CVE-2018-4933

Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure...

CVE-2018-4935

Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user...

CVE-2018-4937

Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user...

CVE-2018-4919

Adobe Flash Player versions 28.0.0.161 and earlier have an exploitable use after free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user...

CVE-2018-4935

Adobe Flash Player 29.0.0.113 and earlier is affected by an exploitable out-of-bounds write (CVE-2018-4935), potentially allowing arbitrary code execution in the user context. Public fixes exist: Red Hat Gentoo and other advisories indicate upgrading to the patched version (e.g., 29.0.0.140 or la...

CVE-2018-4920

Adobe Flash Player

CVE-2018-4919

CVE-2018-4919 concerns Adobe Flash Player, where versions 28.0.0.161 and earlier contain a use-after-free vulnerability that could allow arbitrary code execution in the context of the current user. The issue is addressed by Adobe’s March 2018 APSB18-05 update and is reflected in multiple advisori...

CVE-2018-4933

CVE-2018-4933 affects Adobe Flash Player versions 29.0.0.113 and earlier, with an exploitable out-of-bounds read vulnerability that could lead to information disclosure. Multiple connected sources (e.g., Nessus plugins and CVE records) confirm this as part of APSB18-08 and list affected versions ...

bernardsurface.com XSS vulnerability

Open Bug Bounty ID: OBB-618603 Description| Value ---|--- Affected Website:| bernardsurface.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Debian DSA-4203-1 : vlc - security update

Hans Jerry Illikainen discovered a type conversion vulnerability in the MP4 demuxer of the VLC media player, which could result in the execution of arbitrary code if a malformed media file is played. This update upgrades VLC in stretch to the new 3.x release series as security fixes couldn't be...

[SECURITY] [DSA 4203-1] vlc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4203-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 17, 2018 https://www.debian.org/security/faq -...

Adobe Doles Out Second Round of Higher Priority Patches

A week after issuing updates on Patch Tuesday, Adobe has posted patches for a second slew of 24 critical vulnerabilities, which have a higher risk of being exploited. This week’s crop of vulnerabilities, of which there were 47 overall, impact versions of Adobe’s Acrobat DC Acrobat Reader DC, and...

GLSA-201805-05 : mpv: Remote code execution

The remote host is affected by the vulnerability described in GLSA-201805-05 mpv: Remote code execution A vulnerability was discovered in mpv with the handling of HTML documents containing VIDEO elements. Additionally, mpv accepts arbitrary URLs in a src attribute without a protocol whitelist in...

Adobe Flash Player Matrix3D Integer Overflow Remote Code Execution (APSB12-19: CVE-2012-5054)

A remote code execution vulnerability exists in Flash Player. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Cisco WebEx Recorder and Player WRF File Length Field Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Cisco WebEx Recorder and Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

Cisco WebEx Recorder and Player WRF File Length Field Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Cisco WebEx Recorder and Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

Updated flash-player-plugin packages fix security vulnerability

Adobe Flash Player 29.0.0.171 addresses a critical type confusion vulnerability that could lead to arbitrary code execution CVE-2018-4944...

MGASA-2018-0233 Updated flash-player-plugin packages fix security vulnerability

Adobe Flash Player 29.0.0.171 addresses a critical type confusion vulnerability that could lead to arbitrary code execution CVE-2018-4944...

flash-plugin: Arbitrary Code Execution vulnerability (APSB18-16)

Adobe Flash Player versions 29.0.0.140 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user...

FreeBSD : Flash Player -- arbitrary code execution (9558d49c-534c-11e8-8177-d43d7ef03aa6)

Adobe reports : - This update resolves a type confusion vulnerability that could lead to arbitrary code execution CVE-2018-4944. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques...