5607 matches found
CVE-2015-6161
Microsoft Internet Explorer 7 through 11 and Microsoft Edge allow remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Microsoft Browser ASLR Bypass."...
CVE-2015-6165
CVE-2015-6165 affects Microsoft Silverlight 5 before 5.1.41105.00. A crafted website can bypass ASLR to disclose information. Remediation details are not provided in the supplied documents.
CVE-2015-6165
Microsoft Silverlight 5 before 5.1.41105.00 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Microsoft Silverlight Information Disclosure Vulnerability," a different vulnerability than CVE-2015-6114...
CVE-2015-6114
Microsoft Silverlight 5 before 5.1.41105.00 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Microsoft Silverlight Information Disclosure Vulnerability," a different vulnerability than CVE-2015-6165...
CVE-2015-6161
CVE-2015-6161 affects Microsoft Internet Explorer (IE) 7–11 and Microsoft Edge, with the root cause described as a bypass of Address Space Layout Randomization (ASLR) via a crafted web site. Public sources in the connected documents confirm this is mitigated by Microsoft security updates MS15-124...
CVE-2015-6114
CVE-2015-6114 affects Microsoft Silverlight 5 prior to 5.1.41105.00. The vulnerability allows remote attackers to bypass ASLR via a crafted web site, resulting in information disclosure. Connected advisories corroborate an information-disclosure vector arising from Silverlight manifest/resource p...
Microsoft Silverlight Information Disclosure Vulnerability
Microsoft Silverlight is a development platform from Microsoft. The platform can build interactive applications for the Web, desktop and mobile devices. An information leakage vulnerability exists in Microsoft Silverlight that stems from the program failing to properly handle objects in memory. A...
PT-2015-3205
Name of the Vulnerable Software and Affected Versions Microsoft Silverlight versions prior to 5.1.41105.00 Description The issue is related to the lack of protection for service data in the Silverlight platform, allowing remote attackers to bypass the ASLR protection mechanism via a crafted web...
CVE-2015-6165: Exposure of Sensitive Information to an Unauthorized Actor
Microsoft Silverlight 5 before 5.1.41105.00 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Microsoft Silverlight Information Disclosure Vulnerability," a different vulnerability than CVE-2015-6114...
CVE-2015-6161: Exposure of Sensitive Information to an Unauthorized Actor
Microsoft Internet Explorer 7 through 11 and Microsoft Edge allow remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Microsoft Browser ASLR Bypass."...
PT-2015-3206
Name of the Vulnerable Software and Affected Versions Microsoft Silverlight versions prior to 5.1.41105.00 Description The issue is related to the lack of protection for internal data in the Silverlight platform, allowing a remote attacker to bypass the Address Space Layout Randomization ASLR...
CVE-2015-6114: Exposure of Sensitive Information to an Unauthorized Actor
Microsoft Silverlight 5 before 5.1.41105.00 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Microsoft Silverlight Information Disclosure Vulnerability," a different vulnerability than CVE-2015-6165...
MS15-129: Security Update for Silverlight to Address Remote Code Execution (3106614)
The version of Microsoft Silverlight installed on the remote Windows host is affected by the following vulnerabilities : - Multiple information disclosure vulnerabilities exist due to a failure to properly handle objects in memory. An attacker can exploit these issues, via crafted Silverlight...
Microsoft .NET Manifest Resource Information Disclosure Vulnerability
Talos Vulnerability Report TALOS-2015-0130 Microsoft .NET Manifest Resource Information Disclosure Vulnerability December 8, 2015 CVE Number CVE-2015-6114 Summary An exploitable information leak or denial of service vulnerability exists in the manifest resource parsing functionality of the .NET...
Microsoft Internet Explorer and Edge CVE-2015-6161 ASLR Security Bypass Vulnerability
Description Microsoft Internet Explorer and Edge are prone to a security-bypass vulnerability. An attacker can leverage this issue to bypass certain security restrictions and execute arbitrary code by exploiting another vulnerability in the application. The following products are vulnerable:...
PT-2015-3161
Name of the Vulnerable Software and Affected Versions Adobe Flash Player affected versions not specified Adobe Integrated Runtime affected versions not specified Description The issue is related to the lack of protection for internal data in Flash Player and Adobe Integrated Runtime. This can be...
Adobe Flash JIT Spray ASLR/DEP Bypass Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within Adobe Flash Player...
D-Link DIR-880L Buffer Overflow
Advisory Information Title: DIR-880L Buffer overflows in authenticatio and HNAP functionalities. Vendors contacted: William Brown , Patrick Cline [email protected] CVE: None Note: All these security issues have been discussed with the vendor and vendor indicated that they have fixed...
