CVE-2021-33576

CVE-2021-33576 affects Cleo LexiCom 5.5.0.0. The root cause is that an AS2 message can carry a filename containing path-traversal characters, enabling the attacker to write files to arbitrary locations on disk. The issue is documented across multiple sources (NVD, Red Hat, CVE lists). According t...

CVE-2021-33577: Undefined Security Weakness

An issue was discovered in Cleo LexiCom 5.5.0.0. The requirement for the sender of an AS2 message to identify themselves via encryption and signing of the message can be bypassed by changing the Content-Type of the message to text/plain...

PT-2021-20211

Name of the Vulnerable Software and Affected Versions Cleo LexiCom version 5.5.0.0 Description An issue was discovered in Cleo LexiCom where the sender can specify a filename within the AS2 message. This filename can include path-traversal characters, allowing the file to be written to an arbitra...

PT-2021-20212

Name of the Vulnerable Software and Affected Versions Cleo LexiCom version 5.5.0.0 Description An issue allows the bypass of the requirement for the sender of an AS2 message to identify themselves via encryption and signing of the message. This can be achieved by changing the Content-Type of the...

Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects Sterling Connect:Enterprise for UNIX (CVE-2015-4000)

Summary The Logjam Attack on TLS connections using the Diffie-Hellman DH key exchange protocol affects Sterling Connect:Enterprise for UNIX when using the AS2 or WebDAV protocols. Vulnerability Details CVEID: CVE-2015-4000 DESCRIPTION: The TLS protocol could allow a remote attacker to obtain...

as2.macromgt.com XSS vulnerability

Open Bug Bounty ID: OBB-612125 Description| Value ---|--- Affected Website:| as2.macromgt.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Adobe Flash AS2 extends Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of AS2'...

as2.ori.nic.in XSS vulnerability

Vulnerable URL: http://as2.ori.nic.in:8080/web/bus.jsp?msg=%27%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 16:27 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

Adobe Flash AS2 MovieClip lineTo Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the MovieClip object...

Adobe Flash AS2 Selection setFocus Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Adobe Flash AS2 MovieClip setMask after the release of the heavy interest with a remote code execution vulnerability(CVE-2 0 1 5-7 6 6 0)-vulnerability warning-the black bar safety net

CVECAN ID: CVE-2 0 1 5-7 6 6 0 FlashPlayer is a high-performance, lightweight and extremely expressive client runtime player. Adobe Flash setMask method in the presence of security vulnerabilities. By manipulating the transfer to the setMask method's parameter, the attacker can force the use of h...

Adobe Flash AS2 DefineFunction Invalid Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of AS2...

Adobe Flash AS2 TextField gridFitType Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the TextField object...

Adobe Flash AS2 actionInstanceOf Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the actionInstanceOf...

Adobe Flash AS2 actionCallMethod Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the actionCallMethod...

Adobe Flash AS2 Sound attachSound Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

Adobe Flash AS2 MovieClip getBounds Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the getBounds method...

Adobe Flash AS2 MovieClip globalToLocal Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the MovieClip object...

Adobe Flash AS2 actionExtends Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the actionExtends...

Adobe Flash AS2 - MovieClip.scrollRect Use-After-Free

Adobe Flash AS2 - MovieClip.scrollRect Use-After-Free Source: https://code.google.com/p/google-security-research/issues/detail?id=359&can=1&q=label%3AProduct-Flash%20modified-after%3A2015%2F8%2F17&sort=id Deadline tracking for https://code.google.com/p/chromium/issues/detail?id=482521 ---...