CVE-2015-5541

CVE-2015-5541 is a heap-based buffer overflow in Adobe Flash Player and Adobe AIR components that allows attackers to execute arbitrary code via unspecified vectors. Affected: Adobe Flash Player before 18.0.0.232 (Windows/macOS) and before 11.2.202.508 (Linux); Adobe AIR before 18.0.0.199 (and SD...

SUSE SLED11 Security Update : flash-player (SUSE-SU-2015:1373-1)

This security update to 11.2.202.508 bsc941239 fixes the following issues : - APSB15-19: CVE-2015-3107, CVE-2015-5124, CVE-2015-5125, CVE-2015-5127, CVE-2015-5129, CVE-2015-5130, CVE-2015-5131, CVE-2015-5132, CVE-2015-5133, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5541, CVE-2015-5544...

SUSE SLED12 Security Update : flash-player (SUSE-SU-2015:1374-1)

This security update to 11.2.202.508 bsc941239 fixes the following issues : - APSB15-19: CVE-2015-3107, CVE-2015-5124, CVE-2015-5125, CVE-2015-5127, CVE-2015-5129, CVE-2015-5130, CVE-2015-5131, CVE-2015-5132, CVE-2015-5133, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5541, CVE-2015-5544...

Critical: Red Hat Security Advisory: flash-plugin security update

An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...

Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt52

3:11-alt52 built Aug. 12, 2015 Sergey V Turchin in task 147610 Aug. 12, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-3107, CVE-2015-5124, CVE-2015-5125, CVE-2015-5127, CVE-2015-5128, CVE-2015-5129, CVE-2015-5130, CVE-2015-5131, CVE-2015-5132, CVE-2015-5133, CVE-2015-5134,...

Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt52

3:11-alt52 built Aug. 12, 2015 Sergey V Turchin in task 147609 Aug. 12, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-3107, CVE-2015-5124, CVE-2015-5125, CVE-2015-5127, CVE-2015-5128, CVE-2015-5129, CVE-2015-5130, CVE-2015-5131, CVE-2015-5132, CVE-2015-5133, CVE-2015-5134,...

Adobe AIR for Mac <= 18.0.0.180 Multiple Vulnerabilities (APSB15-16)

According to its version, the installation of Adobe AIR on the remote Mac OS X host is equal or prior to 18.0.0.180. It is, therefore, affected by multiple vulnerabilities : - Multiple type confusion errors exist that allow an attacker to execute arbitrary code. CVE-2015-5554, CVE-2015-5555,...

Adobe AIR <= 18.0.0.180 Multiple Vulnerabilities (APSB15-19)

According to its version, the installation of Adobe AIR on the remote Windows host is equal or prior to 18.0.0.180. It is, therefore, affected by multiple vulnerabilities : - Multiple type confusion errors exist that allow an attacker to execute arbitrary code. CVE-2015-5554, CVE-2015-5555,...

Fedora Update for qemu FEDORA-2015-5541

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-5541

The CVE-2014-5541 entry concerns the Android app “The Hidden Memory - Aladdin FREE!” (air.com.differencegames.hmaladdinfree) version 1.0.31, which does not verify X.509 certificates from SSL servers. This behavior allows man-in-the-middle attackers to spoof servers and obtain sensitive informatio...

CVE-2013-5541

Cross-site scripting XSS vulnerability in the file-upload interface in Cisco Identity Services Engine ISE allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename, aka Bug ID CSCui67495...

CVE-2013-5541

CVE-2013-5541 concerns Cisco Identity Services Engine (ISE) and its file-upload filename handling. The issue is a cross-site scripting (XSS) vulnerability triggered by crafting a filename uploaded via the ISE web interface. Root cause per Cisco advisory is insufficient validation of uploaded file...

CVE-2012-5541

The CVE-2012-5541 issue affects the Drupal Twitter Pull module (6.x-1.x and 7.x-1.x branches). The underlying vulnerability stems from insufficient filtering of data coming from Twitter, enabling XSS via unspecified vectors. Affected versions are Twitter Pull 6.x-1.x prior to 6.x-1.3 and 7.x-1.x ...

SA-CONTRIB-2012-150 - Twitter Pull - Cross Site Scripting (XSS)

Twitter Pull allows you to retrieve tweets from Twitter based on a user or search and display them on your site. It also includes integration with the boxes module to allow for simple placement of twitter feeds on various pages. The module doesn't sufficiently filter the data coming from Twitter...

SLES9: Security update for PostgreSQL

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: postgresql-devel postgresql-pl postgresql-server postgresql postgresql-contrib postgresql-docs postgresql-libs For more information, please visit the...

CVE-2008-5541

Sophos Anti-Virus 4.33.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, as...

CVE-2008-5541

CVE-2008-5541 affects Sophos Anti-Virus 4.33.0 and describes a bypass of malware detection in HTML documents when Internet Explorer 6/7 is used. The underlying issue is an attacker placing an MZ header (the "EXE info") at the beginning of a document and altering the filename to have no extension,...

Gentoo Security Advisory GLSA 200710-31 (opera)

The remote host is missing updates announced in advisory GLSA 200710-31. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

SuSE 10 Security Update : PostgreSQL (ZYPP Patch Number 2276)

The SQL Server PostgreSQL has been updated to fix the following security problems : - backend/parser/analyze.c in PostgreSQL 8.1.x allowed remote authenticated users to cause a denial of service daemon crash via certain aggregate functions in an UPDATE statement, which are not properly handled...

Ubuntu 6.10 : postgresql-8.1 vulnerabilities (USN-369-2)

USN-369-1 fixed three minor PostgreSQL 8.1 vulnerabilities for Ubuntu 6.06 LTS. This update provides the corresponding update for Ubuntu 6.10. Michael Fuhr discovered an incorrect type check when handling unknown literals. By attempting to coerce such a literal to the ANYARRAY type, a local...