openSUSE: Security Advisory for flash-player (openSUSE-SU-2012:1324-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for MozillaThunderbird (openSUSE-SU-2012:0917-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for java-1_6_0-openjdk (openSUSE-SU-2012:0828-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for Security (openSUSE-SU-2012:1174-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-4975

editrequestuser.asp in Layton Helpbox 4.4.0 allows remote authenticated users to change arbitrary support-ticket data via a modified sysrequestid parameter...

CVE-2012-5140

Use-after-free vulnerability in Google Chrome before 23.0.1271.97 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the URL loader...

CVE-2012-5139

Use-after-free vulnerability in Google Chrome before 23.0.1271.97 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to visibility events...

CVE-2012-5142

Google Chrome before 23.0.1271.97 does not properly handle history navigation, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via unspecified vectors...

CVE-2012-5139

CVE-2012-5139 is a use-after-free vulnerability in Google Chrome/Chromium related to visibility events, affecting Chrome before 23.0.1271.97 and potentially causing denial of service or other impacts. Connected advisories confirm multiple Chromium/Chrome CVEs with fixes in updated Chromium/Chrome...

CVE-2012-5140

CVE-2012-5140: Google Chrome prior to 23.0.1271.97 has a use-after-free in the URL loader, allowing remote attackers to cause a denial of service or possibly other impact. The vulnerability is documented in multiple vulnerability feeds (OpenVAS/OSV-OpenVAS entries reference CVE-2012-5140). No exp...

CVE-2012-5143

CVE-2012-5143 describes an integer overflow in Google Chrome/Chromium’s PPAPI image buffers prior to the 23.0.1271.97 release, potentially enabling a remote attacker to cause a crash or other impact. The available connected documents corroborate the CVE’s association with Chromium/Chrome and indi...

CVE-2012-4975

CVE-2012-4975 affects Layton Helpbox 4.4.0. An authorization bypass exists on editrequestuser.asp: by changing the sys_request_id parameter, a remote authenticated attacker can access and modify other users’ support-ticket data, effectively logging in as another user and altering data. The descri...

CVE-2012-5677

CVE-2012-5677 affects Adobe Flash Player and Adobe AIR components. The initial description specifies an integer overflow in Flash Player before 10.3.183.48 and 11.x before 11.5.502.135/136 (various OSs), and Adobe AIR before 3.5.0.880/890, enabling arbitrary code execution via unspecified vectors...

CVE-2012-5142

CVE-2012-5142 affects Google Chrome/Chromium: a crash in history navigation could be triggered via unspecified vectors, potentially enabling remote code execution or causing a crash. The OpenSUSE/NASL and Gentoo advisories describe the issue as part of a broader set of Chromium/Chrome vulnerabili...

CVE-2012-5141

CVE-2012-5141 affects Google Chrome/Chromium. The root cause is an insufficient restriction on the instantiation of the Chromoting (Chrome remote desktop) client plug‑in. The provided sources do not detail the exact impact or exploit vectors beyond noting an issue with the plug‑in instantiation. ...

CVE-2012-4971

CVE-2012-4971 describes multiple SQL injection vulnerabilities in Layton Helpbox 4.4.0. The affected components include various ASP pages and parameters such as editrequestenduser.asp (reqclass), editrequestuser.asp (sys_request_id), enduseractions.asp (sys_request_id), enduserreopenrequeststatus...

CVE-2012-5675

CVE-2012-5675 affects Adobe ColdFusion 9.0 through 9.0.2 and ColdFusion 10. The vulnerability is a sandbox-permission bypass in shared-hosting environments that allows local users to bypass intended sandbox restrictions via unspecified vectors. The available connected documents confirm the affect...

CVE-2012-5139

Removed by vendor...

CVE-2012-5676

Buffer overflow in Adobe Flash Player before 10.3.183.48 and 11.x before 11.5.502.135 on Windows, before 10.3.183.48 and 11.x before 11.5.502.136 on Mac OS X, before 10.3.183.48 and 11.x before 11.2.202.258 on Linux, before 11.1.111.29 on Android 2.x and 3.x, and before 11.1.115.34 on Android 4.x...

CVE-2012-5144

CVE-2012-5144 affects Google Chrome up to 23.0.1271.97 and Libav branches: 0.7.x before 0.7.7 and 0.8.x before 0.8.5. Root cause: an off-by-one overwrite when switching to the LTP profile from MAIN during AAC decoding. Impact: remote denial of service via stack memory corruption and potentially u...