36 matches found
Updated flash-player-plugin package fixes security vulnerabilities
Adobe Flash Player 11.2.202.637 contains fixes to critical security vulnerabilities found in earlier versions that could potentially allow an attacker to take control of the affected system. This update resolves a type confusion vulnerability that could lead to code execution CVE-2016-6992. This...
Memory corruption
Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-4273,...
CVE-2016-6986
Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-4273,...
UBUNTU-CVE-2016-6986
Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-4273,...
CVE-2016-6986
CVE-2016-6986 affects Adobe Flash Player on Windows, macOS, and Linux: Windows/macOS — before 18.0.0.382 and 19.x up to 23.x before 23.0.0.185; Linux — before 11.2.202.637. The flaw enables attackers to execute arbitrary code or cause a denial of service via memory corruption through unspecified ...
SUSE SLED12 Security Update : flash-playerqemu (SUSE-SU-2016:2512-1)
flash-player was updated to version 11.2.202.637 to fix the following issues bsc1004019 : - CVE-2016-6992: A type confusion vulnerability that could lead to code execution. CVE-2016-6981, CVE-2016-6987: use-after-free vulnerabilities that could lead to code execution CVE-2016-4286: Security bypas...
Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt66
Oct. 12, 2016 Sergey V Turchin 3:11-alt66 - new version - security fixes: CVE-2016-4273, CVE-2016-4286, CVE-2016-6981, CVE-2016-6982, CVE-2016-6983, CVE-2016-6984, CVE-2016-6985, CVE-2016-6986, CVE-2016-6987, CVE-2016-6989, CVE-2016-6990, CVE-2016-6992...
CVE-2015-6986
com.apple.driver.AppleVXD393 in the Graphics Driver subsystem in Apple iOS before 9.1 allows attackers to execute arbitrary code via a crafted app that leverages an unspecified "type confusion."...
CVE-2015-6986
CVE-2015-6986 affects the Apple iOS Graphics Driver component com.apple.driver.AppleVXD393. The issue is a type confusion in AppleVXD393 that could allow arbitrary code execution when a crafted app is processed, as described for iOS versions before 9.1. The vulnerability is listed under the Apple...
CVE-2013-6986
The CVE-2013-6986 issue affects ZippyYum Subway CA Kiosk iOS app (3.4). The vulnerability stems from cleartext storage of sensitive data in SQLite cache files (Cache.db / Cache.db-wal) under ../Caches/com.ZippyYum.SubwayOC/, allowing local attackers with access to read unencrypted data. Exposed e...
ZippyYum 3.4 Insecure Data Storage
Title: CVE-2013-6986 Insecure Data Storage in Subway Ordering for California ZippyYum 3.4 iOS mobile application Published: DATE Reported to Vendor: May 2013 CVE Reference: CVE-2013-6986 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6986 CVSS v2 Base Score: 4.9 CVSS v2 Vector...
CVE-2008-6986
Zen Cart 1.3.0–1.3.8a is affected by CVE-2008-6986 due to an SQL injection in actionMultipleAddProduct in includes/classes/shopping_cart.php. When magic_quotes_gpc is disabled, the products_id[] array used by multiple_products_add_product can lead remote attackers to execute arbitrary SQL command...
CVE-2008-6627
creationtimestamp| type| source ---|---|--- 2008-11-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6986...
CVE-2006-6986
Cross-domain vulnerability in PhaseOut 5.4.4 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which...
CVE-2006-6986
PhaseOut 5.4.4 is affected by a cross-domain information disclosure vulnerability. An attacker can cause an object element to reference a URL on the attacker’s site which returns a Location header pointing to the target site; the target content then becomes accessible via the outerHTML attribute ...
