CVE-2018-4920

Adobe Flash Player versions 28.0.0.161 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user...

CVE-2019-15894

An issue was discovered in Espressif ESP-IDF 2.x, 3.0.x through 3.0.9, 3.1.x through 3.1.6, 3.2.x through 3.2.3, and 3.3.x through 3.3.1. An attacker who uses fault injection to physically disrupt the ESP32 CPU can bypass the Secure Boot digest verification at startup, and boot unverified code fr...

Design/Logic Flaw

An issue was discovered in Espressif ESP-IDF 2.x, 3.0.x through 3.0.9, 3.1.x through 3.1.6, 3.2.x through 3.2.3, and 3.3.x through 3.3.1. An attacker who uses fault injection to physically disrupt the ESP32 CPU can bypass the Secure Boot digest verification at startup, and boot unverified code fr...

Using MixMode and Carbon Black to Spot a Watering Hole Attack

For those not familiar with watering hole attacks, they are attacks on a specific place—such as a restaurant—that many people visit. They generally involve malicious code being injected into an iframe on the company’s website. In the case of a restaurant, for example, the online menu would be a...

CVE-2019-15894

CVE-2019-15894 affects Espressif ESP-IDF 2.x, 3.0.x–3.0.9, 3.1.x–3.1.6, 3.2.x–3.2.3, and 3.3.x–3.3.1.** An attacker using fault injection to disrupt the ESP32 CPU can bypass the Secure Boot digest verification at startup and boot unverified code from flash. This attack does not disable Flash Encr...

CVE-2019-15894

An issue was discovered in Espressif ESP-IDF 2.x, 3.0.x through 3.0.9, 3.1.x through 3.1.6, 3.2.x through 3.2.3, and 3.3.x through 3.3.1. An attacker who uses fault injection to physically disrupt the ESP32 CPU can bypass the Secure Boot digest verification at startup, and boot unverified code fr...

PT-2019-14458

Name of the Vulnerable Software and Affected Versions Espressif ESP-IDF versions 2.x, 3.0.x through 3.0.9, 3.1.x through 3.1.6, 3.2.x through 3.2.3, and 3.3.x through 3.3.1 Description An issue allows an attacker to bypass the Secure Boot digest verification at startup using fault injection to...

The vulnerability of the solid utility function in the Astra Linux operating system, which allows a hacker to trigger a service failure.

The vulnerability of the solid utility function in the Astra Linux operating system is related to the incorrect display of information on unmounted flash drives. Exploiting this vulnerability can allow an attacker to cause a service failure...

Adobe Flash Player Information Disclosure Vulnerability (CNVD-2019-39594)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A security vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability to bypass the...

CVE-2019-8075

Adobe Flash Player version 32.0.0.192 and earlier versions have a Same Origin Policy Bypass vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user...

CVE-2019-8075

Adobe Flash Player version 32.0.0.192 and earlier versions have a Same Origin Policy Bypass vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user...

CVE-2019-8075

Adobe Flash Player version 32.0.0.192 and earlier versions have a Same Origin Policy Bypass vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user...

CVE-2019-8075

CVE-2019-8075 affects Google Chrome/Chromium (Flash component). Root cause: insufficient data validation in Flash leading to Same Origin Policy bypass and potential information disclosure. In Chrome/Chromium, fixes appeared in the 87.x series: Chrome 87.0.4280.66+ (and later) to address the vulne...

The vulnerability of the “Enable Adobe Flash protected mode” parameter in the Adobe Flash plugin for the Firefox ESR browser allows a hacker to bypass existing security restrictions.

The vulnerability of the “Enable Adobe Flash protected mode” parameter in the Adobe Flash plugin for the Firefox ESR browser is related to privilege management errors. Exploiting this vulnerability could allow a malicious actor to bypass existing security restrictions remotely...

CVE-2019-12205

SilverStripe through 4.3.3 has Flash Clipboard Reflected XSS...

CVE-2019-12205

SilverStripe through 4.3.3 has Flash Clipboard Reflected XSS...

Cross site scripting

SilverStripe through 4.3.3 has Flash Clipboard Reflected XSS...

CVE-2019-12205

SilverStripe through 4.3.3 has Flash Clipboard Reflected XSS...

CVE-2019-12205

SilverStripe CVE-2019-12205 is a Flash Clipboard Reflected XSS vulnerability affecting SilverStripe 4.3.3 and earlier. The issue stems from insufficient validation of client-side data, enabling reflected cross-site scripting. Remediation known from multiple advisories: upgrading to SilverStripe f...

Adobe Unscheduled Update Fixes Critical ColdFusion Flaws

Adobe has issued an unscheduled security update that fixes two critical flaws in its ColdFusion product. The critical vulnerabilities could enable an attacker to either execute arbitrary code or bypass access control on impacted systems. Overall, Adobe released three patches – one for an...