2741 matches found
Thirty One - 31 Free - Base64 encoded String, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Thirty One - 31 Free published at the 'play' market has multiple vulnerabilities...
Schwimm! - Thirty-one - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities
HackApp vulnerability scanner discovered that application Schwimm! - Thirty-one published at the 'play' market has multiple vulnerabilities...
graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)
The Machine::Code::decoder::analysis::setref function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to execute arbitrary code or cause a denial of service stack memory corruption via a crafted Graphite smart font...
DEBIAN-CVE-2016-2794
The graphite2::TtfUtil::CmapSubtable12NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service buffer over-read or possibly have unspecified other impact via a crafted Graphite...
DEBIAN-CVE-2016-1977
The Machine::Code::decoder::analysis::setref function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to execute arbitrary code or cause a denial of service stack memory corruption via a crafted Graphite smart font...
Mozilla Firefox and Firefox ESR Arbitrary Code Execution Vulnerability
Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A security vulnerability exists in the browser engine of Mozilla Firefox versions prior to 45.0 a...
Mozilla: Use-after-free when using multiple WebRTC data channels (MFSA 2016-25)
Use-after-free vulnerability in the mozilla::DataChannelConnection::Close function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code by leveraging mishandling of WebRTC data-channel connections...
Mozilla: Miscellaneous memory safety hazards (rv:38.7) (MFSA 2016-16)
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unknown vectors...
CVE-2016-1986
HP Continuous Delivery Automation CDA 1.30 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library...
CVE-2016-0592
Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.36 and before 5.0.14 allows local users to affect availability via unknown vectors related to Core...
UBUNTU-CVE-2016-0495
Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.36 and 5.0.14 allows remote attackers to affect availability via unknown vectors related to Core...
Multiple Huawei Products Password Change Vulnerability
Huawei TE30, TE40, TE50 and TE60 are all-in-one HD video conferencing endpoints from Huawei China that support intelligent voice calling and Wi-Fi wireless interconnectivity. The Huawei TE30, TE40, TE50, and TE60 Debug accounts fail to enter the old password as required when changing the password...
Denial of Service Vulnerability in Multiple Huawei Products
The Huawei TE30, TE40, TE50 and TE60 are all-in-one HD video conferencing endpoints from Huawei China that support intelligent voice calling and Wi-Fi wireless connectivity. A security vulnerability in the presentation transmission permission management mechanism of the Huawei TE30, TE40, TE50, a...
DEBIAN-CVE-2015-8716
The initt38infoconv function in epan/dissectors/packet-t38.c in the T.38 dissector in Wireshark 1.12.x before 1.12.9 does not ensure that a conversation exists, which allows remote attackers to cause a denial of service application crash via a crafted packet...
WinRAR Arbitrary Code Execution Vulnerability
WinRAR is a file compression manager developed by software developer Alexander Roshal that supports RAR and ZIP compressed files and can decompress CAB, ARJ and LZH files. An arbitrary code execution vulnerability exists in WinRAR. The vulnerability can be exploited to execute arbitrary code with...
flash-plugin: multiple code execution issues fixed in APSB15-32
Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial o...
flash-plugin: multiple code execution issues fixed in APSB15-32
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute...
flash-plugin: multiple code execution issues fixed in APSB15-32
Use-after-free vulnerability in the Color object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before...
flash-plugin: multiple code execution issues fixed in APSB15-32
Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial o...
flash-plugin: multiple code execution issues fixed in APSB15-32
Heap-based buffer overflow in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute...