CVE-2014-0548: Undefined Security Weakness

Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow...

PT-2014-1346

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 13.0.0.244 and earlier, 14.x, 15.x before 15.0.0.152 Adobe AIR versions 15.0.0.249 and earlier on Windows and OS X, 15.0.0.252 and earlier on Android Adobe AIR SDK version 15.0.0.249 and earlier Adobe AIR SDK &...

PT-2014-1358

Name of the Vulnerable Software and Affected Versions Adobe Flash Player affected versions not specified Adobe AIR affected versions not specified Adobe Pepper Flash for Google Chrome affected versions not specified Adobe AIR SDK affected versions not specified Adobe AIR SDK & Compiler affected...

PT-2014-1364

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 13.0.0.244 Adobe Flash Player versions 14.x Adobe Flash Player versions 15.x prior to 15.0.0.152 Adobe AIR versions prior to 15.0.0.249 on Windows and OS X Adobe AIR versions prior to 15.0.0.252 on Android...

PT-2014-1354

Name of the Vulnerable Software and Affected Versions Adobe Flash Player affected versions not specified Adobe AIR affected versions not specified Adobe Pepper Flash for Google Chrome affected versions not specified Adobe AIR SDK affected versions not specified Adobe AIR SDK & Compiler affected...

PT-2014-1357

Name of the Vulnerable Software and Affected Versions Adobe Flash Player affected versions not specified Adobe AIR affected versions not specified Adobe AIR SDK affected versions not specified Adobe AIR SDK & Compiler affected versions not specified Adobe Pepper Flash for Google Chrome affected...

PT-2014-1356

Name of the Vulnerable Software and Affected Versions Adobe AIR affected versions not specified Adobe Flash Player affected versions not specified Adobe Pepper Flash for Google Chrome affected versions not specified Adobe AIR SDK affected versions not specified Adobe AIR SDK & Compiler affected...

ManageEngine Desktop Central StatusUpdate Arbitrary File Upload

This module exploits an arbitrary file upload vulnerability in ManageEngine DesktopCentral v7 to v9 build 90054 including the MSP versions. A malicious user can upload a JSP file into the web root without authentication, leading to arbitrary code execution as SYSTEM. Some early builds of version ...

ManageEngine Password Manager MetadataServlet.dat SQL Injection Exploit

This Metasploit module exploits an unauthenticated blind SQL injection in LinkViewFetchServlet, which is exposed in ManageEngine Desktop Central v7 build 70200 to v9 build 90033 and Password Manager Pro v6 build 6500 to v7 build 7002 including the MSP versions. The SQL injection can be used to...

openSUSE Security Update : samba (openSUSE-SU-2014:1040-1)

"This samba update fixes the following security and non security issues : - Fix winbind service parameter usage; bnc890005. - lib/param: change the default for 'winbind expand groups' to '0'; bnc890008. - Update to 4.1.11. + A malicious browser can send packets that may overwrite the heap of the...

Fake AV Defru Puts New Spin on Rogue AV

Rogue antivirus was once the scourge of the Internet, and while this sort of malware is not entirely extinct, it’s fallen out of favor among criminals as users have become more aware and security products have gotten better at blocking the threat. Image via TechNet However, Daniel Chipiristeanu, ...

CVE-2014-5333

Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly...

CVE-2014-5333: Cross-Site Request Forgery (CSRF)

Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly...

PT-2014-1373

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 13.0.0.241 and 14.x prior to 14.0.0.176 on Windows and OS X and prior to 11.2.202.400 on Linux Adobe AIR versions prior to 14.0.0.178 on Windows and OS X and prior to 14.0.0.179 on Android Adobe AIR SDK...

CVE-2014-0538

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler...

Design/Logic Flaw

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler...

CVE-2014-0538

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler...

CVE-2014-0538

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler...

CVE-2014-0541

Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 allow attackers t...

CVE-2014-0542

Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly...