CVE-2019-7102

Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2019-7102

Adobe Shockwave Player versions 12.3.4.204 and earlier are affected by multiple memory corruption vulnerabilities, leading to arbitrary code execution on successful exploitation. The Red Hat/EUVD/NVD/CVE-NVD entries confirm the same issue across Windows/macOS, with the root cause being memory cor...

KLA11468 Multiple Arbitrary code execution vulnerabilities in Adobe Shockwave Player

Multiple Memory Corruption vulnerabilities was found in Adobe Shockwave Player. Malicious users can exploit these vulnerabilities to execute arbitrary code. Original advisories APSB19-20 Related products Adobe-Shockwave-Player CVE list CVE-2019-7098 critical CVE-2019-7099 critical CVE-2019-7100...

CVE-2018-7102

A security vulnerability in HPE Intelligent Management Center iMC PLAT E0506P09, createFabricAutoCfgFile could be remotely exploited via directory traversal to allow remote arbitrary file modification...

CVE-2018-7102

HPE Intelligent Management Center (iMC) PLAT E0506P09 contains a directory traversal vulnerability in the imciccdm component (function createFabricAutoCfgFile). The issue arises from insufficient filtering of user-supplied paths before file operations, enabling remote attackers to modify or creat...

openSUSE Security Update : webkit2gtk3 (openSUSE-2018-118) (Meltdown) (Spectre)

This update for webkit2gtk3 fixes the following issues : Update to version 2.18.5 : + Disable SharedArrayBuffers from Web API. + Reduce the precision of 'high' resolution time to 1ms. + bsc1075419 - Security fixes: includes improvements to mitigate the effects of Spectre and Meltdown CVE-2017-575...

SUSE SLED12 / SLES12 Security Update : webkit2gtk3 (SUSE-SU-2018:0219-1) (Meltdown) (Spectre)

This update for webkit2gtk3 fixes the following issues: Update to version 2.18.5 : + Disable SharedArrayBuffers from Web API. + Reduce the precision of 'high' resolution time to 1ms. + bsc1075419 - Security fixes: includes improvements to mitigate the effects of Spectre and Meltdown CVE-2017-5753...

Ubuntu: Security Advisory (USN-3460-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-7102

CVE-2017-7102 affects Apple devices using WebKit: iOS before 11, Safari before 11, iCloud before 7.0 on Windows, iTunes before 12.7 on Windows, and tvOS before 11. The issue in WebKit allows remote attackers to execute arbitrary code or cause a memory corruption-based crash via a crafted website....

CVE-2017-7102

An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to...

CVE-2017-7102

An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to...

Apple iTunes < 12.7 WebKit Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is prior to 12.7. It is, therefore, affected by multiple vulnerabilities in webkit. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenable Network...

macOS : Apple Safari < 11.0 Multiple Vulnerabilities

The version of Apple Safari installed on the remote macOS or Mac OS X host is prior to 11.0. It is, therefore, affected by multiple vulnerabilities as described in the HT208116 security advisory. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid103360;...

CVE-2016-7102

ownCloud Desktop before 2.2.3 allows local users to execute arbitrary code and possibly gain privileges via a Trojan library in a "special path" in the C: drive...

CVE-2016-7102

CVE-2016-7102 affects ownCloud Desktop prior to version 2.2.3. The vulnerability allows local users to execute arbitrary code and potentially gain privileges by loading a Trojan library from a specially crafted path on the C: drive, enabling code execution during startup. Root cause is the loadin...

Mageia: Security Advisory (MGASA-2016-0116)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 22 : webkitgtk4-2.10.4-1.fc22 (2016-d132dbb529)

Update to 2.10.4. Major new features: New HTTP disk cache for the Network Process. IndexedDB support. New Web Inspector UI. Automatic ScreenServer inhibition when playing fullscreen videos. Initial Editor API. - Performance improvements. This update addresses the following vulnerabilities:...

Apple iTunes < 12.3.2 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes running on the remote Windows host is prior to 12.3.2. It is, therefore, affected by multiple vulnerabilities in the WebKit component : - Multiple memory corruption issues exists that an attacker can exploit to cause a denial of service or execute arbitrary code...

Apple iTunes < 12.3.2 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is prior to 12.3.2. It is, therefore, affected by multiple vulnerabilities in the WebKit component : - Multiple memory corruption issues exists that an attacker can exploit to cause a denial of service or execute arbitrary code...

CVE-2014-7102

The CVE-2014-7102 vulnerability affects the Car Insurance Quote Comparison (com.seopa.quotezone) Android app, version 2.3. The root cause is that the app does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information...