KLA11673 Type confusion vulnerability was found in Adobe Flash Player

Type confusion vulnerability was found in Adobe Flash Player. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories APSB20-06 Related products Adobe-Flash-Player-ActiveX Adobe-Flash-Player-NPAPI Adobe-Flash-Player-PPAPI CVE list CVE-2020-3757 critical...

Adobe Flash Player Type Confusion (APSB20-06: CVE-2020-3757)

A type confusion vulnerability exists in Adobe Flash Player. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Adobe Flash Player for Mac <= 32.0.0.321 (APSB20-06)

The version of Adobe Flash Player installed on the remote macOS or Mac OS X host is equal or prior to version 32.0.0.321. It is therefore affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid133606; scriptversion"1.4";...

RHEL 7 : patch (RHSA-2019:3757)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:3757 advisory. The patch program applies diff files to originals. The diff command is used to compare an original to a changed file. Diff lists the changes...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : poppler vulnerability (USN-3757-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3757-1 advisory. Hosein Askari discovered that poppler incorrectly handled certain PDF files. An attacker could possible use this issue to cause a denial o...

CVE-2018-3757

Command injection exists in pdf-image v2.0.0 due to an unescaped string parameter...

CVE-2018-3757

Command injection exists in pdf-image v2.0.0 due to an unescaped string parameter...

CVE-2018-3757

pdf-image prior to 2.0.0 is vulnerable to command injection via an unescaped pdfFilePath parameter, enabling arbitrary shell commands to be executed (RCE). Impact is consistent with remote code execution if an attacker controls the input. The recommended remediation is to upgrade to version 2.0.0...

CVE-2017-3757

An unquoted service path vulnerability was identified in the driver for the ElanTech Touchpad, various versions, used on some Lenovo brand notebooks not ThinkPads. This could allow an attacker with local privileges to execute code with administrative privileges...

CVE-2017-3757

CVE-2017-3757 affects Lenovo notebooks (excluding ThinkPads) with the ElanTech Touchpad driver. The vulnerability is an unquoted service path that could allow a local attacker to execute code with administrative privileges. The issue is documented across multiple sources (NVD entry, CNVD, Lenov o...

CVE-2017-3757

An unquoted service path vulnerability was identified in the driver for the ElanTech Touchpad, various versions, used on some Lenovo brand notebooks not ThinkPads. This could allow an attacker with local privileges to execute code with administrative privileges...

Unquoted Service Path Privilege Escalation in ElanTech Touchpad Driver - us

Lenovo Security Advisory: LEN-14390 Potential Impact: Privilege Escalation Severity: Medium Scope of Impact: Industry-Wide CVE Identifier: CVE-2017-3757 Summary Description: An unquoted service path vulnerability was identified in the driver for the ElanTech Touchpad used on some Lenovo brand...

Debian: Security Advisory (DSA-3757-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-3757

The printmaps function in toolbox/lsof.c in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows user-assisted attackers to gain privileges via a crafted application that attempts to list a long name of a memory-mapped file, aka internal bug 28175237...

CVE-2016-3757

The printmaps function in toolbox/lsof.c in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows user-assisted attackers to gain privileges via a crafted application that attempts to list a long name of a memory-mapped file, aka internal bug 28175237...

CVE-2016-3757

The printmaps function in toolbox/lsof.c in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows user-assisted attackers to gain privileges via a crafted application that attempts to list a long name of a memory-mapped file, aka internal bug 28175237...

CVE-2016-3757

CVE-2016-3757 affects Android: the print_maps function in toolbox/lsof.c on Android 4.x up to 4.4.4, 5.0.x up to 5.0.2, 5.1.x up to 5.1.1, and 6.x before 2016-07-01 allows a user-assisted attacker to gain privileges by a crafted app that lists a long memory-mapped file name (internal bug 28175237...

Oracle Solaris Critical Patch Update : july2013_SRU5_5

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: SMF/File Locking Services. Supported versions that are affected are 8, 9, 10 and 11. Easily exploitable...

CVE-2014-3757

SQL injection vulnerability in sorter.php in the phpManufaktur kitForm extension 0.43 and earlier for the KeepInTouch KIT module allows remote attackers to execute arbitrary SQL commands via the sortervalue parameter...

CVE-2014-3757

CVE-2014-3757 involves a SQL injection in sorter.php of the phpManufaktur kitForm extension (v0.43 and earlier) used with the KeepInTouch (KIT) module. The vulnerability arises from unsafely handling the sorter_value parameter, enabling remote attackers to forge and execute arbitrary SQL commands...