1628 matches found
CVE-2017-2925
Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability in the JPEG XR codec. Successful exploitation could lead to arbitrary code execution...
CVE-2017-2925
CVE-2017-2925 is an Adobe Flash Player memory corruption vulnerability in the JPEG XR codec affecting Flash Player 24.0.0.186 and earlier. Successful exploitation could enable arbitrary code execution on a remote host. The issue is one of multiple CVEs addressed in January 2017 Flash updates; mit...
CVE-2017-2925
Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability in the JPEG XR codec. Successful exploitation could lead to arbitrary code execution...
PT-2017-1126 · Adobe +3 · Flash Player +3
Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 24.0.0.186 and earlier Description: The issue is related to a memory corruption vulnerability in the JPEG XR codec of Adobe Flash Player. This vulnerability can be exploited to achieve arbitrary code execution. The...
CVE-2016-9215
A vulnerability in Cisco IOS XR Software could allow an authenticated, local attacker to log in to the device with the privileges of the root user. More Information: CSCva38434. Known Affected Releases: 6.1.1.BASE...
CVE-2016-9215
A vulnerability in Cisco IOS XR Software could allow an authenticated, local attacker to log in to the device with the privileges of the root user. More Information: CSCva38434. Known Affected Releases: 6.1.1.BASE...
CVE-2016-9205
A vulnerability in the HTTP 2.0 request handling code of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the Event Management Service daemon emsd to crash, resulting in a denial of service DoS condition. More Information: CSCvb14425. Known Affected Releases:...
Design/Logic Flaw
A vulnerability in Cisco IOS XR Software could allow an authenticated, local attacker to log in to the device with the privileges of the root user. More Information: CSCva38434. Known Affected Releases: 6.1.1.BASE...
Design/Logic Flaw
A vulnerability in the HTTP 2.0 request handling code of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the Event Management Service daemon emsd to crash, resulting in a denial of service DoS condition. More Information: CSCvb14425. Known Affected Releases:...
CVE-2016-9215
Cisco IOS XR Software contains a default-credentials vulnerability (CVE-2016-9215) that lets an authenticated, local attacker log in with root privileges through a user account with a default/static password. The issue affects Cisco IOS XR and is discussed in Cisco advisory CSCva38434; the Cisco ...
CVE-2016-9205
A vulnerability in the HTTP 2.0 request handling code of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the Event Management Service daemon emsd to crash, resulting in a denial of service DoS condition. More Information: CSCvb14425. Known Affected Releases:...
CVE-2016-9205
CVE-2016-9205 affects Cisco IOS XR Software, where the HTTP/2.0 request handling code can be abused by an unauthenticated, remote attacker to crash the Event Management Service daemon (emsd), causing a DoS. The issue is triggered by crafted HTTP/2.0 requests, due to improper handling of such requ...
Cisco IOS XR Software HTTP 2.0 Request Handling Event Service Daemon Denial of Service Vulnerability (cisco-sa-20161207-ios-xr)
A vulnerability in the HTTP 2.0 request handling code of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the Event Management Service daemon emsd to crash, resulting in a denial of service DoS condition. Copyright C 2016 Greenbone Networks GmbH Some text description...
Cisco IOS XR Software Default Credentials Vulnerability (cisco-sa-20161207-iosxr)
A vulnerability in Cisco IOS XR Software could allow an authenticated, local attacker to log in to the device with the privileges of the root user. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...
Cisco IOS XR Software HTTP 2.0 Request Handling Event Service Daemon Denial of Service Vulnerability
A vulnerability in the HTTP 2.0 request handling code of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the Event Management Service daemon emsd to crash, resulting in a denial of service DoS condition. The vulnerability is due to improper handling of HTTP requests...
Cisco IOS XR Software Command-Line Interface Privilege Escalation (cisco-sa-20161005-iosxr)
According to its self-reported version, the Cisco IOS XR software running on the remote device is affected by a local privilege escalation vulnerability in the command-line interface CLI due to incorrect permissions being given to a certain set of users. A local attacker who has valid...
Cisco IOS XR Elevation of Privilege Vulnerability
Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A root elevation of privilege vulnerability exists in Cisco IOS XR version 6.1.1, which allows local users to execute arbitrary operating system commands as root by leveraging...
CVE-2016-6428
Cisco IOS XR 6.1.1 allows local users to execute arbitrary OS commands as root by leveraging admin privileges, aka Bug ID CSCva38349...