23860 matches found
Debian DLA-980-1 : ming security update
It was found that ming, a library to parse and generate SWF Flash files, is susceptible to an integer overflow that would lead into out of bound memory writes via a maliciously crafted file. For Debian 7 'Wheezy', these problems have been fixed in version 1:0.4.4-1.1+deb7u3. We recommend that you...
CVE-2017-8083
CompuLab Intense PC and MintBox 2 devices with BIOS before 2017-05-21 do not use the CloseMnf protection mechanism for write protection of flash memory regions, which allows local users to install a firmware rootkit by leveraging administrative privileges...
CVE-2017-8083
CompuLab Intense PC and MintBox 2 devices with BIOS before 2017-05-21 do not use the CloseMnf protection mechanism for write protection of flash memory regions, which allows local users to install a firmware rootkit by leveraging administrative privileges...
CVE-2017-8083
CompuLab Intense PC and MintBox 2 devices with BIOS before 2017-05-21 do not use the CloseMnf protection mechanism for write protection of flash memory regions, which allows local users to install a firmware rootkit by leveraging administrative privileges...
The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code
The vulnerability of the Flash Player software is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Flash Player software allows a perpetrator to trigger a service failure or execute arbitrary code.
The vulnerability of the Flash Player software arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption remotely...
The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code
The vulnerability of the Flash Player software is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the FlashPlayer libraries in Adobe Flash Internet Explorer 10, Adobe Flash Internet Explorer 11, and Adobe Flash Microsoft Edge on the FlashPlayer software platform allows attackers to cause unpredictable effects.
The vulnerability of the Adobe Flash Internet Explorer 10, Adobe Flash Internet Explorer 11, and Adobe Flash Microsoft Edge software platforms’ Flash Player components is related to coding errors. Exploiting this vulnerability can allow an attacker to cause unpredictable effects from a remote...
The vulnerability of the Flash Player software allows a perpetrator to trigger a service failure or execute arbitrary code.
The vulnerability of the Flash Player software arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption remotely...
The vulnerability of the Flash Player software allows a perpetrator to trigger a service failure or execute arbitrary code.
The vulnerability of the Flash Player software arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption remotely...
53 Percent of Enterprise Flash Installs are Outdated
The number of outdated versions of Adobe Flash running on enterprise computers grew 10 percent year-over-year to 53 percent of endpoints, despite numerous devastating attacks targeting the maligned software and endless calls to deprecate it. Duo Security said in its 2017 Duo Trusted Access Report...
2xl.be XSS vulnerability
Vulnerable URL: http://www.2xl.be/modules/core/flash/player.swf?debug=alert%28%27XSSPO%20SED%27%29 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 20.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 21459112 VIP...
avisghana.com XSS vulnerability
Vulnerable URL: http://www.avisghana.com/flash/player.swf?debug=alert%28%27XSSPO%20SED%27%29 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 20.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6754517 VIP websit...
SQL Injection Vulnerability in Flash cms O_id Parameter
Flash Flash cms is Zibo Flash Network Technology Co., Ltd. developed a corporate website system. A SQL injection vulnerability exists in the Oid parameter of the Flash cms /member/memberwuliu.asp page. The vulnerability stems from the program's failure to filter user-submitted data. An attacker c...
Flash cms database insertion vulnerability
Flash Flash cms is a system developed by Zibo Flash Network Technology Co. Flash Flash cms database insertion vulnerability. Attackers can use this vulnerability to directly obtain server privileges...
Authentication Bypass Vulnerability in the Background of FLASH Website Management System of Unicom
CFCMS is a self-service website building platform with full Flash as its core. Authentication bypass vulnerability exists in the background of CFCMS. The vulnerability exists in /xmlEditor/chkuser.asp, which can be exploited by attackers to bypass the background login authentication and launch...
Storage-based Cross-site Scripting Vulnerability in Zibo Shining Network Technology Co. Ltd.'s Flash Website Building System
Flash CMS is a flash website system developed by Zibo Flash Network Technology Co. There is a stored cross-site scripting vulnerability in the flash CMS of Zibo Shining Network Technology Co. Attackers can use this vulnerability to insert malicious js code in the page, obtain user cookies and oth...
Shining Flash cms Frontend Arbitrary User Login Vulnerability
Flash Flash cms is a flash website system developed by Zibo Flash Network Technology Co. Flash cms has a front-end arbitrary user login vulnerability. The vulnerability stems from the program's failure to filter user-submitted data, an attacker can use the vulnerability to bypass authentication t...
Flash cms /wap has multiple SQL Injection Vulnerabilities
Flash Flash cms is a flash website system developed by Zibo Flash Network Technology Co. Flash cms has a SQL injection vulnerability. The vulnerability stems from the program's failure to filter user-submitted data, which can be exploited by attackers to obtain sensitive database information...
SQL Injection Vulnerability in Multiple Pages of Zibo Shining Network Technology Co.
Flash CMS is a flash website system developed by Zibo Flash Network Technology Co. There is a SQL injection vulnerability in the text.asp page and slideshowinfo.asp page of the flash CMS of Zibo Flash Network Technology Co. Allow attackers to exploit the vulnerability to obtain sensitive...