CVE-2015-5130

Technical details about CVE-2015-5130 are not provided in the supplied documents. Monitor for updates from official advisories; no specifics on affected products, impact, or remediation are included here.

CVE-2015-5556

CVE-2015-5556 describes a use-after-free in Adobe Flash Player before 18.0.0.232 (Windows/macOS) and before 11.2.202.508 on Linux, and in Adobe AIR before 18.0.0.199 (and AIR SDK/SDK Compiler before 18.0.0.199) that may allow arbitrary code execution via unspecified vectors. It is stated to be a ...

SUSE SLED11 Security Update : flash-player (SUSE-SU-2015:1373-1)

This security update to 11.2.202.508 bsc941239 fixes the following issues : - APSB15-19: CVE-2015-3107, CVE-2015-5124, CVE-2015-5125, CVE-2015-5127, CVE-2015-5129, CVE-2015-5130, CVE-2015-5131, CVE-2015-5132, CVE-2015-5133, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5541, CVE-2015-5544...

SUSE SLED12 Security Update : flash-player (SUSE-SU-2015:1374-1)

This security update to 11.2.202.508 bsc941239 fixes the following issues : - APSB15-19: CVE-2015-3107, CVE-2015-5124, CVE-2015-5125, CVE-2015-5127, CVE-2015-5129, CVE-2015-5130, CVE-2015-5131, CVE-2015-5132, CVE-2015-5133, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5541, CVE-2015-5544...

Critical: Red Hat Security Advisory: flash-plugin security update

An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...

Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt52

3:11-alt52 built Aug. 12, 2015 Sergey V Turchin in task 147610 Aug. 12, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-3107, CVE-2015-5124, CVE-2015-5125, CVE-2015-5127, CVE-2015-5128, CVE-2015-5129, CVE-2015-5130, CVE-2015-5131, CVE-2015-5132, CVE-2015-5133, CVE-2015-5134,...

Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt52

3:11-alt52 built Aug. 12, 2015 Sergey V Turchin in task 147609 Aug. 12, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-3107, CVE-2015-5124, CVE-2015-5125, CVE-2015-5127, CVE-2015-5128, CVE-2015-5129, CVE-2015-5130, CVE-2015-5131, CVE-2015-5132, CVE-2015-5133, CVE-2015-5134,...

Adobe AIR <= 18.0.0.180 Multiple Vulnerabilities (APSB15-19)

According to its version, the installation of Adobe AIR on the remote Windows host is equal or prior to 18.0.0.180. It is, therefore, affected by multiple vulnerabilities : - Multiple type confusion errors exist that allow an attacker to execute arbitrary code. CVE-2015-5554, CVE-2015-5555,...

Cisco Nexus 1000V Series Switches Arbitrary Command Execution Vulnerability (Cisco-SA-20131115-CVE-2013-5556)

A vulnerability in the license installation module of the Cisco Nexus 1000V could allow an authenticated, local attacker to execute arbitrary shell commands. Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

CVE-2014-5556

The CVE-2014-5556 entry refers to the Fly Fishing & Fly Tying Android app (version 3.21.0, package air.com.yudu.ReaderAIR3209899) failing to verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certific...

CVE-2013-5556

Cisco Nexus 1000V CVE-2013-5556 is a local-authenticated command-execution vulnerability in the license-installation module. Crafted input to the install all iso command can let an authenticated local attacker gain privileges and run arbitrary shell commands. Affected are Cisco Nexus 1000V switch...

CVE-2012-5556

The CVE-2012-5556 issue affects the Drupal RESTful Web Services (RESTWS) module for Drupal 7.x, specifically RESTWS 7.x-1.x before 7.x-1.1 and 7.x-2.x before 7.x-2.0-alpha3. Root cause: POST requests were not sufficiently verified, enabling CSRF. Impact: remote attackers could hijack the authenti...

CVE-2012-5556

Multiple cross-site request forgery CSRF vulnerabilities in the RESTful Web Services RESTWS module 7.x-1.x before 7.x-1.1 and 7.x-2.x before 7.x-2.0-alpha3 for Drupal allow remote attackers to hijack the authentication of arbitrary users via unknown vectors...

SA-CONTRIB-2012-162 - RESTful Web Services - Cross site request forgery (CSRF)

This module enables you to expose Drupal entities as RESTful web services. It provides a machine-readable interface to exchange resources in JSON, XML and RDF. The module doesn't sufficiently verify POST requests thereby exposing a Cross Site Request Forgery vulnerability. This vulnerability is...

Microsoft Internet Explorer Anti-XSS Filter Vulnerabilities

Internet Explorer is prone to anti-xss filter vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-5556

The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 does not recognize attack patterns designed to operate against web pages that are encoded with utf-7, which allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks by injecting crafted utf-7 content. NOTE: the...

CVE-2008-5556

Summary of CVE-2008-5556 : The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 fails to recognize certain attack patterns when pages use utf-7 encoding, allowing potential XSS bypass. The vendor reportedly disputes the issue, stating behaviour is by design. Connected sources (OpenVAS/PT Secu...

SuSE 10 Security Update : hplip (ZYPP Patch Number 5556)

This update of hplip does not allow to send alert mails as user anymore CVE-2008-2940 and fixes a denial-of-service defect. CVE-2008-2941 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc...

CVE-2007-5556

Technical details about CVE-2007-5556 are not publicly available in the provided documents. No concrete exploit or affected product/version is specified here; monitor for updates.

CVE-2006-5556

CVE-2006-5556 describes a buffer overflow in the libc localtime_r function (and certain other functions) affecting HP-UX B.11.11 and possibly other versions. The vulnerability allows local users to execute arbitrary code by supplying a long TZ environment variable. The available documents confirm...