Drupal Patches Critical Access Bypass Bug

Website management platform Drupal released several patches that address access bypass vulnerabilities in its Drupal 8 Core engine Wednesday, fixing one critical and two moderately critical security bugs. The most serious of the vulnerabilities is the access bypass vulnerability CVE-2017-6925 in...

Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt65

3:11-alt65 built Sept. 22, 2016 Michael Shigorin in task 169622 Sept. 19, 2016 Sergey V Turchin - new version CVE-2016-4271, CVE-2016-4272, CVE-2016-4274, CVE-2016-4275, CVE-2016-4276, CVE-2016-4277, CVE-2016-4278, CVE-2016-4279, CVE-2016-4280, CVE-2016-4281, CVE-2016-4282, CVE-2016-4283,...

Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt65

3:11-alt65 built Sept. 20, 2016 Sergey V Turchin in task 169477 Sept. 19, 2016 Sergey V Turchin - new version CVE-2016-4271, CVE-2016-4272, CVE-2016-4274, CVE-2016-4275, CVE-2016-4276, CVE-2016-4277, CVE-2016-4278, CVE-2016-4279, CVE-2016-4280, CVE-2016-4281, CVE-2016-4282, CVE-2016-4283,...

SUSE SLED12 Security Update : flash-player (SUSE-SU-2016:2312-1)

This update for flash-player fixes the following security issues APSB16-29, boo998589 : - integer overflow vulnerability that could lead to code execution CVE-2016-4287. - use-after-free vulnerabilities that could lead to code execution CVE-2016-4272, CVE-2016-4279, CVE-2016-6921, CVE-2016-6923,...

RHEL 6 : flash-plugin (RHSA-2016:1865)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2016:1865 advisory. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update upgrades Flash Player to...

Design/Logic Flaw

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4272, CVE-2016-4279,...

Design/Logic Flaw

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4272, CVE-2016-4279,...

CVE-2016-6927

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4272, CVE-2016-4279,...

CVE-2016-6923

Technical details for CVE-2016-6923 are not provided in the connected documents. No affected products, versions, impact, or fixes are disclosed here. Monitor for updates.

CVE-2016-6930

Technical details about CVE-2016-6930 are not publicly available in the provided documents. Monitor for updates from authoritative sources.

CVE-2016-6923

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4272, CVE-2016-4279,...

CVE-2016-6925

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4272, CVE-2016-4279,...

September 2016 Adobe Flash Security Update

This security update addresses the following vulnerabilities, which are described in Adobe Security Bulletin APSB16-29: CVE-2016-4271, CVE-2016-4272, CVE-2016-4274, CVE-2016-4275, CVE-2016-4276, CVE-2016-4277, CVE-2016-4278, CVE-2016-4279, CVE-2016-4280, CVE-2016-4281, CVE-2016-4282, CVE-2016-428...

MS16-117: Security Update for Adobe Flash Player (3188128)

The remote Windows host is missing KB3188128. It is, therefore, affected by multiple vulnerabilities : - Multiple security bypass vulnerabilities exist that allow an unauthenticated, remote attacker to disclose sensitive information. CVE-2016-4271, CVE-2016-4277, CVE-2016-4278 - Multiple...

CVE-2015-6923

The ndvbs module in VBox Communications Satellite Express Protocol 2.3.17.3 allows local users to write to arbitrary physical memory locations and gain privileges via a 0x00000ffd ioctl call...

CVE-2015-6923

CVE-2015-6923 affects VBox Communications Satellite Express Protocol 2.3.17.3. The ndvbs module permits a local attacker to write arbitrary physical memory via IOCTL 0x00000ffd, enabling privilege escalation by overwriting HalDispatchTable function pointers (arbitrary code execution). Public advi...

VBox Satellite Express 2.3.17.3 - Arbitrary Write Vulnerability

A vulnerability within the ndvbs module allows an attacker to inject memory they control into an arbitrary location they define. This vulnerability can be used to overwrite function pointers in HalDispatchTable resulting in an elevation of privilege. suffers from code execution, and local file...

VBox Satellite Express 2.3.17.3 - Arbitrary Write

KL-001-2015-005 : VBox Satellite Express Arbitrary Write Privilege Escalation Title: VBox Satellite Express Arbitrary Write Privilege Escalation Advisory ID: KL-001-2015-005 Publication Date: 2015.09.16 Publication URL: https://www.korelogic.com/Resources/Advisories/KL-001-2015-005.txt 1...

VBox Satellite Express Arbitrary Write Privilege Escalation

Vulnerability Details Affected Vendor: VBox Communications Affected Product: Satellite Express Protocol Affected Version: 2.3.17.3 Platform: Microsoft Windows XP SP3, Microsoft Windows 7 x86 CWE Classification: CWE-123: Write-what-where condition Impact: Arbitrary Code Execution Attack vector:...

Joomla Component com_content SQL Injection (CVE-2008-6923)

SQL injection vulnerability has been reported in Joomla Com Content. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...