71 matches found
Memory corruption
Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-4172,...
Memory corruption
Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-4172,...
Memory corruption
Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-4172,...
CVE-2016-4240
Technical details about CVE-2016-4240 are not publicly provided in the supplied documents. Monitor for updates from vendor advisories and ENISA entries.
CVE-2016-4182
Technical details for CVE-2016-4182 are not publicly provided in the supplied documents; only generic references and cross-links are available. Monitor for updates from official advisories.
Adobe Flash Player <= 22.0.0.192 Multiple Vulnerabilities (APSB16-25)
The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 22.0.0.192. It is, therefore, affected by multiple Vulnerabilities : - Multiple memory corruption issues exist that allow a remote attacker to execute arbitrary code. CVE-2016-4172, CVE-2016-4175,...
SUSE: Security Advisory for MySQL (SUSE-SU-2014:1072-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-4240
Cisco IP Communicator 8.6(4) is affected by CVE-2015-4240. A remote attacker can cause a denial of service by sending an HTTP GET request to a specific URL, targeting the web interface; this could take the web service offline. Cisco has acknowledged the vulnerability and released software updates...
CVE-2012-4240
SQL injection vulnerability in modules/calendar/json.php in Group-Office community before 4.0.90 allows remote authenticated users to execute arbitrary SQL commands via the sort parameter...
CVE-2012-4240
SQL injection vulnerability in modules/calendar/json.php in Group-Office community before 4.0.90 allows remote authenticated users to execute arbitrary SQL commands via the sort parameter...
CVE-2012-4240
Group-Office Calendar SQL Injection (CVE-2012-4240) affects Group-Office community versions prior to 4.0.90. The vulnerability lies in modules/calendar/json.php where the sort parameter is unsafely injected into an ORDER BY SQL clause. An authenticated user can exploit this to cause database erro...
SuSE 11.3 Security Update : MySQL (SAT Patch Number 9624)
This MySQL update provides the following : - upgrade to version 5.5.39, bnc887580 - CVE's fixed: CVE-2014-2484 / CVE-2014-4258 / CVE-2014-4260 / CVE-2014-2494 / CVE-2014-4238 / CVE-2014-4207 / CVE-2014-4233 / CVE-2014-4240 / CVE-2014-4214 / CVE-2014-4243 See also:...
SuSE 11.3 Security Update : MySQL (SAT Patch Number 9624)
This MySQL update provides the following : - upgrade to version 5.5.39, bnc887580 - CVE's fixed: CVE-2014-2484 / CVE-2014-4258 / CVE-2014-4260 / CVE-2014-2494 / CVE-2014-4238 / CVE-2014-4207 / CVE-2014-4233 / CVE-2014-4240 / CVE-2014-4214 / CVE-2014-4243 See also:...
SUSE-SU-2015:0946-1 Security update for MySQL
This MySQL update provides the following: upgrade to version 5.5.39, bnc887580 CVE's fixed: CVE-2014-2484, CVE-2014-4258, CVE-2014-4260, CVE-2014-2494, CVE-2014-4238, CVE-2014-4207, CVE-2014-4233, CVE-2014-4240, CVE-2014-4214, CVE-2014-4243 See also:...
Oracle MySQL Multiple Unspecified vulnerabilities-01 (Jul 2014) - Windows
Oracle MySQL is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql";...
CVE-2014-4240
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.17 and earlier allows local users to affect confidentiality and integrity via vectors related to SRREP...
CVE-2014-4240
CVE-2014-4240 is listed as a vulnerability in the MySQL Server component of Oracle MySQL up to version 5.6.17. The initial description notes an unspecified vulnerability affecting confidentiality and integrity via SRREP-related vectors, with a local attack vector and a low base score (CVSS v2: 3....
Group Office Calendar (calendar/json.php) SQL Injection
No description provided by source. /-------------------------------------\ | Group-Office Calendar SQL Injection | -------------------------------------/ Summary ======= Versions of Group-Office a web app for online collaboration prior to 4.0.90 are subject to a SQL injection vulnerability locate...
CVE-2013-4240
The CVE-2013-4240 entry concerns the WordPress HMS Testimonials plugin, affected in versions before 2.0.11. The vulnerability set consists of multiple CSRF flaws that allow an attacker to hijack an administrator’s authenticated session and perform actions such as adding testimonials, adding group...