[ASA-201711-21] flashplugin: arbitrary code execution

Arch Linux Security Advisory ASA-201711-21 ========================================== Severity: Critical Date : 2017-11-15 CVE-ID : CVE-2017-11213 CVE-2017-11215 CVE-2017-11225 CVE-2017-3112 CVE-2017-3114 Package : flashplugin Type : arbitrary code execution Remote : Yes Link :...

[ASA-201711-22] lib32-flashplugin: arbitrary code execution

Arch Linux Security Advisory ASA-201711-22 ========================================== Severity: Critical Date : 2017-11-15 CVE-ID : CVE-2017-11213 CVE-2017-11215 CVE-2017-11225 CVE-2017-3112 CVE-2017-3114 Package : lib32-flashplugin Type : arbitrary code execution Remote : Yes Link :...

CVE-2017-16794

The pngload function in lib/png.c in SWFTools 0.9.2 does not properly validate a multiplication of width and bits-per-pixel values, which allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file, as demonstrated by an erroneous...

UBUNTU-CVE-2017-16711

The swfDefineLosslessBitsTagToImage function in lib/modules/swfbits.c in SWFTools 0.9.2 mishandles an uncompress failure, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash because of extractDefinitions in lib/readers/swf.c and filllinebitmap...

zukerman.com.br XSS vulnerability

Open Bug Bounty ID: OBB-399573 Description| Value ---|--- Affected Website:| zukerman.com.br Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

Arbitrary file deletion

Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to a maliciously created .swf files that can have its code executed when a user tries to download the file...

CVE-2017-1000132

Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to a maliciously created .swf files that can have its code executed when a user tries to download the file...

CVE-2017-1000132

Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to a maliciously created .swf files that can have its code executed when a user tries to download the file...

CVE-2017-1000132

Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to a maliciously created .swf files that can have its code executed when a user tries to download the file...

CVE-2017-1000132

Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to a maliciously created .swf files that can have its code executed when a user tries to download the file...

CVE-2017-1000132

CVE-2017-1000132 affects Mahara versions 1.8.x before 1.8.7, 1.9.x before 1.9.5, 1.10.x before 1.10.3, and 15.04 before 15.04.0. A crafted .swf file could execute code when a user downloads it. The connected documents do not provide a remediation or patch details; no exploit status is stated.

PT-2017-10833

Name of the Vulnerable Software and Affected Versions Mahara versions 1.8 through 1.8.6 Mahara versions 1.9 through 1.9.4 Mahara versions 1.10 through 1.10.2 Mahara versions 15.04 through 15.04.0 Description The issue allows maliciously created .swf files to have their code executed when a user...

CVE-2017-1000132: Improper Neutralization of Input During Web Page Generation

Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to a maliciously created .swf files that can have its code executed when a user tries to download the file...

physicslearning2.colorado.edu Open Redirect vulnerability

Open Bug Bounty ID: OBB-372748 Description| Value ---|--- Affected Website:| physicslearning2.colorado.edu Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Chea...

neoplace.com.br XSS vulnerability

Open Bug Bounty ID: OBB-364026 Description| Value ---|--- Affected Website:| neoplace.com.br Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

cine.co.jp XSS vulnerability

Open Bug Bounty ID: OBB-360081 Description| Value ---|--- Affected Website:| cine.co.jp Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

bouyguesstroi.ru XSS vulnerability

Open Bug Bounty ID: OBB-359999 Description| Value ---|--- Affected Website:| bouyguesstroi.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

soccertutor.com XSS vulnerability

Open Bug Bounty ID: OBB-359987 Description| Value ---|--- Affected Website:| soccertutor.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

macholato.it XSS vulnerability

Open Bug Bounty ID: OBB-359528 Description| Value ---|--- Affected Website:| macholato.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

brunatiartigrafiche.it XSS vulnerability

Open Bug Bounty ID: OBB-355862 Description| Value ---|--- Affected Website:| brunatiartigrafiche.it Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...