1582 matches found
Mozilla Releases Security Updates for Firefox and Firefox ESR
The Mozilla Foundation has released security updates to address vulnerabilities in Firefox and Firefox ESR. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system. Available updates include: Firefox 43 Firefox ESR 38.5 US-CERT encourages...
Microsoft Windows Library Loading Remote Code Execution Vulnerability (CNVD-2015-08040)
Microsoft Windows is a series of operating systems released by the American company Microsoft. A remote code execution vulnerability exists in Microsoft Windows that originates from a program failing to properly validate input before loading a library. An attacker could exploit the vulnerability ...
Google Releases Security Update for Chrome
Google has released Chrome version 47.0.2526.80 to address multiple vulnerabilities for Windows, Mac, and Linux. Exploitation of one of these vulnerabilities may allow a remote attacker to take control of an affected system. Users and administrators are encouraged to review the Chrome Releases pa...
Oracle Releases Security Bulletin
Oracle has released its Critical Patch Update for October 2015 to address 154 vulnerabilities across multiple products. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system. US-CERT encourages users and administrators to review the Oracle...
Flash Player < 19.0.0.226 RCE (APSB15-27) (Pawn Storm)
Binary data 8991.prm...
Adobe Flash Player Unspecified Vulnerability (Oct 2015) - Linux
Adobe Flash Player is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Microsoft Releases October 2015 Security Bulletin
Microsoft has released six updates to address vulnerabilities in Microsoft Windows. Exploitation of some of these vulnerabilities could allow an attacker to take control of an affected system. US-CERT encourages users and administrators to review Microsoft Security Bulletins MS15-106 through...
VMware Releases Security Advisory
VMware has released security updates to address security vulnerabilities in vCenter and ESXi. Exploitation of one of these vulnerabilities may allow a remote attacker to take control of an affected system. Users and administrators are encouraged to review VMware Security Advisory VMSA-2015-0007 a...
Mozilla Releases Security Updates for Firefox
The Mozilla Foundation has released security updates to address critical vulnerabilities in Firefox and Firefox ESR. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system. Available updates include: Firefox 41 Firefox ESR 38.3 US-CERT...
Adobe Releases Security Updates for Flash Player
Adobe has released security updates to address multiple vulnerabilities in Flash Player for Windows, Macintosh, ChromeOS, and Linux. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system. Users and administrators are encouraged to review...
Microsoft Windows Font Driver Elevation of Privilege Vulnerability (CNVD-2015-05948)
Microsoft Windows is a series of operating systems released by the American company Microsoft. An elevation of privilege vulnerability exists in Microsoft Windows when the Adobe Type Manager library does not properly handle objects in memory. An attacker could exploit this vulnerability to execut...
CVE-2015-5699 - Cumulus Linux's Switch Configuration Tools Backend, clcmd_server, Vulnerable to Local Privilege Escalation
Title =================== Cumulus Linux's Switch Configuration Tools Backend, clcmdserver, Vulnerable to Local Privilege Escalation Summary =================== Cumulus Linux's Switch Configuration Tools Backend, clcmdserver, is vulnerable to local privilege escalation via Command Injection. Cumul...
Microsoft .NET Framework Elevation of Privilege Vulnerability (CNVD-2015-05323)
Microsoft .NET Framework is a comprehensive and consistent programming model developed by Microsoft Corporation USA and a development platform for building Windows, Windows Store, Windows Phone, Windows Server and Microsoft Azure Windows Store, Windows Phone, Windows Server, and Microsoft Azure...
Microsoft Windows OpenType Font Remote Code Execution Vulnerability (CNVD-2015-05365)
Microsoft Windows is a series of operating systems released by the American company Microsoft. A font remote code execution vulnerability exists in Microsoft Windows OpenType, which can be exploited by an attacker to take full control of an affected system...
Microsoft Windows OpenType Font Remote Code Execution Vulnerability (CNVD-2015-05364)
Microsoft Windows is a series of operating systems released by the American company Microsoft. A font remote code execution vulnerability exists in Microsoft Windows OpenType, which can be exploited by an attacker to take full control of an affected system...
Microsoft .NET Framework Elevation of Privilege Vulnerability (CNVD-2015-05325)
Microsoft .NET Framework is a comprehensive and consistent programming model developed by Microsoft Corporation USA and a development platform for building Windows, Windows Store, Windows Phone, Windows Server and Microsoft Azure Windows Store, Windows Phone, Windows Server, and Microsoft Azure...
Mozilla Releases Security Updates for Firefox, Firefox ESR, and Firefox OS
The Mozilla Foundation has released security updates to address critical vulnerabilities in Firefox, Firefox ESR, and Firefox OS. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system. Available updates include: Firefox 40 Firefox ESR 38.2...
Adobe Flash Player Type Confusion (APSB15-16: CVE-2015-3122)
A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a type confusion condition while handling a malformed SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file. Successful...
Finecms v1.9.3 Arbitrary File Upload Vulnerability
FineCMS is a small and medium-sized content management system based on PHP+MySql+CI framework. An upload vulnerability exists in finecms 1.9.3, which allows attackers to upload a php-type webshell, which in turn controls the entire system...
Microsoft released an emergency update: serious remote code execution vulnerability, affecting all versions of Windows-vulnerability warning-the black bar safety net
! Microsoft today released an emergency update that fixes the relates to all versions of Windows in high-risk remote code execution vulnerability. Whether you are using what version of Windows System, we recommend that you have to update it-this one high-risk vulnerability could allow an attacker...