CVE-2016-5582

It was discovered that the Hotspot component of OpenJDK did not properly check arguments of the System.arraycopy function in certain cases. An untrusted Java application or applet could use this flaw to corrupt virtual machine's memory and completely bypass Java sandbox restrictions...

Mageia: Security Advisory (MGASA-2015-0379)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Adobe Flash Player Memory Corruption (APSB15-23: CVE-2015-5582)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

Google Chrome < 45.0.2454.99 Multiple Vulnerabilities

Binary data 8884.pasl...

Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt53

3:11-alt53 built Sept. 25, 2015 Sergey V Turchin in task 150379 Sept. 25, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-5567, CVE-2015-5568, CVE-2015-5570, CVE-2015-5571, CVE-2015-5572, CVE-2015-5573, CVE-2015-5574, CVE-2015-5575, CVE-2015-5576, CVE-2015-5577, CVE-2015-5578,...

SUSE SLED11 Security Update : flash-player (SUSE-SU-2015:1614-1)

Adobe Flash Player was updated to 11.2.202.521 APSB15-23 bsc946880 fixing several security issues : More information can be found on : https://helpx.adobe.com/security/products/flash-player/apsb15-23.html Note that Tenable Network Security has extracted the preceding description block directly fr...

SUSE SLED12 Security Update : flash-player (SUSE-SU-2015:1618-1)

Adobe Flash Player was updated to 11.2.202.521 APSB15-23 bsc946880 fixing several security issues : More information can be found on : https://helpx.adobe.com/security/products/flash-player/apsb15-23.html Note that Tenable Network Security has extracted the preceding description block directly fr...

openSUSE Security Update : flash-player (openSUSE-2015-603)

Adobe Flash Player was updated to 11.2.202.521 APSB15-23 bsc946880 fixing several security issues : More information can be found on : https://helpx.adobe.com/security/products/flash-player/apsb15-23.html %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks...

Memory corruption

Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to execute arbitrary code or cause a denial of service...

Memory corruption

Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to execute arbitrary code or cause a denial of service...

CVE-2015-5582

Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to execute arbitrary code or cause a denial of service...

CVE-2015-5582

Summary: CVE-2015-5582 affects Adobe Flash Player and Adobe AIR components. A memory corruption vulnerability in Flash Player allows remote code execution or denial of service via parsing crafted media (SWF/MP4) payloads, with exploitable conditions indicated by related advisories. Affected produ...

Google Chrome < 45.0.2454.99 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 45.0.2454.99. It is, therefore, affected by multiple vulnerabilities : - An unspecified stack corruption issue exists that allows a remote attacker to execute arbitrary code. CVE-2015-5567, CVE-2015-5579 - A vector leng...

Ammyy Admin 3.2 - Authentication Bypass

No description provided by source. Title: ==== Ammyy Admin - Hidden hard-coded option and Access Control vulnerability. Credit: ====== Name: Bhadresh Patel Company/affiliation: Cyberoam Technologies Private Limited Website: www.cyberoam.com CVE: ==== - CVE-2013-5581 for hidden hard-coded option...

Ammyy Admin 3.2 - Authentication Bypass

Ammyy Admin 3.2 - Authentication Bypass Title: ==== Ammyy Admin - Hidden hard-coded option and Access Control vulnerability. Credit: ====== Name: Bhadresh Patel Company/affiliation: Cyberoam Technologies Private Limited Website: www.cyberoam.com CVE: ==== - CVE-2013-5581 for hidden hard-coded...

Ammyy Admin 3.2 - Authentication Bypass

Title: ==== Ammyy Admin - Hidden hard-coded option and Access Control vulnerability. Credit: ====== Name: Bhadresh Patel Company/affiliation: Cyberoam Technologies Private Limited Website: www.cyberoam.com CVE: ==== - CVE-2013-5581 for hidden hard-coded option CWE-255. - CVE-2013-5582 for failure...

CVE-2008-5582

CVE-2008-5582: SQL injection in Nukedit 4.9.x (and possibly earlier) in utilities/login.asp via the email parameter. The ASP script does not sanitize input before using it in a database query, enabling unauthenticated remote attackers to manipulate queries and potentially disclose or modify data....

CVE-2008-6649

creationtimestamp| type| source ---|---|--- 2008-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5580 2008-05-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5582...

Nukedit utilities/login.asp email Parameter SQL Injection

The remote host is running Nukedit, a content management system written in ASP. The version of Nukedit installed on the remote host fails to sanitize user input to the 'email' parameter of the 'utilities/login.asp' script before using it in a database query. An unauthenticated attacker may be abl...

CVE-2007-5582

CiscoWorks Server/XSS in the Common Services login page (CS) affects CS 3.0.x and 3.1, possibly earlier 2.6, allowing remote injection of arbitrary script or HTML via unspecified vectors. The vulnerability is documented as a cross-site scripting issue in the login page; the provided sources do no...