20362 matches found
CVE-2012-5280
Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x before 11.2.202.251 on Linux, before 11.1.111.24 on Android 2.x and 3.x, and before 11.1.115.27 on Android 4.x; Adobe AIR before 3.5.0.600; and Adobe AIR SDK...
CVE-2012-5275
Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x before 11.2.202.251 on Linux, before 11.1.111.24 on Android 2.x and 3.x, and before 11.1.115.27 on Android 4.x; Adobe AIR before 3.5.0.600; and Adobe AIR SDK...
CVE-2012-5278
Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x before 11.2.202.251 on Linux, before 11.1.111.24 on Android 2.x and 3.x, and before 11.1.115.27 on Android 4.x; Adobe AIR before 3.5.0.600; and Adobe AIR SDK before 3.5.0.600...
CVE-2012-5277
Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x before 11.2.202.251 on Linux, before 11.1.111.24 on Android 2.x and 3.x, and before 11.1.115.27 on Android 4.x; Adobe AIR before 3.5.0.600; and Adobe AIR SDK...
CVE-2012-5279
Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x before 11.2.202.251 on Linux, before 11.1.111.24 on Android 2.x and 3.x, and before 11.1.115.27 on Android 4.x; Adobe AIR before 3.5.0.600; and Adobe AIR SDK before 3.5.0.600...
Buffer overflow
Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x before 11.2.202.251 on Linux, before 11.1.111.24 on Android 2.x and 3.x, and before 11.1.115.27 on Android 4.x; Adobe AIR before 3.5.0.600; and Adobe AIR SDK...
CVE-2012-5276
CVE-2012-5276 is a buffer overflow vulnerability in Adobe Flash Player and Adobe AIR. The issue affects Flash Player prior to 10.3.183.43 and prior to 11.x, with specific fixes listed: Windows/Mac OS X: before 10.3.183.43 and before 11.5.502.110; Linux: before 10.3.183.43 and before 11.2.202.251;...
CVE-2012-5274
CVE-2012-5274 concerns a buffer overflow in Adobe Flash Player and Adobe AIR prior to specific build versions across Windows, Mac, Linux, and Android, allowing arbitrary code execution. Affected products/versions include Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows/Mac;...
CVE-2012-5275
CVE-2012-5275 is a buffer‑overflow vulnerability in Adobe Flash Player (and related AIR components) that affects multiple platforms (Windows, Mac OS X, Linux, Android 2.x/3.x/4.x) and allows arbitrary code execution via unspecified vectors. The initial description confirms the vulnerability class...
CVE-2012-5277
Adobe Flash Player and Adobe AIR contain a buffer overflow vulnerability (CVE-2012-5277) that allows arbitrary code execution via unspecified vectors. Affected: Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows/macOS; Flash before 10.3.183.43 and 11.x before 11.2.202.251 on ...
CVE-2012-5278
CVE-2012-5278 is one of multiple vulnerabilities affecting Adobe Flash Player and Adobe AIR; the issue allows bypassing intended access restrictions and arbitrary code execution. Public details in connected advisories identify Flash Player variants affected (Windows, Mac, Linux, Android) and indi...
Invision Power Board (IP.Board) 3.3.4 - Unserialize Regex Bypass
Invision Power Board IP.Board 3.3.4 - Unserialize Regex Bypass ?php / So this is the patch that sanitizes, static public function safeUnserialize $serialized // unserialize will return false for object declared with small cap o // as well as if there is any ws between O and : if isstring...
OrangeHRM 2.7.1-rc.1 Cross Site Request Forgery / SQL Injection Vulnerabilities
OrangeHRM version 2.7.1-rc.1 suffers from cross site request forgery and remote SQL injection vulnerabilities. Product: OrangeHRM Vendor: OrangeHRM Inc. Vulnerable Versions: 2.7.1-rc.1 and probably prior Tested Version: 2.7.1-rc.1 Vendor Notification: October 10, 2012 Public Disclosure: October 3...
OrangeHRM 2.7.1-rc.1 Cross Site Request Forgery / SQL Injection
Advisory ID: HTB23119 Product: OrangeHRM Vendor: OrangeHRM Inc. Vulnerable Versions: 2.7.1-rc.1 and probably prior Tested Version: 2.7.1-rc.1 Vendor Notification: October 10, 2012 Public Disclosure: October 31, 2012 Vulnerability Type: SQL Injection CWE-89 CVE Reference: CVE-2012-5367 CVSSv2 Base...
Fedora 17 : claws-mail-3.8.1-3.fc17 (2012-16753)
Fixes a NULL pointer crash. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...
EMC NetWorker - Format String (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'EMC Networker Format String',...
Apple QuickTime 7.7.2 MIME Type Buffer Overflow
This module exploits a buffer overflow in Apple QuickTime 7.7.2. The stack based overflow occurs when processing a malformed Content-Type header. The module has been tested successfully on Safari 5.1.7 and 5.0.7 on Windows XP SP3. Module Options msf use...
Adobe AIR for Mac 3.x <= 3.4.0.2710 Multiple Vulnerabilities (APSB12-24)
According to its version, the instance of Adobe AIR on the remote Mac OS X host is 3.4.0.2710 or earlier. It is, therefore, reportedly affected by multiple vulnerabilities : - Several unspecified issues exist that can lead to buffer overflows and arbitrary code execution. CVE-2012-5274,...
Fedora 16 : xlockmore-5.40-3.fc16 (2012-16490)
fixed 'CVE-2012-4524 xlockmore: Screensaver crash screen lock bypass when 'dclock' mode used' Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...
Fedora 16 : claws-mail-3.8.1-3.fc16 (2012-16772)
Fixes a NULL pointer crash. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...