63 matches found
CVE-2016-5329
CVE-2016-5329 affects VMware Fusion 8.x before 8.5.0 on macOS with System Integrity Protection (SIP) enabled. The issue is an information-disclosure vulnerability that allows a local attacker to obtain kernel memory addresses and bypass kASLR. The vulnerability is tied to Fusion behavior prior to...
VMware Fusion 8.x < 8.5.0 Kernel Memory Address Disclosure (VMSA-2016-0017) (Mac OS X)
The version of VMware Fusion installed on the remote macOS or Mac OS X host is 8.x prior to 8.5.0. It is, therefore, affected by an information disclosure vulnerability in the System Integrity Protection SIP feature. A local attacker can exploit this issue to obtain kernel memory addresses and...
Hyperoptic (Tilgin) Router HG23xx - Multiple Vulnerabilities
Hyperoptic Tilgin Router HG23xx - Multiple Vulnerabilities Hyperoptic Tilgin Router HG23xx Multiple XSS And CSRF Vulnerabilities Vendor: Hyperoptic Ltd. | Tilgin AB Product web page: http://www.hyperoptic.com http://www.tilgin.com Affected version: HG2330, HG2302 and HG2301 Summary: Tilgin's HG23...
CVE-2015-5329
The CVE-2015-5329 issue affects TripleO Heat templates (tripleo-heat-templates) used with Red Hat Enterprise Linux OpenStack Platform 7.0. The root cause is improper use of RabbitMQ credentials, leading deployed overcloud services to be accessible with default credentials (guest/guest). Descripti...
WinImage DLL Hijacking
Hi @ll, the executable installer winima90.exe and previous versions available from loads and executes CRTdll.dll, UXTheme.dll, RichEd32.dll and WindowsCodecs.dll from its "application directory". Self-extracting executables created with WinImage load and execute CRTdll.dll, UXTheme.dll and MPR.dl...
Moderate: Red Hat Security Advisory: Red Hat Enterprise Linux OpenStack Platform 7 director update
Updated packages that fix two security issues and multiple bugs are now available for Red Hat Enterprise Linux OpenStack Platform 7.0 director for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System...
openSUSE Security Update : flash-player (openSUSE-SU-2013:1737-1)
Adobe Flash Player was updated to 11.2.202.327: bnc850220 - APSB13-26, CVE-2013-5329, CVE-2013-5330 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2013-879. The text description of...
Adobe Flash Player Memory Corruption (APSB13-26: CVE-2013-5329)
A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...
openSUSE: Security Advisory for flash-player (openSUSE-SU-2013:1717-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SuSE Update for flash-player openSUSE-SU-2013:1717-1 (flash-player)
Check for the Version of flash-player OpenVAS Vulnerability Test $Id: gbsuse201317171.nasl 8045 2017-12-08 08:39:37Z santu $ SuSE Update for flash-player openSUSE-SU-2013:1717-1 flash-player Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH,...
SuSE 11.2 / 11.3 Security Update : flash-player (SAT Patch Numbers 8554 / 8555)
Adobe has released Flash Player 11.2.202.327 for Linux to correct the following : - These updates resolve memory corruption vulnerabilities that could lead to code execution CVE-2013-5329 / CVE-2013-5330. More information can be found on: http://www.adobe.com/support/security/bulletins/apsb13-2...
flash-player to 11.2.202.327 (important)
Adobe Flash Player was updated to 11.2.202.327: bnc850220 APSB13-26, CVE-2013-5329, CVE-2013-5330...
RHEL 5 / 6 : flash-plugin (RHSA-2013:1518)
An updated Adobe Flash Player package that fixes two security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives...
Critical: Red Hat Security Advisory: flash-plugin security update
An updated Adobe Flash Player package that fixes two security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives...
CVE-2013-5329
Adobe Flash Player before 11.7.700.252 and 11.8.x and 11.9.x before 11.9.900.152 on Windows and Mac OS X and before 11.2.202.327 on Linux, Adobe AIR before 3.9.0.1210, Adobe AIR SDK before 3.9.0.1210, and Adobe AIR SDK & Compiler before 3.9.0.1210 allow attackers to execute arbitrary code or caus...
CVE-2013-5329
Adobe Flash Player before 11.7.700.252 and 11.8.x and 11.9.x before 11.9.900.152 on Windows and Mac OS X and before 11.2.202.327 on Linux, Adobe AIR before 3.9.0.1210, Adobe AIR SDK before 3.9.0.1210, and Adobe AIR SDK & Compiler before 3.9.0.1210 allow attackers to execute arbitrary code or caus...
CVE-2013-5329
CVE-2013-5329 is a memory-corruption vulnerability in multiple Flash Player versions (Windows/macOS: prior to 11.9.900.152; Linux: prior to 11.2.202.327) and in related AIR components (AIR before 3.9.0.1210). Exploitation could lead to arbitrary code execution or a crash. The publicly referenced ...
Flash Player <= 11.7.700.242 / 11.9.900.117 Memory Corruptions (APSB13-26)
According to its version, the instance of Flash Player installed on the remote Windows host is equal or prior to 11.7.700.242 / 11.8.x or 11.9.x equal or prior to 11.9.900.117. It is, therefore, potentially affected by multiple memory corruption vulnerabilities that could lead to code execution...
CVE-2012-5329
CVE-2012-5329 affects TYPSoft FTP Server 1.1. A buffer overflow in handling a long APPE command string can crash the server, causing a denial of service for remote authenticated users. The vulnerability’s root cause is the overflow in the APPE path; impact is an application crash/DoS with partial...
