158 matches found
Adobe Digital Editions Multiple Vulnerabilities (Jun 2017) - Mac OS X
Adobe Digital Edition is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:digitaleditions...
Ubuntu 14.04 LTS / 16.04 LTS : Django vulnerability (USN-3089-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3089-1 advisory. Sergey Bobrov discovered that Django incorrectly parsed cookies when being used with Google Analytics. A remote attacker could possibly use this issue...
CVE-2016-3089
CVE-2016-3089 affects Apache OpenMeetings (SWF panel). The vulnerability arises from insufficient input filtering of the swf parameter, enabling cross-site scripting (XSS). Affected version line is OpenMeetings before 3.1.2; exploitation would allow remote injection of script/HTML via the swf par...
Oracle: Security Advisory (ELSA-2011-0307)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-3089
creationtimestamp| type| source ---|---|--- 2015-08-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37845...
Adobe AIR < 17.0.0.172 Multiple Vulnerabilities (APSB15-09)
Binary data 8812.prm...
openSUSE Security Update : flash-player (openSUSE-2015-372)
The Adobe flash-player package was updated to version 11.2.202.460 to fix several security issues. The following vulnerabilities were fixed bsc930677 : - APSB15-09, CVE-2015-3044, CVE-2015-3077, CVE-2015-3078, CVE-2015-3079, CVE-2015-3080, CVE-2015-3081, CVE-2015-3082, CVE-2015-3083, CVE-2015-308...
Adobe Flash Player Multiple Vulnerabilities - 01 (May 2015) - Windows
Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...
Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt44
3:11-alt44 built May 15, 2015 Sergey V Turchin in task 144379 May 14, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-3044, CVE-2015-3077, CVE-2015-3078, CVE-2015-3079, CVE-2015-3080, CVE-2015-3081, CVE-2015-3082, CVE-2015-3083, CVE-2015-3084, CVE-2015-3085, CVE-2015-3086,...
Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt44
3:11-alt44 built May 15, 2015 Sergey V Turchin in task 144380 May 14, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-3044, CVE-2015-3077, CVE-2015-3078, CVE-2015-3079, CVE-2015-3080, CVE-2015-3081, CVE-2015-3082, CVE-2015-3083, CVE-2015-3084, CVE-2015-3085, CVE-2015-3086,...
Critical: Red Hat Security Advisory: flash-plugin security update
An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...
CVE-2015-3089
CVE-2015-3089 affects Adobe Flash Player prior to 13.0.0.289 and 14.x up to 17.x prior to 17.0.0.188 (Windows/macOS) and prior to 11.2.202.460 on Linux, as well as Adobe AIR and AIR SDKs up to 17.0.0.172. It causes memory corruption leading to arbitrary code execution or denial of service via uns...
RHEL 5 / 6 : flash-plugin (RHSA-2015:1005)
The remote Redhat Enterprise Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2015:1005 advisory. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes multiple...
Debian DSA-3089-1 : jasper - security update
Jose Duart of the Google Security Team discovered heap-based buffer overflow flaws in JasPer, a library for manipulating JPEG-2000 files, which could lead to denial of service application crash or the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptiv...
Debian: Security Advisory (DSA-3089-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2013-3089
Cross-site request forgery CSRF vulnerability in apply.cgi in Belkin N300 F7D7301v1 router allows remote attackers to hijack the authentication of administrators for requests that modify configuration...
CVE-2013-3089
CVE-2013-3089 describes a CSRF vulnerability in Belkin N300 (F7D7301v1) routers, specifically in the apply.cgi handler. An attacker could remotely hijack an administrator’s authenticated session to perform configuration-modifying requests. The NVD entry lists a CSRF impact with partial confidenti...
CVE-2014-3089
The RDS Java Client library in IBM Rational Directory Server RDS 5.1.1.x before 5.1.1.2 iFix004 and 5.2.x before 5.2.1 iFix003, and Rational Directory Administrator RDA 6.0 before iFix002, includes the cleartext root password, which allows local users to obtain sensitive information by reading a...
CVE-2014-3089
CVE-2014-3089 affects IBM Rational Directory Server (RDS) Java Client libraries and related components. The vulnerability arises because the RDS Java Client library carries the cleartext password for the root user, allowing an attacker with local access to obtain sensitive data by reading the lib...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-3089. Reason: This issue was MERGED into CVE-2010-3089 in accordance with CVE content decisions, because it is the same type of vulnerability and affects the same versions. Notes: All CVE users should reference CVE-2010-3089...