93 matches found
CVE-2018-4278
CVE-2018-4278 affects Safari prior to 11.1.2, iTunes for Windows prior to 12.8, iOS prior to 11.4.1, tvOS prior to 11.4.1, and iCloud for Windows prior to 7.6. The vulnerability involves sound fetched through elements being exfiltrated cross-origin due to insufficient audio taint tracking. The i...
About the security content of Safari 11.1.2 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...
About the security content of iCloud for Windows 7.6 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...
openSUSE Security Update : webkit2gtk3 (openSUSE-2018-1025)
This update for webkit2gtk3 to version 2.20.5 fixes the following issues : Security issue fixed : - CVE-2018-12911: Fix off-by-one in xdgmimegetsimpleglobs bsc1101999. - CVE-2018-4261, CVE-2018-4262, CVE-2018-4263, CVE-2018-4264, CVE-2018-4265, CVE-2018-4267, CVE-2018-4272, CVE-2018-4284:...
Debian DSA-4278-1 : jetty9 - security update
Multiple vulnerabilities were discovered in Jetty, a Java servlet engine and webserver which could result in HTTP request smuggling. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4278. The text itself is...
macOS : Apple Safari < 11.1.2 Multiple Vulnerabilities
The version of Apple Safari installed on the remote macOS or Mac OS X host is prior to 11.1.2. It is, therefore, affected by multiple vulnerabilities as described in the HT208695 security advisory. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid111109;...
Apple TV < 11.4.1 Multiple Vulnerabilities
According to its banner, the version of Apple TV on the remote device is prior to 11.4.1. It is, therefore, affected by multiple vulnerabilities as described in the HT208936 security advisory. Note that only 4th and 5th generation models are affected by these vulnerabilities. C Tenable Network...
Apple iTunes Security Updates (HT208933) - Windows
Apple iTunes is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:itunes"; ifdescription...
About the security content of iOS 11.4.1
About the security content of iOS 11.4.1 This document describes the security content of iOS 11.4.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
About the security content of iCloud for Windows 7.6
About the security content of iCloud for Windows 7.6 This document describes the security content of iCloud for Windows 7.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...
Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt65
3:11-alt65 built Sept. 22, 2016 Michael Shigorin in task 169622 Sept. 19, 2016 Sergey V Turchin - new version CVE-2016-4271, CVE-2016-4272, CVE-2016-4274, CVE-2016-4275, CVE-2016-4276, CVE-2016-4277, CVE-2016-4278, CVE-2016-4279, CVE-2016-4280, CVE-2016-4281, CVE-2016-4282, CVE-2016-4283,...
Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt65
3:11-alt65 built Sept. 20, 2016 Sergey V Turchin in task 169477 Sept. 19, 2016 Sergey V Turchin - new version CVE-2016-4271, CVE-2016-4272, CVE-2016-4274, CVE-2016-4275, CVE-2016-4276, CVE-2016-4277, CVE-2016-4278, CVE-2016-4279, CVE-2016-4280, CVE-2016-4281, CVE-2016-4282, CVE-2016-4283,...
SUSE SLED12 Security Update : flash-player (SUSE-SU-2016:2312-1)
This update for flash-player fixes the following security issues APSB16-29, boo998589 : - integer overflow vulnerability that could lead to code execution CVE-2016-4287. - use-after-free vulnerabilities that could lead to code execution CVE-2016-4272, CVE-2016-4279, CVE-2016-6921, CVE-2016-6923,...
RHEL 6 : flash-plugin (RHSA-2016:1865)
The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2016:1865 advisory. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update upgrades Flash Player to...
CVE-2016-4278
Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2016-4271 and...
CVE-2016-4278
Technical details for CVE-2016-4278 are not publicly available in the provided documents. Monitor for updates from official advisories and affected vendors.
September 2016 Adobe Flash Security Update
This security update addresses the following vulnerabilities, which are described in Adobe Security Bulletin APSB16-29: CVE-2016-4271, CVE-2016-4272, CVE-2016-4274, CVE-2016-4275, CVE-2016-4276, CVE-2016-4277, CVE-2016-4278, CVE-2016-4279, CVE-2016-4280, CVE-2016-4281, CVE-2016-4282, CVE-2016-428...
MS16-117: Security Update for Adobe Flash Player (3188128)
The remote Windows host is missing KB3188128. It is, therefore, affected by multiple vulnerabilities : - Multiple security bypass vulnerabilities exist that allow an unauthenticated, remote attacker to disclose sensitive information. CVE-2016-4271, CVE-2016-4277, CVE-2016-4278 - Multiple...
CVE-2015-4278
Cisco Email Security Appliance (ESA) vulnerable to CVE-2015-4278: 8.5.6-106 and 9.5.0-201 allow remote attackers to cause a DoS (per-domain email reception outage) by placing malformed DMARC policy data in DNS TXT records for a domain (Bug ID CSCuv14806). The root cause is malformed DMARC policy ...