Security Bulletin: Cross-Site Scripting vulnerability in QRadar (CVE-2014-3091)

Summary Reflected Cross-Site Scripting vulnerabilty found in IBM QRadar versions 7.1.x and 7.2.x. Vulnerability Details CVEID: CVE-2014-3091 DESCRIPTION: IBM QRadar is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this...

CVE-2017-3091

Adobe Digital Editions 4.5.4 and earlier versions are affected by a memory corruption vulnerability (CVE-2017-3091) that could lead to arbitrary code execution. The connected Nessus entries corroborate multiple vulnerabilities in ADE and reference a security update APSB17-27 advising remediation ...

Adobe Digital Editions < 4.5.6 Multiple Vulnerabilities (APSB17-27)

The version of Adobe Digital Editions installed on the remote Windows host is prior to 4.5.6. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB17-27 advisory. - Adobe Digital Editions 4.5.4 and earlier has an exploitable use after free vulnerability. Successful...

Adobe Digital Editions < 4.5.6 Multiple Vulnerabilities (APSB17-27) (macOS)

The version of Adobe Digital Editions installed on the remote macOS or Mac OS X host is prior to 4.5.6. It is, therefore, affected by multiple vulnerabilities : - An XML external entity XXE parsing flaw exists that can lead to information disclosure. CVE-2017-11272 - An unspecified buffer overflo...

CVE-2016-3091

Cloud Foundry Diego 0.1468.0 through 0.1470.0 allows remote attackers to cause a denial of service...

CVE-2016-3091

CVE-2016-3091 affects Cloud Foundry Diego component; Diego releases 0.1468.0–0.1470.0 are vulnerable to denial-of-service due to log handling that splits large UTF-8 log streams, exploitable by an app emitting malformed UTF-8. Remediation: upgrade to Diego 0.1471.0.

Ubuntu 14.04 LTS / 16.04 LTS : Oxide vulnerabilities (USN-3091-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3091-1 advisory. A use-after-free was discovered in the V8 bindings in Blink. If a user were tricked in to opening a specially crafted website, an attacker...

Adobe AIR < 17.0.0.172 Multiple Vulnerabilities (APSB15-09)

Binary data 8812.prm...

openSUSE Security Update : flash-player (openSUSE-2015-372)

The Adobe flash-player package was updated to version 11.2.202.460 to fix several security issues. The following vulnerabilities were fixed bsc930677 : - APSB15-09, CVE-2015-3044, CVE-2015-3077, CVE-2015-3078, CVE-2015-3079, CVE-2015-3080, CVE-2015-3081, CVE-2015-3082, CVE-2015-3083, CVE-2015-308...

Adobe Flash Player Multiple Vulnerabilities - 01 (May 2015) - Windows

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...

Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt44

3:11-alt44 built May 15, 2015 Sergey V Turchin in task 144380 May 14, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-3044, CVE-2015-3077, CVE-2015-3078, CVE-2015-3079, CVE-2015-3080, CVE-2015-3081, CVE-2015-3082, CVE-2015-3083, CVE-2015-3084, CVE-2015-3085, CVE-2015-3086,...

Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt44

3:11-alt44 built May 15, 2015 Sergey V Turchin in task 144379 May 14, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-3044, CVE-2015-3077, CVE-2015-3078, CVE-2015-3079, CVE-2015-3080, CVE-2015-3081, CVE-2015-3082, CVE-2015-3083, CVE-2015-3084, CVE-2015-3085, CVE-2015-3086,...

CVE-2015-3091

CVE-2015-3091 affects Adobe Flash Player prior to 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows/OS X, and before 11.2.202.460 on Linux; Adobe AIR prior to 17.0.0.172 (and AIR SDK/Compiler before 17.0.0.172). The issue stems from improper restriction of memory address discovery, en...

RHEL 5 / 6 : flash-plugin (RHSA-2015:1005)

The remote Redhat Enterprise Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2015:1005 advisory. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes multiple...

Debian Security Advisory DSA 3091-1 (getmail4 - security update)

Several vulnerabilities have been discovered in getmail4, a mail retriever with support for POP3, IMAP4 and SDPS, that could allow man-in-the-middle attacks. CVE-2014-7273 The IMAP-over-SSL implementation in getmail 4.0.0 through 4.43.0 does not verify X.509 certificates from SSL servers, which...

Debian: Security Advisory (DSA-3091-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-3091

IBM QRadar SIEM is affected by CVE-2014-3091 (XSS) in versions 7.1.x and 7.2.x due to improper validation of user input, enabling a remote attacker to craft a URL that executes script in a victim’s browser. The IBM Security bulletin notes the vulnerability and provides fixes: 7.1 MR2 – 7.1.0-QRAD...

openSUSE: Security Advisory for update (openSUSE-SU-2012:0656-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Chrome Multiple Vulnerabilities - May 12 (Mac OS X)

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnmay12macosx.nasl 5963 2017-04-18 09:02:14Z teissa $ Google Chrome Multiple Vulnerabilities - May 12 Mac OS X Authors: Madhuri D Copyright: Copyright c 2012...

Google Chrome Multiple Vulnerabilities (May 2012) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...