Adobe Flash Player suffers from unspecified null pointer reference vulnerability (CNVD-2015-00941)

Adobe Flash Player is a Flash file handling program. Adobe Flash Player suffers from an unspecified null pointer reference vulnerability that allows attackers to construct malicious SWF files that can be tricked into parsing by a user, which can execute arbitrary code in the application context...

Adobe Flash Player suffers from an unspecified null pointer reference vulnerability (CNVD-2015-00949)

Adobe Flash Player is a Flash file handling program. Adobe Flash Player suffers from an unspecified null pointer reference vulnerability that allows attackers to construct malicious SWF files that can be tricked into parsing by a user, which can execute arbitrary code in the application context...

Adobe Flash Player suffers from unspecified memory corruption vulnerability (CNVD-2015-00964)

Adobe Flash Player is a Flash file handling program. An unspecified memory corruption vulnerability exists in Adobe Flash Player that allows an attacker to construct a malicious SWF file and trick a user into parsing it, which can be used in an application context to execute arbitrary code...

Apple TV and iOS .dfont file memory corruption vulnerability

Apple iOS is the latest operating system for Apple's iPhone and iPod touch devices. Apple TV is Apple's way of allowing photos, videos and music from PCs and iPods to be transmitted wirelessly to a TV in high definition. A memory corruption vulnerability exists in the way Apple TV and iOS handle...

Apple TV and iOS XML Parser Buffer Overflow Vulnerability

Apple iOS is the latest operating system for Apple's iPhone and iPod touch devices. Apple TV is Apple's way of allowing photos, videos and music from PCs and iPods to be transmitted wirelessly to a TV in high definition. A buffer overflow vulnerability exists in the processing of XML files in App...

Apple TV and iOS Font File Handling Buffer Overflow Vulnerability

Apple iOS is the latest operating system for Apple's iPhone and iPod touch devices. Apple TV is Apple's way of allowing photos, videos and music from PCs and iPods to be transmitted wirelessly to a TV in high definition. Apple TV and iOS handle a buffer overflow vulnerability in font files,...

PHP 5.6.x < 5.6.5 Multiple Vulnerabilities

According to its banner, the version of PHP 5.6.x installed on the remote host is prior to 5.6.5. It is, therefore, affected by multiple vulnerabilities: - A double free vulnerability in the zendtshashgracefuldestroy function in zendtshash.c in the Zend Engine could allow a remote attacker to cau...

Unspecified Vulnerability in Oracle SOA Suite B2B Engine Subcomponent

Oracle SOA Suite is a comprehensive, hot-pluggable software suite for building, deploying, and managing service-oriented architectures SOA. A security vulnerability exists in the Oracle SOA Suite B2B Engine subcomponent that could be exploited by a local attacker to execute arbitrary code...

Updated coreutils packages fix CVE-2014-9471

Updated coreutils packages fix security vulnerability: Bertrand Jacquin and Fiedler Roman discovered date and touch incorrectly handled user-supplied input. An attacker could possibly use this to cause a denial of service or potentially execute code CVE-2014-9471...

SAP NetWeaver Dispatcher Buffer Overflow Vulnerability

SAP NetWeaver is an integrated application platform based on professional standards that significantly reduces the complexity of system integration. A buffer overflow vulnerability exists in SAP NetWeaver Dispatcher, which could be exploited by remote attackers to execute arbitrary code or to den...

AdaptCMS Arbitrary File Upload Vulnerability

AdaptCMS is a content management system. An arbitrary file upload vulnerability exists in AdaptCMS that could be exploited by an attacker to upload arbitrary files to an affected computer, which could result in the execution of arbitrary code within the context of the application...

ALLPlayer-5.8.1-(.m3u)-

Exploit Title: ALLPlayer 5.8.1 - .m3u Buffer Overflow SEH Date: Mar 1 2014 Exploit Author: Gabor Seljan Software Link: http://www.allplayer.org/download/allplayer Version: 5.8.1 use strict; use warnings; my $filename = "sploit.m3u"; my $junk1 = "\x41" x 301; Offset to SEH my $nSEH = "\x61\x50";...

CVE-2014-2217

CVE-2014-2217 describes an absolute path traversal in the RadAsyncUpload control of Telerik UI for ASP.NET AJAX, affecting versions before Q3 2012 SP2. An attacker can supply a full pathname in the UploadID metadata to write arbitrary files on the server and potentially execute arbitrary code. Th...

CVE-2014-6407

Docker before 1.3.2 allows remote attackers to write to arbitrary files and execute arbitrary code via a 1 symlink or 2 hard link attack in an image archive in a a pull or b load operation...

DEBIAN-CVE-2014-8097

The DBE extension in X.Org X Window System aka X11 or X X11R6.1 and X.Org Server aka xserver and xorg-server before 1.16.3 allows remote authenticated users to cause a denial of service out-of-bounds read or write or possibly execute arbitrary code via a crafted length or index value to the 1...

docker: symbolic and hardlink issues leading to privilege escalation

Docker before 1.3.2 allows remote attackers to write to arbitrary files and execute arbitrary code via a 1 symlink or 2 hard link attack in an image archive in a a pull or b load operation...

CVE-2014-9274

UnRTF allows remote attackers to cause a denial of service crash and possibly execute arbitrary code as demonstrated by a file containing the string "\cb-999999999"...

CVE-2014-3065

CVE-2014-3065: IBM Java SDK/JRE contains a vulnerability where the default configuration for the shared classes feature potentially allows arbitrary code execution via the shared classes cache by other local users. Affected IBM Java versions include IBM SDK/JAVA 2 Technology Edition (v5.0 SR16 FP...

CVE-2014-4452

WebKit, as used in Apple iOS before 8.1.1 and Apple TV before 7.0.2, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2014-4462...

CVE-2014-8949

The iMember360 plugin 3.8.012 through 3.9.001 for WordPress allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the i4wtrace parameter. NOTE: this can be leveraged with CVE-2014-8948 to allow remote attackers to execute code. NOTE: it is not clear...