July 2016 Adobe Flash Security Update

This security update addresses the following vulnerabilities, which are described in Adobe Security Bulletin APSB16-25: CVE-2016-4173, CVE-2016-4174, CVE-2016-4175, CVE-2016-4176, CVE-2016-4177, CVE-2016-4178, CVE-2016-4179, CVE-2016-4182, CVE-2016-4188, CVE-2016-4185, CVE-2016-4222, CVE-2016-422...

Adobe Flash Player <= 22.0.0.192 Multiple Vulnerabilities (APSB16-25)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 22.0.0.192. It is, therefore, affected by multiple Vulnerabilities : - Multiple memory corruption issues exist that allow a remote attacker to execute arbitrary code. CVE-2016-4172, CVE-2016-4175,...

Dell SonicWall NetExtender CVE-2015-4173 Remote Privilege Escalation Vulnerability

Unquoted Windows search path vulnerability in the autorun value in Dell SonicWall NetExtender before 7.5.227 and 8.0.x before 8.0.238, as used in the SRA firmware before 7.5.1.2-40sv and 8.x before 8.0.0.3-23sv, allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE%...

CVE-2015-4173

Dell SonicWall NetExtender is affected by CVE-2015-4173, a local privilege-escalation due to an unquoted Windows search path in the autorun value. Affected as: NetExtender before 7.5.227 and 8.0.x before 8.0.238, used with SRA firmware before 7.5.1.2-40sv and 8.x before 8.0.0.3-23sv. Root cause: ...

CVE-2015-4173

Unquoted Windows search path vulnerability in the autorun value in Dell SonicWall NetExtender before 7.5.227 and 8.0.x before 8.0.238, as used in the SRA firmware before 7.5.1.2-40sv and 8.x before 8.0.0.3-23sv, allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE%...

Dell SonicWall NetExtender Unquoted Autorun Privilege Escalation

Dell SonicWall NetExtender Unquoted Autorun Privilege Escalation Vendor Website : http://www.sonicwall.com INDEX --------------------------------------- 1. CVE 2. Background 3. Description 4. Affected Products 5. Solution 6. Credit 7. Disclosure Timeline 1. CVE...

Adobe Shockwave Player <= 11.6.7.637 Multiple Vulnerabilities (APSB12-23) (Mac OS X)

The remote Mac OS X host contains a version of Adobe Shockwave Player that is equal to or prior than 11.6.7.637. It is, therefore, affected by the following vulnerabilities : - Several unspecified errors exist that can lead to buffer overflow vulnerabilities and possible code execution...

CVE-2013-4173

Directory traversal vulnerability in the trend-data daemon xymondrrd in Xymon 4.x before 4.3.12 allows remote attackers to delete arbitrary files via a .. dot dot in the host name in a "drophost" command...

CVE-2013-4173

Directory traversal vulnerability in the trend-data daemon xymondrrd in Xymon 4.x before 4.3.12 allows remote attackers to delete arbitrary files via a .. dot dot in the host name in a "drophost" command...

CVE-2013-4173

CVE-2013-4173 describes a directory traversal in the trend-data daemon (xymond_rrd) of Xymon 4.x prior to 4.3.12. An attacker can remotely delete arbitrary files by injecting a ".." in the host name within a drophost command, leveraging the daemon’s handling of host names. The issue is limited to...

CVE-2013-4173

Directory traversal vulnerability in the trend-data daemon xymondrrd in Xymon 4.x before 4.3.12 allows remote attackers to delete arbitrary files via a .. dot dot in the host name in a "drophost" command...

[ MDVSA-2013:213 ] xymon

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:213 http://www.mandriva.com/en/support/security/ Package : xymon Date : August 13, 2013 Affected: Business Server 1.0 Problem Description: Updated xymon package fixes security vulnerability: A security...

MGASA-2013-0243 Updated xymon package fixes security vulnerability.

A security vulnerability has been found in version 4.x of the Xymon Systems & Network Monitor tool The error permits a remote attacker to delete files on the server running the Xymon trend-data daemon "xymondrrd". File deletion is done with the privileges of the user that Xymon is running with, s...

CVE-2012-4173

Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-4172, CVE-2012-4174, CVE-2012-4175, and CVE-2012-5273...

Buffer overflow

Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-4172, CVE-2012-4173, CVE-2012-4174, and CVE-2012-5273...

CVE-2012-4173

Adobe Shockwave Player before 11.6.8.638 is vulnerable to a buffer overflow that allows arbitrary code execution via unspecified vectors (CVE-2012-4172, CVE-2012-4173, CVE-2012-4174, CVE-2012-4175, CVE-2012-5273). Affected product: Shockwave Player (Windows/macOS) prior to the fixed build; base s...

CVE-2012-4173

Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-4172, CVE-2012-4174, CVE-2012-4175, and CVE-2012-5273...

Adobe Plugs Several Buffer Overflow Holes in Shockwave Player

Adobe announced today it has repaired a host of critical buffer overflow vulnerabilities and an array out of bounds vulnerability in Shockwave Player and urges users to update to the latest version of the software, version 11.6.8.638. The company said it is not aware of active exploits. Both the...

Adobe Shockwave 11.6.7.637 contains multiple exploitable vulnerabilities

Overview Adobe Shockwave Player 11.6.7.637 and earlier versions on the Windows and Macintosh operating systems contain critical vulnerabilities that can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Adobe Macromedia Shockwave Player is...

CVE-2011-4173

Cross-site request forgery CSRF vulnerability in Simple Machines Forum SMF 2.x before 2.0.1 allows remote attackers to hijack the authentication of administrators or moderators via vectors involving image files, a different vulnerability than CVE-2011-3615. NOTE: some of these details are obtaine...