Lucene search
+L

23897 matches found

Veracode
Veracode
added 2018/11/16 7:13 a.m.36 views

Cross-Site Scripting (XSS)

jPlayer is vulnerable to cross-site scripting. A remote attacker is able to inject arbitrary Javascript into a victims browser via the jQuery and id parameters in the Flash SWF component. This CVE is different from CVE-2013-1942 and CVE-2013-2023...

4.3CVSS5.8AI score0.05494EPSS
SaveExploits4References10Affected Software2
Veracode
Veracode
added 2018/11/16 7:06 a.m.28 views

Cross-Site Scripting (XSS)

jPlayer is vulnerable to cross-site scripting. A remote attacker is able to inject arbitrary Javascript into a victim's browser via the jQuery and id parameters in the Flash SWF component. This CVE is different from CVE-2013-2022 and CVE-2013-2023...

4.3CVSS5.8AI score0.05494EPSS
SaveExploits4References10Affected Software2
Veracode
Veracode
added 2018/11/16 6:34 a.m.31 views

Same Origin Policy Bypass

Plupload is vulnerable to same origin policy bypass. Overly permissive Flash allows scripts from any domain to be run, allowing remote attackers to bypass the same origin policy via crafted swf content...

5CVSS6.1AI score0.03379EPSS
SaveExploits0References11Affected Software1
ThreatPost
ThreatPost
added 2018/11/15 10:53 p.m.18 views

tRat Emerges as New Pet for APT Group TA505

A new modular malware written in Delphi dubbed tRat has scurried into the spotlight, after making its debut in large spam campaigns this fall. The remote-access trojan has yet to show all of its cards to researchers, and seems to be in a testing phase, but the fact that well-known APT group TA505...

SaveExploits0References4
OSV
OSV
added 2018/11/15 10:04 p.m.8 views

MGASA-2018-0453 Updated flash-player-plugin packages fix security vulnerability

An important vulnerability in Adobe Flash Player 31.0.0.122 and earlier versions. Successful exploitation could lead to information disclosure. CVE-2018-15978...

7.5CVSS7.3AI score0.0743EPSS
SaveExploits0References3
Mageia
Mageia
added 2018/11/15 10:04 p.m.33 views

Updated flash-player-plugin packages fix security vulnerability

An important vulnerability in Adobe Flash Player 31.0.0.122 and earlier versions. Successful exploitation could lead to information disclosure. CVE-2018-15978...

7.5CVSS2.5AI score0.0743EPSS
SaveExploits0References2
CNVD
CNVD
added 2018/11/15 12:00 a.m.43 views

Adobe Flash Player Remote Information Disclosure Vulnerability

Adobe Flash Player is a cross-platform, browser-based multimedia player product. A remote information disclosure vulnerability exists in Adobe Flash Player, which allows remote attackers to exploit the vulnerability by submitting a special file request and tricking the user into parsing it, which...

7.5CVSS7.2AI score0.0743EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2018/11/15 12:00 a.m.30 views

RHEL 6 : flash-plugin (RHSA-2018:3618)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2018:3618 advisory. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update upgrades Flash Player to version...

7.5CVSS7.1AI score0.0743EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2018/11/14 7:40 p.m.438 views

Important: Red Hat Security Advisory: flash-plugin security update

An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

7.5CVSS6.8AI score0.0743EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2018/11/14 7:40 p.m.8 views

flash-plugin: Information Disclosure vulnerability (APSB18-39)

Flash Player versions 31.0.0.122 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure...

7.5CVSS5.8AI score0.0743EPSS
SaveExploits0References5
Krebs on Security
Krebs on Security
added 2018/11/14 1:25 p.m.93 views

Patch Tuesday, November 2018 Edition

Microsoft on Tuesday released 16 software updates to fix more than 60 security holes in various flavors of Windows and other Microsoft products. Adobe also has security patches available for Flash Player, Acrobat and Reader users. As per usual, most of the critical flaws -- those that can be...

6.8AI score0.03023EPSS
SaveExploits0
Lenovo
Lenovo
added 2018/11/14 2:28 a.m.379 views

Missing System x Flash Memory Write Protection Lock Bit - US

Lenovo Security Advisory: LEN-24477 Potential Impact: Denial of service Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2018-9085 Summary Description: A write protection lock bit was left unset after boot on an older generation of System x server, potentially allowing an...

4CVSS2.7AI score0.00664EPSS
SaveExploits0
Lenovo
Lenovo
added 2018/11/14 2:28 a.m.19 views

Missing System x Flash Memory Write Protection Lock Bit - Lenovo Support US

No description provided...

4.9CVSS5.1AI score0.00664EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2018/11/14 12:00 a.m.24 views

Adobe Flash Player Within Google Chrome Security Update (APSB18-39) - Mac OS X

Adobe Flash Player is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.5CVSS7.4AI score0.0743EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2018/11/14 12:00 a.m.22 views

Adobe Flash Player Security Update (APSB18-39) - Mac OS X

Adobe Flash Player is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.5CVSS7.4AI score0.0743EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2018/11/14 12:00 a.m.18 views

Adobe Flash Player Within Google Chrome Security Update (APSB18-39) - Linux

Adobe Flash Player is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.5CVSS7.4AI score0.0743EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2018/11/14 12:00 a.m.28 views

FreeBSD : Flash Player -- information disclosure (b69292e8-e798-11e8-ae07-6451062f0f7a)

Adobe reports : - This update resolves a out-of-bounds vulnerability that could lead to information disclosure CVE-2018-15978. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2021 Jacques Vidri...

7.5CVSS7AI score0.0743EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2018/11/14 12:00 a.m.19 views

Microsoft IE And Microsoft Edge Flash Player Information Disclosure Vulnerability (APSB18-39)

Adobe Flash Player within Microsoft Edge or Internet Explorer is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

7.5CVSS7.2AI score0.0743EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2018/11/14 12:00 a.m.24 views

Adobe Flash Player Security Update (APSB18-39) - Windows

Adobe Flash Player is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.5CVSS7.4AI score0.0743EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2018/11/14 12:00 a.m.18 views

Adobe Flash Player Security Updates (APSB18-39) - Linux

Adobe Flash Player is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.5CVSS7.4AI score0.0743EPSS
SaveExploits0References1
Rows per page
Query Builder