123 matches found
CVE-2015-3096
CVE-2015-3096 relates to Adobe Flash Player and related AIR components; connected sources indicate a CSRF issue linked to an incomplete fix for CVE-2014-5333, enabling CSRF via crafted SWF/OBJECT content and potentially bypassing protections. Details about affected versions are provided in adviso...
Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt45
3:11-alt45 built June 10, 2015 Sergey V Turchin in task 145264 June 10, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-3096, CVE-2015-3097, CVE-2015-3098, CVE-2015-3099, CVE-2015-3100, CVE-2015-3101, CVE-2015-3102, CVE-2015-3103, CVE-2015-3104, CVE-2015-3105, CVE-2015-3106,...
Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt45
3:11-alt45 built June 10, 2015 Sergey V Turchin in task 145263 June 10, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-3096, CVE-2015-3097, CVE-2015-3098, CVE-2015-3099, CVE-2015-3100, CVE-2015-3101, CVE-2015-3102, CVE-2015-3103, CVE-2015-3104, CVE-2015-3105, CVE-2015-3106,...
Adobe Flash Player <= 17.0.0.188 Multiple Vulnerabilities (APSB15-11) (Mac OS X)
The version of Adobe Flash Player installed on the remote Mac OS X host is equal or prior to version 17.0.0.188. It is, therefore, affected by multiple vulnerabilities : - An unspecified vulnerability exists that allows an attacker to bypass the fix for CVE-2014-5333. CVE-2015-3096 - Multiple...
CVE-2014-3096
Summary (CVE-2014-3096): IBM Cúram Social Program Management is vulnerable to cross-site scripting (XSS) due to improper validation of user-supplied input. A remote, authenticated attacker can craft a URL to execute script in a victim’s browser within the hosting site’s context, potentially steal...
CVE-2014-3096
Cross-site scripting XSS vulnerability in IBM Curam Social Program Management before 6.0.5.5a allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...
Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2014-3096)
The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3096 advisory. - net: sctp: fix panic on duplicate ASCONF chunks Daniel Borkmann Orabug: 19953088 CVE-2014-3687 - net: sctp: fix skboverpanic when receiving...
openSUSE: Security Advisory for update (openSUSE-SU-2012:0656-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2012-3096
Cisco Unity Connection (UC) versions 7.1, 8.0, and 8.5 are affected by CVE-2012-3096. The advisory states that remote authenticated users can trigger a denial of service (resource consumption and administration outage) through extended use of the product, identified as Bug ID CSCtd79132. The avai...
CVE-2011-3096
CVE-2011-3096 is a use-after-free in Chromium’s GTK omnibox handling. The issue affects Chromium components (GTK omnibox) and can allow remote attackers to cause a denial of service and possibly other impact. Connected advisories confirm CVE-2011-3096 among multiple Chromium/V8 vulnerabilities, a...
CVE-2010-3096
CVE-2010-3096 concerns SoftX FTP Client (3.3 and possibly earlier). A directory traversal flaw arises from insufficient sanitization of downloaded filenames, allowing a remote FTP server to cause arbitrary files to be written (via patterns like "..\" in the filename). The NVD entry describes a di...
CVE-2009-3096
Multiple unspecified vulnerabilities in HP Performance Insight 5.3 allow remote attackers to have an unknown impact, related to 1 a "Remote exploit" on Windows platforms, and 2 a "Remote preauthentication exploit" on the Windows Server 2003 SP2 platform, as demonstrated by certain modules in...
CVE-2009-3096
HP Performance Insight 5.3 is affected by multiple unspecified vulnerabilities described as remote exploits on Windows and a remote preauthentication exploit on Windows Server 2003 SP2, demonstrated by VulnDisco Pack Professional 8.11 modules. The initial disclosure notes that as of 2009-09-03 th...
CVE-2008-3096
The Outline Designer module 5.x before 5.x-1.4 for Drupal changes each content reader's authentication level to match that of the content author, which might allow remote attackers to gain privileges...
CVE-2008-3096
The CVE-2008-3096 issue affects the Drupal Outline Designer module (5.x before 5.x-1.4). The vulnerability arises because the module changes each content reader’s authentication level to match that of the content author, potentially allowing remote attackers to gain privileges. Documented affecte...
CVE-2008-3096
The Outline Designer module 5.x before 5.x-1.4 for Drupal changes each content reader's authentication level to match that of the content author, which might allow remote attackers to gain privileges...
CVE-2007-3096
Directory traversal vulnerability in login.php in PBLang PBL 4.67.16.a and earlier, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter...
CVE-2007-3096
PBLang up to version 4.67.16.a is affected by a directory traversal/local file inclusion in login.php, exploitable via the lang parameter when magic_quotes_gpc is disabled. An unauthenticated, remote attacker could cause the server to include and potentially execute local PHP files, subject to we...
CVE-2006-3096
CVE-2006-3096: Multiple SQL injection vulnerabilities in iPostMX 2005 2.0 and earlier allow remote attackers to execute arbitrary SQL via user-controlled input in (1) the forum parameter in messagepost.cfm and (2) the topic parameter in topics.cfm. Root cause described as improper handling of inp...