70 matches found
SuSE 10 Security Update : flash-player (ZYPP Patch Number 5757)
This update of flash-player fixes several critical security vulnerabilities. CVE-2007-6243 / CVE-2008-3873 / CVE-2007-4324 / CVE-2008-4401 / CVE-2008-4503 / CVE-2008-4546 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000...
FreeBSD Ports: linux-flashplugin
The remote host is missing an update to the system as announced in the referenced advisory. VID 78f456fd-9c87-11dd-a55e-00163e000016 OpenVAS Vulnerability Test $ Description: Auto generated from VID 78f456fd-9c87-11dd-a55e-00163e000016 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Critical: Red Hat Security Advisory: flash-plugin security update
An updated Adobe Flash Player package that fixes several security issues is now available for Red Hat Enterprise Linux 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 18th November 2008 The erratum has been updated to...
CVE-2008-4503
CVE-2008-4503 : Adobe Flash Player before 9.0.124.0 has a Settings Manager display flaw enabling clickjacking, where malicious content can disguise dialogs to trick the user into interacting with a link or dialog, potentially granting camera/microphone access. Multiple sources (Gentoo GLSA, OpenV...
CVE-2007-4503
CVE-2007-4503 describes an SQL injection in the Joomla! Nice Talk component (com_nicetalk) version 0.9.3 and earlier. The vulnerability exists in index.php where the tagid parameter can be exploited by a remote attacker to execute arbitrary SQL commands. The NVD entry lists a HIGH base score (7.5...
CVE-2006-4503
NX5Linx/NX5Linkx 1.0 is affected by CVE-2006-4503 due to a directory traversal in link.php where the logo parameter is not sanitized, allowing an attacker to read arbitrary files on the server. The vulnerability is confirmed in publicly shared advisories for NX5Linkx (eVuln EV0138) which lists NX...
Solaris dtspcd Heap Overflow
This is a port of noir's dtspcd exploit. This module should work against any vulnerable version of Solaris 8 sparc. The original exploit code was published in the book Shellcoder's Handbook. This module requires Metasploit: https://metasploit.com/download Current source:...
CVE-2005-4503
CVE-2005-4503 affects httprint v202 and possibly earlier versions up to v301, where a remote attacker can cause a denial of service (crash) by sending an HTTP response with a long Server field. Evidence in multiple sources confirms the vulnerability description and affected versions; no exploitat...