CVE-2019-15894

An issue was discovered in Espressif ESP-IDF 2.x, 3.0.x through 3.0.9, 3.1.x through 3.1.6, 3.2.x through 3.2.3, and 3.3.x through 3.3.1. An attacker who uses fault injection to physically disrupt the ESP32 CPU can bypass the Secure Boot digest verification at startup, and boot unverified code fr...

CVE-2019-15894

CVE-2019-15894 affects Espressif ESP-IDF 2.x, 3.0.x–3.0.9, 3.1.x–3.1.6, 3.2.x–3.2.3, and 3.3.x–3.3.1.** An attacker using fault injection to disrupt the ESP32 CPU can bypass the Secure Boot digest verification at startup and boot unverified code from flash. This attack does not disable Flash Encr...

CVE-2019-15894: Improper Handling of Exceptional Conditions

An issue was discovered in Espressif ESP-IDF 2.x, 3.0.x through 3.0.9, 3.1.x through 3.1.6, 3.2.x through 3.2.3, and 3.3.x through 3.3.1. An attacker who uses fault injection to physically disrupt the ESP32 CPU can bypass the Secure Boot digest verification at startup, and boot unverified code fr...

PT-2019-14458

Name of the Vulnerable Software and Affected Versions Espressif ESP-IDF versions 2.x, 3.0.x through 3.0.9, 3.1.x through 3.1.6, 3.2.x through 3.2.3, and 3.3.x through 3.3.1 Description An issue allows an attacker to bypass the Secure Boot digest verification at startup using fault injection to...

Astra Linux DoS

The vulnerability of the solid utility function in the Astra Linux operating system is related to the incorrect display of information on unmounted flash drives. Exploiting this vulnerability can allow an attacker to cause a service failure...

Adobe Flash Player Information Disclosure Vulnerability (CNVD-2019-39594)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A security vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability to bypass the...

CVE-2019-8075

Adobe Flash Player version 32.0.0.192 and earlier versions have a Same Origin Policy Bypass vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user...

CVE-2019-8075

Adobe Flash Player version 32.0.0.192 and earlier versions have a Same Origin Policy Bypass vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user...

CVE-2019-8075

CVE-2019-8075 affects Google Chrome/Chromium (Flash component). Root cause: insufficient data validation in Flash leading to Same Origin Policy bypass and potential information disclosure. In Chrome/Chromium, fixes appeared in the 87.x series: Chrome 87.0.4280.66+ (and later) to address the vulne...

CVE-2019-8075

Adobe Flash Player version 32.0.0.192 and earlier versions have a Same Origin Policy Bypass vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user...

Adobe Flash Protected Mode Bypass

The vulnerability of the “Enable Adobe Flash protected mode” parameter in the Adobe Flash plugin for the Firefox ESR browser is related to privilege management errors. Exploiting this vulnerability could allow a malicious actor to bypass existing security restrictions remotely...

CVE-2019-8075: Undefined Security Weakness

Adobe Flash Player version 32.0.0.192 and earlier versions have a Same Origin Policy Bypass vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user...

CVE-2019-12205

SilverStripe through 4.3.3 has Flash Clipboard Reflected XSS...

CVE-2019-12205

SilverStripe through 4.3.3 has Flash Clipboard Reflected XSS...

Cross site scripting

SilverStripe through 4.3.3 has Flash Clipboard Reflected XSS...

CVE-2019-12205

SilverStripe through 4.3.3 has Flash Clipboard Reflected XSS...

CVE-2019-12205

SilverStripe CVE-2019-12205 is a Flash Clipboard Reflected XSS vulnerability affecting SilverStripe 4.3.3 and earlier. The issue stems from insufficient validation of client-side data, enabling reflected cross-site scripting. Remediation known from multiple advisories: upgrading to SilverStripe f...

PT-2019-12696

Name of the Vulnerable Software and Affected Versions SilverStripe versions 3.0.0 through 4.3.3 SilverStripe versions 4.3.4 silverstripe/framework versions prior to 4.3.5 silverstripe/framework version 4.4.4 and earlier, except 4.3.5 silverstripe/admin versions prior to 1.3.5 Description The issu...

CVE-2019-12205: Improper Neutralization of Input During Web Page Generation

SilverStripe through 4.3.3 has Flash Clipboard Reflected XSS...

Adobe Unscheduled Update Fixes Critical ColdFusion Flaws

Adobe has issued an unscheduled security update that fixes two critical flaws in its ColdFusion product. The critical vulnerabilities could enable an attacker to either execute arbitrary code or bypass access control on impacted systems. Overall, Adobe released three patches – one for an...