Mageia: Security Advisory (MGASA-2015-0109)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Thunderbird Information Disclosure

The Thunderbird email client contains a vulnerability related to errors in the implementation of the SVG filter. This vulnerability allows a malicious actor to gain access to confidential information about displacement and correlations, as well as to circumvent domain restriction policies. The...

Thunderbird Authentication Bypass

The Mozilla Thunderbird email client contains a vulnerability related to errors in the implementation of the Web Workers technology. Exploiting this vulnerability allows malicious actors operating remotely to circumvent Domain Restrictions Policy SOP rules and gain access to authentication data...

SUSE: Security Advisory for flash-player (SUSE-SU-2015:0491-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory for flash-player (SUSE-SU-2015:0493-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Adobe Flash Player Cross Domain Policy Bypass (APSB15-11: CVE-2015-3099)

Adobe Flash Player is vulnerable to a cross domain policy bypass. If the victim opens a maliciously crafted file using certain URL, the file could cause a privilege escalation and allow unlimited cross-domain access...

RHEL 5 / 6 : flash-plugin (RHSA-2015:0697)

The remote Redhat Enterprise Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2015:0697 advisory. - flash-plugin: multiple code execution issues fixed in APSB15-05 CVE-2015-0332, CVE-2015-0333, CVE-2015-0334, CVE-2015-0335,...

FreeBSD : Adobe Flash Player -- critical vulnerabilities (8b3ecff5-c9b2-11e4-b71f-00bd5af88c00)

Adobe reports : Adobe has released security updates for Adobe Flash Player for Windows, Macintosh and Linux. These updates address vulnerabilities that could potentially allow an attacker to take control of the affected system. These updates resolve memory corruption vulnerabilities that could le...

openSUSE Security Update : flash-player (openSUSE-2015-225)

Adobe Flash Player was updated to 11.2.202.451 bsc922033. These security issues were fixed : - Memory corruption vulnerabilities that could lead to code execution CVE-2015-0332, CVE-2015-0333, CVE-2015-0335, CVE-2015-0339. - Type confusion vulnerabilities that could lead to code execution...

Updated flash-player-plugin package fixes security vulnerabilities

Adobe Flash Player 11.2.202.451 contains fixes to critical security vulnerabilities found in earlier versions that could cause a crash and potentially allow an attacker to take control of the affected system. This update resolves memory corruption vulnerabilities that could lead to code execution...

flashplayer to version 11.2.202.451 (important)

Adobe Flash Player was updated to 11.2.202.451 bsc922033. These security issues were fixed: - Memory corruption vulnerabilities that could lead to code executionCVE-2016-0332,CVE-2015-0333, CVE-2015-0335, CVE-2015-0339. - Type confusion vulnerabilities that could lead to code...

March 2015 Adobe Flash Player Security Update APSB15-05

Adobe this afternoon pushed out a Flash Player update patching 11 critical security vulnerabilities, most of which lead to remote code execution. None are being publicly exploited, Adobe said. Versions 16.0.0.305 and earlier of the Flash Player Desktop and Flash Player for Google Chrome are...

Adobe Flash Player -- critical vulnerabilities

Adobe reports: Adobe has released security updates for Adobe Flash Player for Windows, Macintosh and Linux. These updates address vulnerabilities that could potentially allow an attacker to take control of the affected system. These updates resolve memory corruption vulnerabilities that could lea...

openSUSE Security Update : flash-player (openSUSE-2011-4)

This update provides flash-player 11.1.102.55, which files the following critical security issues : - This update resolves a memory corruption vulnerability that could lead to code execution CVE-2011-2445. - This update resolves a heap corruption vulnerability that could lead to code execution...

PT-2013-1559

Name of the Vulnerable Software and Affected Versions EMC RSA Archer SmartSuite Framework versions 4.x RSA Archer GRC versions 5.x through 5.2 before 5.2SP1 Description The issue concerns the Silverlight cross-domain policy, which fails to restrict access to the Archer application. This allows...

Microsoft Internet Explorer Domain Policy Bypass Vulnerability

Microsoft Internet Explorer is prone to domain policy bypass vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-2458: Undefined Security Weakness

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, when Internet Explorer is used, allows remote attackers to bypass the cross-domain policy via a crafted web site...

PT-2011-3884

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 10.3.183.11 and 11.x prior to 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and prior to 11.1.102.59 on Android Adobe AIR versions prior to 3.1.0.4880 Description The issue allows remote attackers to...

CVE-2008-3474: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft Internet Explorer 6 and 7 does not properly determine the domain or security zone of origin of web script, which allows remote attackers to bypass the intended cross-domain security policy and obtain sensitive information via a crafted HTML document, aka "Cross-Domain Information...

CVE-2008-3472: Undefined Security Weakness

Microsoft Internet Explorer 6 and 7 does not properly determine the domain or security zone of origin of web script, which allows remote attackers to bypass the intended cross-domain security policy, and execute arbitrary code or obtain sensitive information, via a crafted HTML document, aka "HTM...