Moderate: Red Hat Security Advisory: flash-plugin security update

An updated Adobe Flash Player package that fixes two security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give...

PT-2014-3668

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 11.7.700.272 Adobe Flash Player versions 11.8.x through 12.0.x before 12.0.0.77 Adobe Flash Player version prior to 11.2.202.346 on Linux Description The issue allows remote attackers to bypass the Same...

CVE-2012-2899

Removed by vendor...

Mozilla Seamonkey Security Bypass Vulnerabilities - Oct 12 (Mac OS X)

The host is installed with Mozilla Seamonkey and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaseamonkeysecbypassvulnoct12macosx.nasl 6115 2017-05-12 09:03:25Z teissa $ Mozilla Seamonkey Security Bypass Vulnerabilities - Oct 12 Mac OS X Authors: Arun Kallavi...

Mozilla Thunderbird ESR Security Bypass Vulnerabilities - Oct 12 (Windows)

The host is installed with Mozilla Thunderbird ESR and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillathunderbirdesrsecbypassvulnoct12win.nasl 6074 2017-05-05 09:03:14Z teissa $ Mozilla Thunderbird ESR Security Bypass Vulnerabilities - Oct 12 Windows Authors: Arun...

PT-2013-3595

Name of the Vulnerable Software and Affected Versions WordPress versions prior to 3.5.2 Description The issue concerns an unrestrictive security.allowDomain setting in the default configuration of SWFUpload in WordPress, allowing remote attackers to bypass the Same Origin Policy and conduct...

Design/Logic Flaw

Google Chrome before 17.0.963.83 allows remote attackers to bypass the Same Origin Policy via vectors involving a "magic iframe."...

PT-2011-5027

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.60 Description The issue allows remote attackers to bypass the Same Origin Policy by leveraging access to a different domain name in the same top-level domain. This can be demonstrated by the .no or .uk domain, where...

Mozilla Products Multiple Vulnerabilities - Sep 11 (Windows)

The host is installed with Mozilla firefox/thunderbird/seamonkey and is prone to multiple unspecified vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaprdtsmultvulnsep11win01.nasl 7019 2017-08-29 11:51:27Z teissa $ Mozilla Products Multiple Vulnerabilities - Sep 11 Windows Authors: Madhu...

PT-2011-3628

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris Adobe Flash Player versions prior to 10.3.186.3 on Android Adobe AIR versions prior to 2.7.1 on Windows and Mac OS X Adobe AIR versions prior to 2.7.1.196...

CVE-2011-2332

Google V8, as used in Google Chrome before 12.0.742.91, allows remote attackers to bypass the Same Origin Policy via unspecified vectors...

CVE-2009-3264

The getSVGDocument method in Google Chrome before 3.0.195.21 omits an unspecified "access check," which allows remote web servers to bypass the Same Origin Policy and conduct cross-site scripting attacks via unknown vectors, related to a user's visit to a different web server that hosts an SVG...

openSUSE 10 Security Update : java-1_6_0-sun (java-1_6_0-sun-5132)

Sun Java was updated to 1.6.0u5 to fix following security vulnerabilities : - CVE-2008-1158: Unspecified vulnerability in the Virtual Machine for Sun Java Runtime Environment JRE and JDK 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.216 and earlier allows remote attackers...

Design/Logic Flaw

Unspecified vulnerability in the Java Plug-in for Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier; and SDK and JRE 1.4.216 and earlier, and 1.3.121 and earlier; allows remote attackers to bypass the same origin policy and "execute local applications" via unknown vectors...