CVE-2017-5489

Cross-site request forgery CSRF vulnerability in WordPress before 4.7.1 allows remote attackers to hijack the authentication of unspecified victims via vectors involving a Flash file upload...

Magento CMS Flash File Upload Cross-Site Scripting Vulnerability

Magento CMS is an open source PHP e-commerce content management system CMS of the United States Magento company . The system provides rights management , search engine and payment gateway and other functions . An upload cross-site scripting vulnerability exists in Magento CMS Flash files, which c...

foto-edelmann.de XSS vulnerability

Vulnerable URL: http://www.foto-edelmann.de/tlfiles/flash/coppergb.swf?txt=%3Ca%20href=%22javascript:alert%28/OPENBUGBOUNTY/%29%22%3Eclick%20me!%3C/a%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

The vulnerability of the Flash Player software allows a malicious attacker to execute arbitrary code or cause a service failure.

The Flash Player software contains a vulnerability that stems from the use of memory after decompression in the ByteArray::UncompressViaZlibVariant function. This vulnerability can be exploited by malicious actors using a specially crafted swf file. As a result of exploiting this vulnerability,...

Unspecified memory corruption vulnerability in Microsoft Internet Explorer and Microsoft Edge Adobe Flash Player (CNVD-2016-04119)

Adobe Flash Player is a multimedia player product; Adobe AIR SDK and Adobe AIR SDK & Compiler are both standard development kits for Adobe AIR.Microsoft Internet Explorer and Microsoft Edge are popular web browsers. An unspecified memory corruption vulnerability exists in Adobe Flash Player used ...

blogs.timesofindia.indiatimes.com XSS vulnerability

Vulnerable URL: http://blogs.timesofindia.indiatimes.com/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

WordPress Core Flash File Same-Origin Method Execution (CVE-2016-4566)

A same-origin method execution vulnerability exists in WordPress Core Flash File. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

WordPress Core Flash File Cross-Site Scripting (CVE-2016-4567)

A cross-site scripting vulnerability exists in WordPress Core Flash File. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

SWF Player - Flash File Viewer - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application SWF Player - Flash File Viewer published at the 'play' market has multiple vulnerabilities...

The vulnerability of the Moodle learning management system allows attackers to carry out XSS attacks.

The vulnerability of the Moodle learning management system is related to the insufficient restrictions on the use of the Flowplayer component. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks using a specially created .swf file...

IBM Emptoris Contract Management Arbitrary Code Execution Vulnerability

IBM Emptoris Contract Management is a suite of software from IBM USA that automates the contract lifecycle. The software automates and manages all phases of the contract lifecycle, from the creation, execution and renegotiation of contracts and amendments, to performance monitoring, analysis and...

CVE-2015-5042

IBM Emptoris Contract Management 9.5.0.x before 9.5.0.6 iFix15, 10.0.0.x and 10.0.1.x before 10.0.1.5 iFix5, 10.0.2.x before 10.0.2.7 iFix4, and 10.0.4.x before 10.0.4.0 iFix3 allows remote attackers to execute arbitrary code by including a crafted Flash file...

Arbitrary file deletion

IBM Emptoris Contract Management 9.5.0.x before 9.5.0.6 iFix15, 10.0.0.x and 10.0.1.x before 10.0.1.5 iFix5, 10.0.2.x before 10.0.2.7 iFix4, and 10.0.4.x before 10.0.4.0 iFix3 allows remote attackers to execute arbitrary code by including a crafted Flash file...

CVE-2015-5042

IBM Emptoris Contract Management 9.5.0.x before 9.5.0.6 iFix15, 10.0.0.x and 10.0.1.x before 10.0.1.5 iFix5, 10.0.2.x before 10.0.2.7 iFix4, and 10.0.4.x before 10.0.4.0 iFix3 allows remote attackers to execute arbitrary code by including a crafted Flash file...

CVE-2015-5042

IBM Emptoris Contract Management 9.5.0.x before 9.5.0.6 iFix15, 10.0.0.x and 10.0.1.x before 10.0.1.5 iFix5, 10.0.2.x before 10.0.2.7 iFix4, and 10.0.4.x before 10.0.4.0 iFix3 allows remote attackers to execute arbitrary code by including a crafted Flash file...

CVE-2015-5042

CVE-2015-5042 affects IBM Emptoris Contract Management. Multiple product lines are impacted: 9.5.0.x before 9.5.0.6 iFix15; 10.0.0.x and 10.0.1.x before 10.0.1.5 iFix5; 10.0.2.x before 10.0.2.7 iFix4; and 10.0.4.x before 10.0.4.0 iFix3. The vulnerability allows remote attackers to execute arbitra...

Adobe Flash Player Memory Error Referencing Arbitrary Code Execution Vulnerability (CNVD-2015-08233)

Adobe Flash Player is a widely used, proprietary multimedia program player. It was originally written by Macromedia and continued to be developed and distributed by Adobe after Macromedia was acquired by Adobe. A memory misreference vulnerability exists in Adobe Flash Player's handling of special...

The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code

The vulnerability of the Flash Player software is related to errors in its code. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted SWF file...

VulnCheck KEV: CVE-2015-7645

Adobe Flash Player allows remote attackers to execute arbitrary code via a crafted SWF file...

CVE-2015-4244

The boot implementation on Cisco ASR 5000 and 5500 devices with software 14.0 allows local users to execute arbitrary Linux commands by leveraging administrative privileges for storage of these commands in a Compact Flash CF file, aka Bug ID CSCuu75278...