APSB16-34 Security update available for the Creative Cloud Desktop Application

Adobe has released a security update for the Creative Cloud Desktop Application for Windows. This update resolves an unquoted search path vulnerability in the Creative Cloud Desktop Application...

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in Flash Player and the Creative Cloud Desktop Application. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system. US-CERT encourages users and administrators to review Adobe...

Cisco Firepower Threat Management Console 6.0.1 - Local File Inclusion

Cisco Firepower Threat Management Console 6.0.1 - Local File Inclusion KL-001-2016-006 : Cisco Firepower Threat Management Console Local File Inclusion Title: Cisco Firepower Threat Management Console Local File Inclusion Advisory ID: KL-001-2016-006 Publication Date: 2016.10.05 Publication URL:...

Cisco Firepower Threat Management Console 6.0.1 - Hard-Coded MySQL Credentials

Cisco Firepower Threat Management Console 6.0.1 - Hard-Coded MySQL Credentials KL-001-2016-005 : Cisco Firepower Threat Management Console Hard-coded MySQL Credentials Title: Cisco Firepower Threat Management Console Hard-coded MySQL Credentials Advisory ID: KL-001-2016-005 Publication Date:...

search.creativecommons.org XSS vulnerability

Vulnerable URL: https://search.creativecommons.org/?query=%22/%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

Adobe Creative Cloud Desktop < 3.7.0.272 Multiple Vulnerabilities (APSB16-21)

The version of Adobe Creative Cloud Desktop installed on the remote Windows host is prior to 3.7.0.272. It is, therefore, affected by multiple vulnerabilities : - An untrusted search path vulnerability exists in the installer due to looking for specific files or libraries in the current working...

Arbitrary File Download Vulnerability in Creative Portal Application System

Hebei Xinhe is an IT company that can provide customers with a full range of solutions and technical services. An arbitrary file download vulnerability exists in the Creative Portal application. An attacker is allowed to download arbitrary files...

Hebei Xinhe Technology Co., Ltd. creative portal application system suffers from arbitrary file download vulnerability

The Creative Portal Application is a platform for website content publishing and management, and is a tool for building unit portal applications. The Creative Portal Application System of Hebei Xinhe Technology Co., Ltd. suffers from an arbitrary file download vulnerability. Allow attackers to...

CVE-2016-4158

Unquoted Windows search path vulnerability in Adobe Creative Cloud Desktop Application before 3.7.0.272 on Windows allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory...

CVE-2016-4157

Untrusted search path vulnerability in the installer in Adobe Creative Cloud Desktop Application before 3.7.0.272 on Windows allows local users to gain privileges via a Trojan horse resource in an unspecified directory...

CVE-2016-4157

Untrusted search path vulnerability in the installer in Adobe Creative Cloud Desktop Application before 3.7.0.272 on Windows allows local users to gain privileges via a Trojan horse resource in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in the installer in Adobe Creative Cloud Desktop Application before 3.7.0.272 on Windows allows local users to gain privileges via a Trojan horse resource in an unspecified directory...

Design/Logic Flaw

Unquoted Windows search path vulnerability in Adobe Creative Cloud Desktop Application before 3.7.0.272 on Windows allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory...

CVE-2016-4157

Untrusted search path vulnerability in the installer in Adobe Creative Cloud Desktop Application before 3.7.0.272 on Windows allows local users to gain privileges via a Trojan horse resource in an unspecified directory...

CVE-2016-4157

CVE-2016-4157 affects Adobe Creative Cloud Desktop Application for Windows prior to 3.7.0.272. The issue is an untrusted search path vulnerability in the installer , enabling local users to gain privileges via a Trojan horse resource in an unspecified directory. This CVE is part of a set describe...

CVE-2016-4158

Adobe Creative Cloud Desktop on Windows prior to 3.7.0.272 is affected by CVE-2016-4158 (unquoted Windows search path) allowing local privilege escalation via a Trojan horse executable in %SYSTEMDRIVE%. Related CVE-2016-4157 affects installer search paths. The issue is addressed by the APSB16-21 ...

CVE-2016-4157: Undefined Security Weakness

Untrusted search path vulnerability in the installer in Adobe Creative Cloud Desktop Application before 3.7.0.272 on Windows allows local users to gain privileges via a Trojan horse resource in an unspecified directory...

CVE-2016-4158: Undefined Security Weakness

Unquoted Windows search path vulnerability in Adobe Creative Cloud Desktop Application before 3.7.0.272 on Windows allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory...

PT-2016-5853

Name of the Vulnerable Software and Affected Versions Adobe Creative Cloud Desktop Application versions prior to 3.7.0.272 Description The issue is related to an untrusted search path vulnerability in the installer of the Adobe Creative Cloud Desktop Application. This vulnerability allows local...

PT-2016-5854

Name of the Vulnerable Software and Affected Versions Adobe Creative Cloud Desktop Application versions prior to 3.7.0.272 Description The issue allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory due to an unquoted Windows search path...