UBUNTU-CVE-2015-3084

Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code by leveraging a...

CVE-2015-3084

CVE-2015-3084 is a type-confusion vulnerability in Adobe Flash Player circa 2015. The issue allows arbitrary code execution via type-confusion in Flash’s filters (e.g., Button/MovieClip filters), with the root cause being invalid redefinition of filter constructors leading to mismatched native an...

RHEL 5 / 6 : flash-plugin (RHSA-2015:1005)

The remote Redhat Enterprise Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2015:1005 advisory. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes multiple...

Debian Security Advisory DSA 3084-1 (openvpn - security update)

Dragana Damjanovic discovered that an authenticated client could crash an OpenVPN server by sending a control packe containing less than four bytes as payload. OpenVAS Vulnerability Test $Id: deb3084.nasl 6750 2017-07-18 09:56:47Z teissa $ Auto-generated from advisory DSA 3084-1 using nvtgen 1.0...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel Security (ELSA-2014-3084)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3084 advisory. - USB: whiteheat: Added bounds checking for bulk command response James Forshaw Orabug: 19849334 CVE-2014-3185 - HID: fix a couple of off-by-ones...

CVE-2014-3084

The CVE-2014-3084 issue affects IBM Maximo Asset Management and related products (including Maximo Asset Management Essentials, Maximo Industry Solutions, SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and CMDB products). It allows re...

openSUSE Security Update : chromium / v8 (openSUSE-SU-2012:0656-1)

Chromium update to 21.0.1145 - Fixed several issues around audio not playing with videos - Crash Fixes - Improvements to trackpad on Cr-48 - Security Fixes bnc762481 - CVE-2011-3083: Browser crash with video + FTP - CVE-2011-3084: Load links from internal pages in their own process. -...

openSUSE Security Update : chromium / v8 (openSUSE-SU-2012:0993-1)

Version upgrade of chromium to address multiple security vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-516. The text description of this plugin is C SUSE LLC...

CVE-2013-3084

CVE-2013-3084 describes multiple XSS vulnerabilities in Belkin Model F5D8236-4 v2 router. The issue is in the router’s web interface, enabling remote attackers to inject arbitrary script/HTML via unspecified vectors. Metrics indicate a Network-exposed, Medium-severity issue (CVSSv2: AV:N/AC:M/Au:...

SuSE Update for update openSUSE-SU-2012:0656-1 (update)

Check for the Version of update OpenVAS Vulnerability Test $Id: gbsuse201206561.nasl 8273 2018-01-03 06:29:19Z teissa $ SuSE Update for update openSUSE-SU-2012:0656-1 update Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program ...

openSUSE: Security Advisory for update (openSUSE-SU-2012:0656-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: chromium

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Google Chrome Multiple Vulnerabilities - May 12 (Mac OS X)

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnmay12macosx.nasl 5963 2017-04-18 09:02:14Z teissa $ Google Chrome Multiple Vulnerabilities - May 12 Mac OS X Authors: Madhuri D Copyright: Copyright c 2012...

Google Chrome Multiple Vulnerabilities (May 2012) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-3084

Google Chrome before 19.0.1084.46 does not use a dedicated process for the loading of links found on an internal page, which might allow attackers to bypass intended sandbox restrictions via a crafted page...

CVE-2011-3084

Google Chrome before 19.0.1084.46 does not use a dedicated process for the loading of links found on an internal page, which might allow attackers to bypass intended sandbox restrictions via a crafted page...

CVE-2011-3084

CVE-2011-3084 affects Google Chrome prior to 19.0.1084.46, where loading links from internal pages could bypass sandbox restrictions. Connected sources confirm Chromium/chrome updates (openSUSE patches in 2012) address this and related CVEs. The exact exploit status is not stated in the provided ...

Fedora 13 : kernel-2.6.34.9-69.fc13 (2011-6447)

Update to kernel 2.6.34.9 : http://ftp.kernel.org/pub/linux/kernel/v2.6/longterm/v2.6.34/ChangeLog -2.6.34.9 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...

Ubuntu: Security Advisory (USN-1083-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE 10 Security Update : pidgin (ZYPP Patch Number 6709)

This update of pidgin fixes the following issues : - Allowed to send confidential data unencrypted even if SSL was chosen by user. CVE-2009-3026: CVSS v2 Base Score: 5.0 - Remote denial of service in yahoo IM plug-in. CVE-2009-3025: CVSS v2 Base Score: 4.3 - Remote denial of service in MSN plug-i...