Huawei HiSuite Arbitrary Code Execution Vulnerability

Huawei HiSuite is a set of cell phone assistant software for PC from Huawei, China. An arbitrary code execution vulnerability exists in Huawei HiSuite 4.0.3.301 and earlier versions, which originates from the program failing to properly load a DLL file. A local attacker can exploit this...

CVE-2016-4528

Buffer overflow in Advantech WebAccess before 8.120160519 allows local users to cause a denial of service via a crafted DLL file...

MS16-083: Security Update for Adobe Flash Player (3167685)

The remote Windows host is missing KB3167685. It is, therefore, affected by multiple vulnerabilities : - Multiple memory corruption issues exist that allow an unauthenticated, remote attacker to cause a denial of service condition or the execution of arbitrary code. CVE-2016-4122, CVE-2016-4123,...

Adobe Flash Player for Mac <= 21.0.0.242 Multiple Vulnerabilities (APSB16-18)

The version of Adobe Flash Player installed on the remote Mac OS X host is equal or prior to version 21.0.0.242. It is, therefore, affected by multiple vulnerabilities : - Multiple memory corruption issues exist that allow an unauthenticated, remote attacker to cause a denial of service condition...

Adobe Flash Player <= 21.0.0.242 Multiple Vulnerabilities (APSB16-18)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 21.0.0.242. It is, therefore, affected by multiple vulnerabilities : - Multiple memory corruption issues exist that allow an unauthenticated, remote attacker to cause a denial of service condition ...

Google Chrome < 50.0.2661.102 Multiple Vulnerabilities

Binary data 9371.pasl...

Flash Player < 11.2.202.621 / 18.0.0.352 / 21.0.0.242 Multiple Vulnerabilities (APSB16-15)

Binary data 9354.prm...

Google Go untrustworthy search path vulnerability

Google Go is a programming language optimized for programming applications on multiprocessor systems by Google. An untrusted search path vulnerability exists in Google Go versions prior to 1.5.4 and 1.6.1 prior to 1.6.x for Windows platforms. A local attacker can exploit this vulnerability to gai...

CVE-2016-1742

Untrusted search path vulnerability in the installer in Apple iTunes before 12.4 allows local users to gain privileges via a Trojan horse DLL in the current working directory...

Huawei 3G/LTE Local Privilege Vulnerability

Huawei 3G/LTE is a router product from Huawei, a Chinese company. A local elevation of privilege vulnerability exists in the 'Mobile Broadband HL Service' service of Huawei 3G/LTE, which originates from a folder corresponding to the service that allows users to add a malicious VERSION.dll file. T...

Adobe Flash Player <= 21.0.0.226 Multiple Vulnerabilities (APSB16-15)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to 21.0.0.226. It is, therefore, affected by multiple vulnerabilities : - Multiple type confusion errors exist that allow an attacker to execute arbitrary code. CVE-2016-1105, CVE-2016-4117 - Multiple...

Adobe AIR for Mac <= 21.0.0.198 Multiple Vulnerabilities (APSB16-15)

The version of Adobe AIR installed on the remote Mac OS X host is prior or equal to version 21.0.0.198. It is, therefore, affected by multiple vulnerabilities : - Multiple type confusion errors exist that allow an attacker to execute arbitrary code. CVE-2016-1105, CVE-2016-4117 - Multiple...

Google Chrome < 50.0.2661.102 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 50.0.2661.102. It is, therefore, affected by multiple vulnerabilities as referenced in the 201605stable-channel-update advisory. - The Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome...

Adobe Reader < 11.0.16 / 15.006.30172 / 15.016.20039 Multiple Vulnerabilities (APSB16-14) (Mac OS X)

The version of Adobe Reader installed on the remote Mac OS X host is prior to 11.0.16, 15.006.30172, or 15.016.20039. It is, therefore, affected by multiple vulnerabilities : - Multiple use-after-free errors exist that allow an attacker to execute arbitrary code. CVE-2016-1045, CVE-2016-1046,...

Adobe Acrobat < 11.0.16 / 15.006.30172 / 15.016.20039 Multiple Vulnerabilities (APSB16-14) (Mac OS X)

The version of Adobe Acrobat installed on the remote Mac OS X host is prior to 11.0.16 / 15.006.30172 / 15.016.20039. It is, therefore, affected by multiple vulnerabilities : - Multiple use-after-free errors exist that allow an attacker to execute arbitrary code. CVE-2016-1045, CVE-2016-1046,...

MS16-064: Security Update for Adobe Flash Player (3163207)

The remote Windows host is missing KB3163207. It is, therefore, affected by multiple vulnerabilities : - Multiple type confusion errors exist that allow an attacker to execute arbitrary code. CVE-2016-1105, CVE-2016-4117 - Multiple use-after-free errors exist that allow an attacker to execute...

Cisco WebEx Productivity Tools Search Path Handling Vulnerability

Cisco WebEx Productivity Tools is a set of tools for adding a user's application to a WebEx Meetings session. Cisco WebEx Productivity Tools fails to handle search paths correctly, allowing local attackers to build multiple malicious cryptsp.dll, dwmapi.dll, msimg32.dll, ntmarta.dll, propsys.dll,...

The vulnerability of the Internet Explorer browser, which allows a hacker to elevate their privileges

The vulnerability of the Internet Explorer browser is related to errors during the loading of DLLs. Exploiting this vulnerability can allow an attacker, operating locally, to increase their privileges through a specially created application...

Huawei UTPS Untrusted Search Path Vulnerability

Huawei UTPS is an application software from Huawei China that runs on a PC to manage data cards. An untrusted search path vulnerability exists in previous versions of Huawei UTPS UTPS-V200R003B015D15SP00C983, which can be exploited by a local attacker with the help of a Trojan horse DLL file to...

Microsoft Internet Explorer DLL Loading Remote Code Execution Vulnerability

Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A remote code execution vulnerability exists in Microsoft IE version 11, which originates from a program that fails to properly...