55 matches found
CVE-2019-4937
CVE-2019-4937 is rejected/not used and does not represent an active vulnerability entry.
CVE-2018-4937
CVE-2018-4937 affects Adobe Flash Player prior to 29.0.0.140 (APSB18-08). The issue is an exploitable out-of-bounds write that could lead to arbitrary code execution in the context of the current user. Affected versions include 29.0.0.113 and earlier; remediation is upgrading to 29.0.0.140 or new...
CVE-2018-4937
creationtimestamp| type| source ---|---|--- 2018-04-24 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44529 2025-08-31 03:01:27+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d...
RHEL 6 : flash-plugin (RHSA-2018:1119)
The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2018:1119 advisory. - flash-plugin: Remote Code Execution vulnerabilities APSB18-08 CVE-2018-4932, CVE-2018-4935, CVE-2018-4937 - flash-plugin: Information...
Microsoft IE And Microsoft Edge Flash Player Security Update (KB4093110)
This host is missing a critical security update according to Microsoft KB4093110. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
KLA11223 Multiple vulnerabilities in Adobe Flash Player
Multiple serious vulnerabilities have been found in Adobe Flash Player. Malicious users can exploit these vulnerabilities to execute arbitrary code and obtain sensitive information. 1. Use-After-Free vulnerability can be exploited remotely to execute arbitrary code; 2. Out-of-bounds reading...
Adobe Flash Player <= 29.0.0.113 (APSB18-08)
The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 29.0.0.113. It is therefore affected by multiple vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
CVE-2017-4937
CVE-2017-4937 refers to an out-of-bounds read vulnerability in the JPEG2000 parser (TPView.dll) affecting VMware Workstation 12.x prior to 12.5.8 and Horizon View Client for Windows 4.x prior to 4.6.1. Exploitation can lead to code execution or Denial of Service on the host OS in scenarios where ...
CVE-2016-4937
This CVE-2016-4937 entry is rejected/not used; it does not represent an active vulnerability.
CVE-2014-4937
Directory traversal vulnerability in includes/bookxexport.php BookX plugin 1.7 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...
CVE-2014-4937
CVE-2014-4937 involves the WordPress plugin BookX (version 1.7) and its file includes/bookx_export.php . The root cause is missing input validation that allows a directory traversal via a ".." in the file parameter, enabling a remote attacker to read arbitrary files on the server. This is a local...
CVE-2014-4937
creationtimestamp| type| source ---|---|--- 2014-05-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39251...
CVE-2013-4937
CVE-2013-4937 describes multiple unspecified vulnerabilities in the AiCloud feature of Asus routers (models: RT-AC66U, RT-N66U, RT-N65U, RT-N14U, RT-N16, RT-N56U, DSL-N55U) with firmware before 3.0.4.372. Connected OpenVAS data identifies a concrete issue titled “Multiple Asus Router Directory Tr...
CVE-2012-4937
CVE-2012-4937 affects Pattern Insight 2.3. The web interface suffers a session-management weakness (session fixation) where a jsession_id cookie can be used to hijack an authenticated session. Impact, as described, includes potential privilege escalation or authentication bypass for an attacker w...
Joomla Multiple Components SQL Injection Vulnerabilities
This host is running Joomla with multiple components and is prone to SQL injection vulnerabilities. OpenVAS Vulnerability Test $Id: gbjoomlamultcomponentssqlinjvuln.nasl 7052 2017-09-04 11:50:51Z teissa $ Joomla Multiple Components SQL Injection Vulnerabilities Authors: Madhuri D Copyright:...
CVE-2010-4937
CVE-2010-4937 describes multiple SQL injection vulnerabilities in the Joomla! Amblog (com_amblog) component v1.0, allowing remote bidders to manipulate the index.php through the articleid or catid parameters. The NVD entry states that these vulnerabilities permit arbitrary SQL execution with part...
CVE-2010-4937
creationtimestamp| type| source ---|---|--- 2010-08-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14596...
CVE-2009-4937
CVE-2009-4937 describes an XSS in Small Pirate (SPirate) 2.1. An attacker can inject arbitrary script/HTML via an onmouseover in an img BBCode tag inside a url BBCode tag. The records consistently cite Cross-site scripting without details on exploit status or affected versions beyond 2.1. The con...
Adobe Shockwave Player 11.5.6.606 - DIR Multiple Memory Vulnerabilities
Adobe Shockwave Player 11.5.6.606 - DIR Multiple Memory Vulnerabilities / Title: Adobe Shockwave Player 11.5.6.606 DIR Multiple Memory Vulnerabilities Vendor: Adobe Systems Incorporated Product web page: http://www.adobe.com Summary: Over 450 million Internet-enabled desktops have installed Adobe...