Lucene search
+L

16721 matches found

Microsoft Security Update
Microsoft Security Update
added 2016/05/10 5:00 p.m.17 views

Security Update for Adobe Flash Player for Windows Server 2012 R2 (KB3157993)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

1.5AI score
SaveExploits0
ThreatPost
ThreatPost
added 2016/05/10 3:03 p.m.54 views

May 2016 Microsoft Patch Tuesday Security Bulletins

Microsoft released a hefty load of security bulletins today, which included a patch for a JScript and VBScript scripting engine vulnerability being publicly exploited. The flaw is addressed in its own bulletin, MS16-053, but users need to pay attention to, and apply MS16-051 as well since the...

9.3CVSS0.8AI score0.94062EPSS
SaveExploits10References16
Microsoft KB
Microsoft KB
added 2016/05/10 7:00 a.m.35 views

MS16-064: Security update for Adobe Flash Player: May 13, 2016

None None...

6.1AI score
SaveExploits0
Kaspersky
Kaspersky
added 2016/05/10 12:00 a.m.40 views

KLA10811 Obsolete Adobe Flash Player for Windows

Microsoft released update to address vulnerabilities in Flash Player for Internet explorer. For details look at KLA10810. Technical details To mitigate this vulnerability you can implement some of workarounds listed in original Microsoft advisory: disable Adobe Flash Player, prevent Adobe FP from...

7.3AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2016/05/10 12:00 a.m.9 views

PT-2016-1943 · Adobe +3 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 21.0.0.226 and earlier Description: The issue allows remote attackers to execute arbitrary code via unspecified vectors. It has been exploited in the wild, specifically in May 2016. The vulnerability is related to...

10CVSS8.6AI score0.94354EPSS
SaveExploits29References216
Tenable Nessus
Tenable Nessus
added 2016/05/10 12:00 a.m.74 views

MS16-064: Security Update for Adobe Flash Player (3163207)

The remote Windows host is missing KB3163207. It is, therefore, affected by multiple vulnerabilities : - Multiple type confusion errors exist that allow an attacker to execute arbitrary code. CVE-2016-1105, CVE-2016-4117 - Multiple use-after-free errors exist that allow an attacker to execute...

10CVSS8.7AI score0.94354EPSS
SaveExploits22References33
Microsoft KB
Microsoft KB
added 2016/05/10 12:00 a.m.46 views

MS16-064: Security update for Adobe Flash Player: May 10, 2016

None None...

6.1AI score
SaveExploits0
OpenVAS
OpenVAS
added 2016/05/09 12:00 a.m.47 views

Mageia: Security Advisory (MGASA-2016-0134)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8.7AI score0.26022EPSS
SaveExploits7References6
VulnCheck KEV
VulnCheck KEV
added 2016/05/08 12:00 a.m.11 views

VulnCheck KEV: CVE-2016-4117

An access of resource using incompatible type vulnerability exists within Adobe Flash Player that allows an attacker to perform remote code execution...

10CVSS7.5AI score0.94354EPSS
SaveExploits6References1
Hacker One
Hacker One
added 2016/05/07 8:45 p.m.29 views

Vimeo: XSS in Subtitles of Vimeo Flash Player and Hubnut

XSS is Subtitles of flash player and hubnut...

1.3AI score
SaveExploits0
Hacker One
Hacker One
added 2016/05/05 12:20 p.m.30 views

Internet Bug Bounty: User credentials leak and arbitrary local file read/leak due to same-origin-policy violation

Vulnerability details ===================== A vulnerability exists in Flash Player that allows violating the same-origin-policy. An attacker can read sensitive local files and communicate with remote servers. As a result, this allows uploading the content of these local files to an...

6.4AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2016/05/05 12:00 a.m.10 views

The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code

The vulnerability of the Flash Player software is related to errors in its code. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely by manipulating the “type mismatch” mechanism...

9.3CVSS7.7AI score0.07133EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/05/05 12:00 a.m.12 views

The vulnerability of the Flash Player software platform, which allows a violator to bypass the ASLR protection mechanism

The vulnerability of the Flash Player software is related to errors in security settings. Exploiting this vulnerability allows a malicious actor to bypass the ASLR protection mechanism by using JIT data...

10CVSS7.2AI score0.03906EPSS
SaveExploits0References2Affected Software1
myhack58
myhack58
added 2016/05/03 12:00 a.m.22 views

CVE-2 0 1 6-1 0 1 9: a Magnitude attack tool flash vulnerability-vulnerability warning-the black bar safety net

Last month, Proofpoint has a security researchers found the Magnitude of attack tools there appears to be some new stuff. So in their cooperation we analyzed the sample and found that Magnitude EK added before exist in the Adobe Flash Player Vulnerability, cve-2 0 1 6-1 0 1 9, and then the wild u...

0.9AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2016/04/28 12:00 a.m.11 views

The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code

The vulnerability of the LoadVars.decode function in the Flash Player software platform is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

9.3CVSS7.6AI score0.06102EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/04/28 12:00 a.m.11 views

The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code

The vulnerability of the Flash Player software arises due to an overflow in the buffer on the stack. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted JPEG-XR data...

9.3CVSS8AI score0.08292EPSS
SaveExploits0References3Affected Software1
Metasploit
Metasploit
added 2016/04/27 12:00 a.m.49 views

Adobe Flash Player DeleteRangeTimelineOperation Type-Confusion

This module exploits a type confusion on Adobe Flash Player, which was originally found being successfully exploited in the wild. This module has been tested successfully on: macOS Sierra 10.12.3, Safari and Adobe Flash Player 21.0.0.182, Firefox and Adobe Flash Player 21.0.0.182. Module Options...

10CVSS7.8AI score0.94354EPSS
SaveExploits6
CNVD
CNVD
added 2016/04/27 12:00 a.m.1 views

Adobe Flash Arbitrary Code Execution Vulnerability

Adobe Flash Player is a multimedia player product; Adobe AIR SDK and Adobe AIR SDK & Compiler are both standard development kits for Adobe AIR. An arbitrary code execution vulnerability exists in Adobe Flash Player, which could be exploited by remote attackers to construct a malicious web page an...

8.2AI score
SaveExploits0References1
myhack58
myhack58
added 2016/04/27 12:00 a.m.20 views

CVE-2 0 1 6-1 0 1 9 Flash vulnerability being added to exploit kit package-vulnerability warning-the black bar safety net

4 on number 2, security researcher @Kafeine found that Magnitude of vulnerability use tools to pack a few changes. Very grateful he found the collection of these samples, we analyzed them and found that the Magnitude of the tool in the package to update an unknown Adobe Flash PlayerCVE-2 0 1 6-1 ...

0.4AI score
SaveExploits0
OPENSUSE Linux
OPENSUSE Linux
added 2016/04/26 5:08 p.m.39 views

Security update for flash-player (important)

flash-player was updated to fix one security issue. This security issue was fixed: - CVE-2016-1019: Adobe Flash Player earlier allowed remote attackers to cause a denial of service application crash or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016...

10CVSS6.8AI score0.22487EPSS
SaveExploits0References1
Rows per page
Query Builder