Input validation

The extension manager in Adobe Brackets before 1.7 allows attackers to have an unspecified impact via invalid input...

CVE-2016-4164

Cross-site scripting XSS vulnerability in Adobe Brackets before 1.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4165

Adobe Brackets is affected by CVE-2016-4165 in the extension manager prior to v1.7, where invalid input can lead to an unspecified impact. Connected sources also reference CVE-2016-4164 and note a security update (APS B16-20) that resolves both CVE-2016-4164 and CVE-2016-4165; users should apply ...

CVE-2016-4164

CVE-2016-4164 affects Adobe Brackets prior to 1.7 and is a cross-site scripting (XSS) vulnerability in which an attacker may inject arbitrary script or HTML via unspecified vectors. The NVD entry (and attestations in connected data) lists a CVSSv3.0 base score of 6.1 (MEDIUM) with network attack ...

CVE-2016-4165

The extension manager in Adobe Brackets before 1.7 allows attackers to have an unspecified impact via invalid input...

CVE-2016-4164: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Adobe Brackets before 1.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4165: Improper Input Validation

The extension manager in Adobe Brackets before 1.7 allows attackers to have an unspecified impact via invalid input...

PT-2016-5861

Name of the Vulnerable Software and Affected Versions Adobe Brackets versions prior to 1.7 Description The issue affects the extension manager in Adobe Brackets, allowing attackers to have an unspecified impact via invalid input. Recommendations For versions prior to 1.7, update to version 1.7 or...

PT-2016-5860

Name of the Vulnerable Software and Affected Versions Adobe Brackets versions prior to 1.7 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 1.7, update to version 1.7 or later to resolve the issue...

Adobe Brackets Input Validation Vulnerability

Adobe Brackets is the United States Odo than Adobe company's set of open source based on HTML/CSS/JavaScript development and run on the native shell on the integrated development environment . An input validation vulnerability exists in versions 1.6 and earlier of Adobe Brackets for Windows,...

Adobe Brackets Cross-Site Scripting Vulnerability

Adobe Brackets is the United States Odo than Adobe company's set of open source based on HTML/CSS/JavaScript development and run on the native shell on the integrated development environment . Cross-site scripting vulnerability exists in Adobe Brackets 1.6 and earlier versions for Windows,...

Fix Coming for Flash Vulnerability Under Attack

Adobe today said it will patch Flash Player this week, addressing a vulnerability being exploited in “limited, targeted attacks.” The flaw, CVE-2016-4171, exists in versions of Flash prior to, and including, 21.0.0.242 on Windows, Macintosh, Linux and ChromeOS platforms. “Successful exploitation...

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in DNG Software Development Kit SDK, Brackets, Creative Cloud Desktop Application, and Cold Fusion. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system. Users and...

APSB16-20 Security update available for Adobe Brackets

Adobe has released a security update for Adobe Brackets for Windows, Macintosh and Linux. This update resolves a JavaScript injection vulnerability CVE-2016-4164 and a vulnerability in the extension manager CVE-2016-4165. Adobe recommends users update their product installation using the...

Debian DLA-269-1 : linux-ftpd-ssl security update

The issue is due to a case of missing brackets in the patch '500-ssl.diff', which causes the execution of 'fcloseNULL' and thus displays as a segmentation fault. The error appears while transmogrifying 'linux-ftpd' into 'linux-ftpd-ssl'. There is no CVE assigned to this issue. The patch was creat...

[SECURITY] [DLA 269-1] linux-ftpd-ssl security update

Package : linux-ftpd-ssl Version : 0.17.32+0.3-1+deb6u1 Debian Bug : 788331 The issue is due to a case of missing brackets in the patch 500-ssl.diff, which causes the execution of fcloseNULL and thus displays as a segmentation fault. The error appears while transmogrifying linux-ftpd into...

DLA-269-1 linux-ftpd-ssl - security update

Bulletin has no description...

DEBIAN-CVE-2014-9031

Cross-site scripting XSS vulnerability in the wptexturize function in WordPress before 3.7.5, 3.8.x before 3.8.5, and 3.9.x before 3.9.3 allows remote attackers to inject arbitrary web script or HTML via crafted use of shortcode brackets in a text field, as demonstrated by a comment or a post...

CVE-2014-9031

Cross-site scripting XSS vulnerability in the wptexturize function in WordPress before 3.7.5, 3.8.x before 3.8.5, and 3.9.x before 3.9.3 allows remote attackers to inject arbitrary web script or HTML via crafted use of shortcode brackets in a text field, as demonstrated by a comment or a post...

CVE-2014-9031

Cross-site scripting XSS vulnerability in the wptexturize function in WordPress before 3.7.5, 3.8.x before 3.8.5, and 3.9.x before 3.9.3 allows remote attackers to inject arbitrary web script or HTML via crafted use of shortcode brackets in a text field, as demonstrated by a comment or a post...