PT-2016-1490 · Adobe +3 · Flash Player +5

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player affected versions not specified Adobe Flash Player ESR affected versions not specified Adobe Integrated Runtime affected versions not specified Description: The issue is related to a use-after-free error, which can be...

PT-2016-1484 · Adobe +3 · Flash Player +5

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player affected versions not specified Adobe Flash Player ESR affected versions not specified Adobe Integrated Runtime affected versions not specified Description: The issue is related to the use of memory after it has been freed,...

Mozilla: Displayed page address can be overridden (MFSA 2016-21)

browser/base/content/browser.js in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to spoof the address bar via a javascript: URL...

graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)

Heap-based buffer overflow in the graphite2::vm::Machine::Code::Code function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Graphite...

Vulnerabilities in the Firefox and Firefox ESR browsers, which allow a hacker to trigger a service failure or execute arbitrary code.

The multiple vulnerabilities in the Firefox and Firefox ESR browsers are caused by buffer overflows. Exploitation of these vulnerabilities can allow a remote attacker to cause service interruptions memory corruption, application termination, or execute arbitrary code...

USN-2909-2: Linux kernel (Utopic HWE) regression

USN-2909-1 fixed vulnerabilities in the Ubuntu 14.10 Linux kernel backported to Ubuntu 14.04 LTS. An incorrect locking fix caused a regression that broke graphics displays for Ubuntu 14.04 LTS guests running the Ubuntu 14.10 backport kernel within VMWare virtual machines. This update fixes the...

Mozilla Firefox and Firefox ESR Graphite 2 Code.cpp File Denial of Service Vulnerability

Mozilla FirefoxFirefox is an open source web browser; Firefox ESR is an extended support version of Firefox.Graphite is a set of enterprise-class open source system monitoring tools written in Python, using the Django framework , it is through a third-party tools or plug-ins for data collection ,...

Mozilla Firefox and Firefox ESR Graphite 2 Arbitrary Code Execution Vulnerability

Mozilla FirefoxFirefox is an open source web browser; Firefox ESR is an extended support version of Firefox.Graphite is a set of enterprise-class open source system monitoring tools written in Python, using the Django framework , it is through a third-party tools or plug-ins for data collection ,...

SAP HANA 1.00.095 - hdbindexserver Memory Corruption

SAP HANA 1.00.095 - hdbindexserver Memory Corruption ERPSCAN-15-024 SAP HANA hdbindexserver - Memory corruption Application: SAP HANA Versions Affected: SAP HANA 1.00.095 Vendor URL: http://SAP.com Bugs: Memory corruption, RCE Reported: 17.07.2015 Vendor response: 18.07.2015 Date of Public...

Phabricator: Extended policy checks are buggy

Mongoose. This issue is in the class PhabricatorPolicyFilter, lines 324, 338 and 339. The code refers to the index $key a leftover from a previous foreach loop where it should refer to $extendedkey. This will lead to all policy checks being skipped after $extendedobjects$key is filtered out. I'm...

Multiple Mozilla Products Security Bypass Vulnerabilities

Mozilla Firefox, Firefox ESR, and Network Security Services are all developed by the Mozilla Foundation in the U.S. Firefox is an open-source web browser; Firefox ESR is an extended support version of Firefox.Network Security Services NSS is a library of functions Network Security Services librar...

flash-plugin: multiple code execution issues fixed in APSB16-01

Use after free vulnerability in Adobe Flash Player Desktop Runtime before 20.0.0.267, Adobe Flash Player Extended Support Release before 18.0.0.324, Adobe Flash Player for Google Chrome before 20.0.0.267, Adobe Flash Player for Microsoft Edge and Internet Explorer 11 before 20.0.0.267, Adobe Flas...

PT-2016-3141 · Adobe +3 · Air Sdk & Compiler +14

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player Desktop Runtime versions prior to 20.0.0.267 Adobe Flash Player Extended Support Release versions prior to 18.0.0.324 Adobe Flash Player for Google Chrome versions prior to 20.0.0.267 Adobe Flash Player for Microsoft Edge a...

Vulnerabilities in the Firefox and Firefox ESR browsers, which allow a hacker to trigger a service failure or execute arbitrary code.

The multiple vulnerabilities in the Firefox and Firefox ESR browsers are caused by buffer overflows. Exploitation of these vulnerabilities can allow a malicious actor to cause a service failure memory corruption or execute arbitrary code...

Mozilla Firefox integer overflow vulnerability (CNVD-2015-08330)

Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. An integer overflow vulnerability exists in the...

Mozilla Firefox Memory Misreference Vulnerability (CNVD-2015-08331)

Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A memory misreference vulnerability exists in Mozilla Firefox versions prior to 43.0 and Firefox...

Mozilla: Miscellaneous memory safety hazards (rv:38.5) (MFSA 2015-134)

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unknown vectors...

Siemens SIMATIC Communication Processor Vulnerability (Update C)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SIMATIC Communication Processor Vulnerability: Authentication Bypass Issues 2. UPDATE INFORMATION This updated advisory is a follow-up to the advisory update titled ICSA-15-335-03...

The vulnerability of the SAP HANA database management system allows a hacker to execute arbitrary code.

The vulnerability of the Extended Application Services component of the SAP HANA database management system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code during the authentication process on the HTTP server...

CVE-2015-5242

OpenStack Swift-on-File aka Swiftonfile does not properly restrict use of the pickle Python module when loading metadata, which allows remote authenticated users to execute arbitrary code via a crafted extended attribute xattrs...