Critical: Red Hat Security Advisory: flash-plugin security update

An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...

Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt52

3:11-alt52 built Aug. 12, 2015 Sergey V Turchin in task 147610 Aug. 12, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-3107, CVE-2015-5124, CVE-2015-5125, CVE-2015-5127, CVE-2015-5128, CVE-2015-5129, CVE-2015-5130, CVE-2015-5131, CVE-2015-5132, CVE-2015-5133, CVE-2015-5134,...

Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt52

3:11-alt52 built Aug. 12, 2015 Sergey V Turchin in task 147609 Aug. 12, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-3107, CVE-2015-5124, CVE-2015-5125, CVE-2015-5127, CVE-2015-5128, CVE-2015-5129, CVE-2015-5130, CVE-2015-5131, CVE-2015-5132, CVE-2015-5133, CVE-2015-5134,...

Adobe AIR for Mac <= 18.0.0.180 Multiple Vulnerabilities (APSB15-16)

According to its version, the installation of Adobe AIR on the remote Mac OS X host is equal or prior to 18.0.0.180. It is, therefore, affected by multiple vulnerabilities : - Multiple type confusion errors exist that allow an attacker to execute arbitrary code. CVE-2015-5554, CVE-2015-5555,...

Adobe AIR <= 18.0.0.180 Multiple Vulnerabilities (APSB15-19)

According to its version, the installation of Adobe AIR on the remote Windows host is equal or prior to 18.0.0.180. It is, therefore, affected by multiple vulnerabilities : - Multiple type confusion errors exist that allow an attacker to execute arbitrary code. CVE-2015-5554, CVE-2015-5555,...

CVE-2014-5539

CVE-2014-5539 affects the Michael Baker FCU Android app (package air.com.creditunionhomebanking.mb155) version 1.2.0. The vulnerability is due to the app not verifying X.509 certificates from SSL servers, which allows a man-in-the-middle to spoof servers and obtain sensitive information via a cra...

CVE-2013-5539

The CVE-2013-5539 entry concerns Cisco Identity Services Engine (ISE). The vulnerability is located in the upload-dialog component, where remote authenticated users can upload files of arbitrary types due to insufficient validation/filtering. This could enable attackers to plant files that may be...

CVE-2012-5539

The Drupal OG (Organic Groups) module for 7.x-1.x is vulnerable prior to 7.x-1.5. The flaw occurs in the handling of pending group memberships, allowing remote authenticated users to post to groups they are not properly authorized for by editing their own account while a pending membership is awa...

SA-CONTRIB-2012-148 - OG - Access Bypass

OG Organic groups enables users to create and manage their own 'groups'. Each group can have subscribers, and maintains a group home page where subscribers communicate amongst themselves. A group membership can be given immediately upon subscribing, or be pending - waiting for a group administrat...

CVE-2008-5539

CVE-2008-5539 describes a bypass of malware detection in RISING Antivirus 21.06.31.00 (and possibly 20.61.42.00) when IE6/IE7 is used, by prepending an MZ header to an HTML document and renaming the file with no extension, .txt, or .jpg, as demonstrated by a CVE-2006-5745 exploit. Connected recor...

SuSE 10 Security Update : Tomcat 5 (ZYPP Patch Number 5539)

This update of tomcat fixes another directory traversal bug which occurs when allowLinking and UTF-8 are enabled. CVE-2008-2938 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

CVE-2007-5539

Cisco UC/ICM suite components (ICME, ICMH, UCCE, UCCH, SUCCE) version 7.1(5) contain an unspecified vulnerability that allows remote authenticated users to gain privileges, read reports, or alter SUCCE configuration via certain web interfaces. The exact root cause, affected subcomponents, and exp...

CVE-2006-5539

CVE-2006-5539 affects UeberProject Management System (UPMS) versions 1.0 and earlier. The vulnerability is a PHP remote file inclusion in login/secure.php that allows an attacker to cause arbitrary PHP code execution by supplying a crafted URL via the cfg[homepath] parameter. The connection betwe...