Elastic Kibana 'CVE-2017-8440' Cross-site scripting (XSS) Vulnerability - Windows

Elastic Kibana is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2016-8440

CVE-2016-8440 details (Android kernel 3.18): A buffer overflow in the SMMU system call, caused by improper input validation in the ADSP SID2CB system call, may lead to hypervisor memory overwrite. The vulnerability affects Android on Kernel 3.18 and is described with a high-severity impact (poten...

openSUSE Security Update : flash-player (openSUSE-2015-882)

This update for flash-player to version 11.2.202.554 fixes the following security issues in Adobe security advisory APSB15-32. - These updates resolve heap buffer overflow vulnerabilities that could lead to code execution CVE-2015-8438, CVE-2015-8446. - These updates resolve memory corruption...

UBUNTU-CVE-2015-8440

Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allow attackers to bypass intended access restrictions via...

CVE-2015-8440

Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allow attackers to bypass intended access restrictions via...

CVE-2015-8440

CVE-2015-8440 affects Adobe Flash Player prior to 18.0.0.268 and 19.x/20.x prior to 20.0.0.228 (Windows/OS X) and prior to 11.2.202.554 on Linux, as well as Adobe AIR prior to 20.0.0.204 and AIR SDK/SDK & Compiler prior to 20.0.0.204. It allows attackers to bypass intended access restrictions via...

Critical: Red Hat Security Advisory: flash-plugin security update

An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...

Adobe Flash Player <= 19.0.0.245 Multiple Vulnerabilities (APSB15-32)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 19.0.0.245. It is, therefore, affected by multiple vulnerabilities : - Multiple heap buffer overflow conditions exist that allow an attacker to execute arbitrary code. CVE-2015-8438, CVE-2015-8446 ...

Adobe Flash Player UncompressViaZlibVariant Uninitialized Memory Exploit

This Metasploit module exploits an uninitialized memory vulnerability in Adobe Flash Player. The vulnerability occurs in the ByteArray::UncompressViaZlibVariant method, which fails to initialize allocated memory. When using a correct memory layout this vulnerability leads to a ByteArray object...

CVE-2014-8440

creationtimestamp| type| source ---|---|--- 2015-05-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36880 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/adobeflashuncompresszlibuninitialized.rb...

Adobe Flash Player UncompressViaZlibVariant Uninitialized Memory

This module exploits an uninitialized memory vulnerability in Adobe Flash Player. The vulnerability occurs in the ByteArray::UncompressViaZlibVariant method, which fails to initialize allocated memory. When using a correct memory layout this vulnerability leads to a ByteArray object corruption,...

Adobe Flash Player Memory Corruption (APSB14-24: CVE-2014-8440)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

Adobe Releases Emergency Flash Player Patch

Adobe today revised a security bulletin it released more than a month ago, adding a patch for a code-execution vulnerability in Flash Player already included in some exploit kits. French researcher Kafeine found the exploits in the Angler and Nuclear kits less than a week after Adobe released an...

GLSA-201411-06 : Adobe Flash Player: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201411-06 Adobe Flash Player: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly...

Angler Exploit Kit Adds New Flash Exploit

Exploit kit authors are nothing if not opportunistic, and they know a prime opportunity when they see one. Adobe Flash bugs fit that description nicely, and the people behind the Angler exploit kit already are exploiting one of the Flash bugs patched last week in the kit’s arsenal. This is a comm...

openSUSE Security Update : flash-player (openSUSE-SU-2014:1444-1)

flash-player was updated to version 11.2.202.418 to fix 18 security issues. These security issues were fixed : - Memory corruption vulnerabilities that could lead to code execution CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441. - Use-after-free vulnerabilities that could lead to code...

SuSE 11.3 Security Update : flash-player (SAT Patch Number 9958)

flash-player was updated to version 11.2.202.418 to fix 18 security issues : - Memory corruption vulnerabilities that could lead to code execution. CVE-2014-0576 / CVE-2014-0581 / CVE-2014-8440 / CVE-2014-8441 - Use-after-free vulnerabilities that could lead to code execution. CVE-2014-0573 /...

Adobe AIR Multiple Vulnerabilities (APSB14-24) - Mac OS X

Adobe AIR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer"; ifdescription...

flashplugin: remote code execution

These updates resolve memory corruption vulnerabilities that could lead to code execution CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441. These updates resolve use-after-free vulnerabilities that could lead to code execution CVE-2014-0573, CVE-2014-0588, CVE-2014-8438. These updates...

RHEL 5 / 6 : flash-plugin (RHSA-2014:1852)

The remote Redhat Enterprise Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2014:1852 advisory. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes multiple...