CVE-2018-3090

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2018-3090

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2018-3090

CVE-2018-3090 affects Oracle VM VirtualBox (Core) prior to version 5.2.16. The vulnerability allows an unauthenticated attacker who has logon access to the infrastructure where VirtualBox runs to compromise the VirtualBox installation, with exploitation requiring user interaction. The impact, as ...

Security Bulletin: XML entity expansion vulnerabilities in ClearCase (CVE-2014-3090)

Summary IBM Rational ClearCase is vulnerable to XML entity expansion attacks. These attacks could cause a denial of service. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more information requires login wit...

cosmos.uchicago.edu XSS vulnerability

Vulnerable URL: http://cosmos.uchicago.edu/news/news.php?year=%27%22/%3E%3Cscript%3Ealert/OPENBUGBOUNTY/;%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3090 VIP website status:| Yes Coordinated...

CVE-2016-3090

The TextParseUtil.translateVariables method in Apache Struts 2.x before 2.3.20 allows remote attackers to execute arbitrary code via a crafted OGNL expression with ANTLR tooling...

CVE-2016-3090

The TextParseUtil.translateVariables method in Apache Struts 2.x before 2.3.20 allows remote attackers to execute arbitrary code via a crafted OGNL expression with ANTLR tooling...

CVE-2016-3090

CVE-2016-3090 — Affected product and details : Apache Struts 2.x prior to 2.3.20 is vulnerable. The issue lies in the TextParseUtil.translateVariables method, exposed via a crafted OGNL expression using ANTLR tooling. Impact : remote code execution (RCE) with network access. Exploitation : attack...

CVE-2016-3090

The TextParseUtil.translateVariables method in Apache Struts 2.x before 2.3.20 allows remote attackers to execute arbitrary code via a crafted OGNL expression with ANTLR tooling...

CVE-2017-3090

CVE-2017-3090 affects Adobe Digital Editions 4.5.4 and earlier, due to insecure library loading in the installer plugin, enabling arbitrary code execution. Multiple Nessus entries for ADE (Windows/macOS) corroborate that versions prior to 4.5.5 are affected (APSB17-20). Remediation is to update t...

Adobe Digital Editions < 4.5.5 Multiple Vulnerabilities (APSB17-20)

The version of Adobe Digital Editions installed on the remote Windows host is prior to 4.5.5. It is, therefore, affected by multiple vulnerabilities : - Multiple memory corruption issues exist due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit these...

Adobe Digital Editions Multiple Vulnerabilities (Jun 2017) - Mac OS X

Adobe Digital Edition is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:digitaleditions...

Ubuntu 14.04 LTS : Pillow regresssion (USN-3090-2)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3090-2 advisory. USN-3090-1 fixed vulnerabilities in Pillow. The patch to fix CVE-2014-9601 caused a regression which resulted in failures when processing certain png images. This...

Ubuntu 14.04 LTS : Pillow vulnerabilities (USN-3090-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3090-1 advisory. It was discovered that a flaw in processing a compressed text chunk in a PNG image could cause the image to have a large size when decompressed,...

absa.co.za XSS vulnerability

Vulnerable URL: http://absa.co.za/siabcdaext/Absacoza/Renderers/RedirectDisclaimerPopup.jsp?menubar==1123905';tbremove;alert/XSSPOSED/;function Wurl// window.openurl,'titlebar','scrollbars=1,menubar=123905'=null=1=1=900=700=http://www.youtube.com Details: Description| Value ---|--- Patched:| Yes,...

Adobe AIR < 17.0.0.172 Multiple Vulnerabilities (APSB15-09)

Binary data 8812.prm...

Adobe Flash Player - ShaderJob Buffer Overflow (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Adobe Flash Player ShaderJob Buffer Overflow', 'Description' = %q This module exploits a buffer overflow vulnerability related to th...

Adobe Flash Player Memory Corruption (APSB15-09: CVE-2015-3090)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted swf file. A remote attacker can exploit this issue and lead to code execution...

CVE-2015-3090

creationtimestamp| type| source ---|---|--- 2015-05-27 07:14:54+00:00| seen| MISP/55656ec4-8154-41ea-a1ce-42c7950d210b 2015-06-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37368 2015-06-25 10:59:48+00:00| seen| MISP/558bdeda-4ff0-463c-aac5-4b9e950d210b 2018-05-29...

openSUSE Security Update : flash-player (openSUSE-2015-372)

The Adobe flash-player package was updated to version 11.2.202.460 to fix several security issues. The following vulnerabilities were fixed bsc930677 : - APSB15-09, CVE-2015-3044, CVE-2015-3077, CVE-2015-3078, CVE-2015-3079, CVE-2015-3080, CVE-2015-3081, CVE-2015-3082, CVE-2015-3083, CVE-2015-308...