially affected by the following vulnerabilities : - Multiple memory corruption errors exist that could lead to code execution. CVE-2013-1378, CVE-2013-1379,...

CVE-2013-2555

Integer overflow in Adobe Flash Player before 10.3.183.75 and 11.x before 11.7.700.169 on Windows and Mac OS X, before 10.3.183.75 and 11.x before 11.2.202.280 on Linux, before 11.1.111.50 on Android 2.x and 3.x, and before 11.1.115.54 on Android 4.x; Adobe AIR before 3.7.0.1530; and Adobe AIR SD...

Debian: Security Advisory (DSA-2555-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 2555-1 (libxslt)

The remote host is missing an update to libxslt announced via advisory DSA 2555-1. OpenVAS Vulnerability Test $Id: deb25551.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2555-1 libxslt Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Default credentials

Cisco TelePresence Software before TE 4.1.1 on the Cisco IP Video Phone E20 has a default password for the root account after an upgrade to TE 4.1.0, which makes it easier for remote attackers to modify the configuration via an SSH session, aka Bug ID CSCtw69889, a different vulnerability than...

CVE-2011-2555

CVE-2011-2555 affects Cisco TelePresence Recording Server 1.7.2.x before 1.7.2.1, where a root administrator account is enabled by default. The root password vulnerability enables a remote attacker to modify configuration via SSH. The Cisco advisory (Bug CSCtr76182) documents the issue and provid...

Cisco Security Advisory: Cisco TelePresence Recording Server Default Credentials for Root Account Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco TelePresence Recording Server Default Credentials for Root Account Vulnerability Advisory ID: cisco-sa-20110729-tp Revision 1.0 For Public Release 2011 July 29 1600 UTC GMT...

CVE-2010-2555

CVE-2010-2555 relates to the Tracing Feature for Services in Windows (Vista SP1/SP2, Server 2008 SP2+R2, Windows 7). The vulnerability stems from how memory is allocated/strings are processed when reading registry data, leading to memory corruption and potential privilege escalation. Microsoft’s ...

MS10-059: Vulnerabilities in the Tracing Feature for Services Could Allow Elevation of Privilege (982799)

The version of Tracing Feature for Services on the remote host has the following vulnerabilities : - Windows places incorrect ACLs on registry keys, which could allow an attacker to execute code with elevated privileges. CVE-2010-2554 - Memory is allocated in an unspecified, unsafe manner when...

SLES9: Security update for Linux kernel

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: kernel-default kernel-syms kernel-source kernel-smp kernel-bigsmp For more information, please visit the referenced security advisories. More details may als...

Google Chrome Multiple Vulnerabilities - Jul09

This host has Google Chrome installed and is prone to Multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodgooglechromemultvulnjul09.nasl 5055 2017-01-20 14:08:39Z teissa $ Google Chrome Multiple Vulnerabilities - Jul09 Authors: Antu Sanadi Copyright: Copyright c 2009 SecPod,...

CVE-2009-2555

Heap-based buffer overflow in src/jsregexp.cc in Google V8 before 1.1.10.14, as used in Google Chrome before 2.0.172.37, allows remote attackers to execute arbitrary code in the Chrome sandbox via a crafted JavaScript regular expression...

CVE-2009-2555

Summary (CVE-2009-2555) : The OpenVAS/Nessus entries and the Chrome release notes confirm a heap-based buffer/memory corruption vulnerability in Google V8 (src/jsregexp.cc) before V8 1.1.10.14, leveraged by Chrome prior to 2.0.172.37. The issue allows remote attackers to execute arbitrary code vi...

CVE-2008-2555

CVE-2008-2555 involves a SQL injection in EasyWay CMS. The vulnerability is in the file index.php where the mid parameter can be exploited to execute arbitrary SQL commands. This is the supported, concrete detail from the connected documents. The sources do not specify exploitation specifics, aff...