108 matches found
CVE-2016-3088
The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request...
CVE-2016-3088
CVE-2016-3088 affects Apache ActiveMQ 5.x prior to 5.14.0. The Fileserver web application vulnerable to remote code execution via an HTTP PUT followed by an HTTP MOVE request allows an attacker to upload and execute arbitrary files on the server. Connected PoC repositories describe Python-based a...
ActiveMQ web shell upload
The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request. Module Options msf use exploit/multi/http/apache/activemquploadjsp msf undefinedactivemquploadjsp show actions...
Oracle: Security Advisory (ELSA-2014-3088)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 201402-27
Gentoo Linux Local Security Checks GLSA 201402-27 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
CVE-2015-3088
creationtimestamp| type| source ---|---|--- 2015-08-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37844...
CVE-2016-3088
creationtimestamp| type| source ---|---|--- 2015-08-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40857 2017-06-29 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42283 2018-05-29 15:50:33+00:00| seen|...
Adobe AIR < 17.0.0.172 Multiple Vulnerabilities (APSB15-09)
Binary data 8812.prm...
Adobe Flash Player Heap Buffer Overflow (APSB15-09: CVE-2015-3088)
A heap buffer overflow vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted swf file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted swf file...
openSUSE Security Update : flash-player (openSUSE-2015-372)
The Adobe flash-player package was updated to version 11.2.202.460 to fix several security issues. The following vulnerabilities were fixed bsc930677 : - APSB15-09, CVE-2015-3044, CVE-2015-3077, CVE-2015-3078, CVE-2015-3079, CVE-2015-3080, CVE-2015-3081, CVE-2015-3082, CVE-2015-3083, CVE-2015-308...
Adobe Flash Player Multiple Vulnerabilities - 01 (May 2015) - Windows
Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...
Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt44
3:11-alt44 built May 15, 2015 Sergey V Turchin in task 144379 May 14, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-3044, CVE-2015-3077, CVE-2015-3078, CVE-2015-3079, CVE-2015-3080, CVE-2015-3081, CVE-2015-3082, CVE-2015-3083, CVE-2015-3084, CVE-2015-3085, CVE-2015-3086,...
Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt44
3:11-alt44 built May 15, 2015 Sergey V Turchin in task 144380 May 14, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-3044, CVE-2015-3077, CVE-2015-3078, CVE-2015-3079, CVE-2015-3080, CVE-2015-3081, CVE-2015-3082, CVE-2015-3083, CVE-2015-3084, CVE-2015-3085, CVE-2015-3086,...
Critical: Red Hat Security Advisory: flash-plugin security update
An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...
CVE-2015-3088
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allows attackers to execute...
CVE-2015-3088
CVE-2015-3088 is a heap-based buffer overflow in Adobe Flash Player and related AIR components. Affected are Flash Player versions before 13.0.0.289 and before 17.0.0.188 on Windows/OS X, and before 11.2.202.460 on Linux; affected AIR/SDK components before 17.0.0.172. The description identifies t...
RHEL 5 / 6 : flash-plugin (RHSA-2015:1005)
The remote Redhat Enterprise Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2015:1005 advisory. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes multiple...
Debian DSA-3088-1 : qemu-kvm - security update
Paolo Bonzini of Red Hat discovered that the blit region checks were insufficient in the Cirrus VGA emulator in qemu-kvm, a full virtualization solution on x86 hardware. A privileged guest user could use this flaw to write into qemu address space on the host, potentially escalating their privileg...
Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2014-3088)
The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3088 advisory. - net: sctp: fix panic on duplicate ASCONF chunks Daniel Borkmann Orabug: 20010591 CVE-2014-3687 Tenable has extracted the preceding description...
CVE-2014-3088
IBM Sametime Meeting Server 8.5.1 is affected by CVE-2014-3088 due to stconf.nsf relying on the client to validate the file format in wAttach?OpenForm multipart/form-data POSTs. This allows remote authenticated users to bypass upload restrictions by modifying the Content-Type header and file exte...