Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt63

3:11-alt63 built June 27, 2016 Sergey V Turchin in task 166413 June 27, 2016 Sergey V Turchin - new version - security fixes: CVE-2016-4122, CVE-2016-4123, CVE-2016-4124, CVE-2016-4125, CVE-2016-4127, CVE-2016-4128, CVE-2016-4129, CVE-2016-4130, CVE-2016-4131, CVE-2016-4132, CVE-2016-4133,...

Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt63

3:11-alt63 built June 27, 2016 Sergey V Turchin in task 166414 June 27, 2016 Sergey V Turchin - new version - security fixes: CVE-2016-4122, CVE-2016-4123, CVE-2016-4124, CVE-2016-4125, CVE-2016-4127, CVE-2016-4128, CVE-2016-4129, CVE-2016-4130, CVE-2016-4131, CVE-2016-4132, CVE-2016-4133,...

openSUSE Security Update : flash-player (openSUSE-2016-740)

Adobe flash-player was updated to 11.2.202.626 to fix the following security issues : Security update to 11.2.202.626 boo984695 : - APSB16-18, CVE-2016-4122, CVE-2016-4123, CVE-2016-4124, CVE-2016-4125, CVE-2016-4127, CVE-2016-4128, CVE-2016-4129, CVE-2016-4130, CVE-2016-4131, CVE-2016-4132,...

openSUSE Security Update : flash-player (openSUSE-2016-743)

Adobe flash-player was updated to 11.2.202.626 to fix the following security issues : Security update to 11.2.202.626 boo984695 : - APSB16-18, CVE-2016-4122, CVE-2016-4123, CVE-2016-4124, CVE-2016-4125, CVE-2016-4127, CVE-2016-4128, CVE-2016-4129, CVE-2016-4130, CVE-2016-4131, CVE-2016-4132,...

SUSE: Security Advisory for flash-player (SUSE-SU-2016:1613-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-4135

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083...

CVE-2016-4135

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083...

CVE-2016-4135

CVE-2016-4135 is one of multiple Flash Player vulnerabilities addressed in mid‑2016 advisories. Connected sources show this entry being treated as a memory corruption issue in Adobe Flash Player (Flash libraries in IE/Edge) that contributes to heap-based buffers overflow and arbitrary code execut...

Gentoo Security Advisory GLSA 201404-05

Gentoo Linux Local Security Checks GLSA 201404-05 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

CVE-2015-4135

Cross-site scripting XSS vulnerability in goto.php in phpwind 8.7 allows remote attackers to inject arbitrary web script or HTML via the url parameter...

CVE-2015-4135

CVE-2015-4135 is an XSS vulnerability affecting phpwind 8.7, specifically goto.php with the url parameter. The root cause is improper handling of user input leading to injection of arbitrary web script or HTML. Exploitation details or in-the-wild status are not provided in the connected documents...

Ubuntu: Security Advisory (USN-2473-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-2473-1: coreutils vulnerabilities

It was discovered that the distcheck rule in dist-check.mk in GNU coreutils allows local users to gain privileges via a symlink attack on a directory tree under /tmp. This issue only affected Ubuntu 10.04 LTS. CVE-2009-4135 Bertrand Jacquin and Fiedler Roman discovered date and touch incorrectly...

CVE-2012-4135

Cisco NX-OS CVE-2012-4135 is a local directory-traversal vulnerability in filesys on Cisco NX-OS 6.1(2) and earlier. Exploitation requires local access and crafted arguments to the filesys delete command, allowing an authenticated attacker to access or delete arbitrary files. The issue is associa...

CVE-2013-4135

The vos command in OpenAFS 1.6.x before 1.6.5, when using the -encrypt option, only enables integrity protection and sends data in cleartext, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2013-4135

CVE-2013-4135 affects OpenAFS 1.6.x up to before 1.6.5: when using the -encrypt option, the vos command only provides integrity protection and transmits data in cleartext, enabling potential network sniffing of sensitive information. Public advisories consistently reference this as part of OpenAF...

[SECURITY] [DSA 2729-1] openafs security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2729-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 28, 2013 http://www.debian.org/security/faq -...

Directory traversal

Multiple directory traversal vulnerabilities in the vendor daemon in Rational Common Licensing in Telelogic License Server 2.0, Rational License Server 7.x, and ibmratl in IBM Rational License Key Server RLKS 8.0 through 8.1.2 allow remote attackers to execute arbitrary code via vectors related t...

CVE-2011-1389

CVE-2011-1389 affects IBM Rational License Key Server (RLKS) 8.0–8.1.x and related Telelogic/Rational license servers. The vendor daemon (ibmratl) and lmgrd contain directory traversal and file-rename/load bugs that enable remote code execution via log file operations. Connected sources also refe...

CVE-2011-4135

CVE-2011-4135 affects Flexera FlexNet Publisher 11.10 lmgrd (FlexNet License Server Manager). The vulnerability stems from directory traversal and related file-rename/load issues on log files, allowing remote attackers to execute arbitrary code via those vectors. CVSSv2 base score 10.0 (HIGH) wit...