Debian: Security Advisory (DLA-1525-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-7653

The CVE-2017-7653 issue affects the Eclipse Mosquitto broker up to version 1.4.15, where the broker does not reject strings that are not valid UTF-8. A malicious client can trigger a denial of service by sending an invalid UTF-8 topic string, causing other clients that reject invalid UTF-8 to dis...

YzmCMS 3.6 Cross Site Scripting

Exploit Title: YzmCMS 3.6 XSS Vulnerability Date: 2018-04-03 Exploit Author: zzw [email protected] Vendor Homepage: http://www.yzmcms.com/ Software Link: http://www.yzmcms.com/ Version: 3.6 CVE : CVE-2018-7653 This is a XSS vulnerability than can attack the users. poc:...

CVE-2018-7653

YzmCMS 3.6 is affected by a Cross-Site Scripting (XSS) in index.php via the a, c, or m parameters. The Nuclei template for CVE-2018-7653 confirms the vulnerability in YzmCMS 3.6, enabling arbitrary JavaScript execution in victims’ browsers, potentially leaking cookies or acting on behalf of authe...

CVE-2014-7653

CVE-2014-7653 is rejected and not used as an active vulnerability entry.

CVE-2014-7653

...

CVE-2016-7653

CVE-2016-7653 affects iOS devices with the Media Player component, exposing a lock-screen based information disclosure. The issue allowed physically proximate users to access photos and contacts from a locked device via media selection handling. Apple’s iOS 10.2 security update addresses this by ...

Adobe AIR < 19.0.0.241 Multiple Vulnerabilities (APSB15-28)

Binary data 9042.prm...

openSUSE Security Update : flash-player (openSUSE-2015-738)

The flash-player package was updated to fix the following security issues : - Security update to 11.2.202.548 bsc954512 : - APSB15-28, CVE-2015-7651, CVE-2015-7652, CVE-2015-7653, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7659, CVE-2015-7660, CVE-2015-766...

FreeBSD : flash -- multiple vulnerabilities (547fbd98-8b1f-11e5-b48b-bcaec565249c)

Adobe reports : These updates resolve a type confusion vulnerability that could lead to code execution CVE-2015-7659. These updates resolve a security bypass vulnerability that could be exploited to write arbitrary data to the file system under user permissions CVE-2015-7662. These updates resolv...

SUSE SLED11 Security Update : flash-player (SUSE-SU-2015:1960-1)

The flash-player package was updated to fix the following security issues : - Security update to 11.2.202.548 bsc954512 : - APSB15-28, CVE-2015-7651, CVE-2015-7652, CVE-2015-7653, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7659, CVE-2015-7660, CVE-2015-766...

SUSE SLED12 Security Update : flash-player (SUSE-SU-2015:1958-1)

The flash-player package was updated to fix the following security issues : - Security update to 11.2.202.548 bsc954512 : - APSB15-28, CVE-2015-7651, CVE-2015-7652, CVE-2015-7653, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7659, CVE-2015-7660, CVE-2015-766...

Adobe Air Multiple Vulnerabilities (Nov 2015) - Mac OS X

Adobe Air is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:adobeair"; ifdescription...

Updated flash-player-plugin packages fix security vulnerability

Adobe Flash Player 11.2.202.548 contains fixes to critical security vulnerabilities found in earlier versions that could potentially allow an attacker to take control of the affected system. This update resolves a type confusion vulnerability that could lead to code execution CVE-2015-7659. This...

Design/Logic Flaw

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK & Compiler before 19.0.0.241 allows attackers to execute arbitrary...

CVE-2015-7653

CVE-2015-7653 describes a use-after-free vulnerability in multiple Adobe products. Affected are: Adobe Flash Player prior to 18.0.0.261 and 19.x prior to 19.0.0.245 on Windows/OS X, and prior to 11.2.202.548 on Linux; Adobe AIR prior to 19.0.0.241; and Adobe AIR SDK/SDK & Compiler prior to 19.0.0...

Google Chrome < 46.0.2490.86 Vulnerability

The version of Google Chrome installed on the remote Windows host is prior to 46.0.2490.86. It is, therefore, affected by a vulnerability as referenced in the 201511stable-channel-update advisory. - The PDF viewer in Google Chrome before 46.0.2490.86 does not properly restrict scripting messages...

Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt56

3:11-alt56 built Nov. 11, 2015 Sergey V Turchin in task 153025 Nov. 11, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-7651, CVE-2015-7652, CVE-2015-7653, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7659, CVE-2015-7660, CVE-2015-7661,...