377 matches found
The vulnerability of the Windows operating system, which allows a hacker to increase their privileges
The vulnerability of the Windows operating system’s virtual hard disk driver stems from an improper restriction on access to files. Exploiting this vulnerability allows a local attacker to enhance their privileges through a specially created application...
Nagios 4.2.2 - Privilege Escalation Exploit
Exploit for linux platform in category local exploits Affected Product: Nagios 4 Vulnerability Type: root privilege escalation Fixed in Version: N/A Vendor Website: https://www.nagios.com/ Software Link: : https://sourceforge.net/projects/nagios/files/latest/download?source=directory-featured...
Cisco WebEx Meetings Player Arbitrary Code Execution Vulnerability - Windows
Cisco WebEx Meetings Player is prone to an arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
PHP < 5.6.18, 7.x < 7.0.3 DoS Vulnerability (Jul 2016) - Linux
PHP is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if description...
KLA10814 Privilege escalation vulnerability in VMware Player and Workstation
An improper file access was found in VMware products. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally. Original advisories VMware advisory Related products VMware-Workstation VMware-Player CVE list CVE-2016-2077 critical Solution...
Google Chrome < 50.0.2661.75 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 50.0.2661.75. It is, therefore, affected by multiple vulnerabilities as referenced in the 201604stable-channel-update13 advisory. - Multiple unspecified vulnerabilities in Google Chrome before 50.0.2661.75 allow attacke...
Microsoft Office Word Viewer Remote Code Execution Vulnerabilities (3134226)
This host is missing a critical security update according to Microsoft Bulletin MS16-015. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Dream CMS 2.3.0 - Cross-Site Request Forgery (Add Extension) / Arbitrary File Upload / PHP Code Execution
Dream CMS 2.3.0 CSRF Add Extension And File Upload PHP Code Execution !-- 1. Add PHP allow...
Dream CMS 2.3.0 - Cross-Site Request Forgery (Add Extension) Arbitrary File Upload PHP Code Execution
Dream CMS 2.3.0 - Cross-Site Request Forgery Add Extension Arbitrary File Upload PHP Code Execution Dream CMS 2...
The vulnerability of the Flash Player software allows a perpetrator to trigger a service failure or execute arbitrary code.
The vulnerability of the Flash Player software exists due to improper checking of files. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code...
The vulnerability of the Adobe AIR software platform allows a perpetrator to trigger a service failure or execute arbitrary code.
The vulnerability of the Adobe AIR software platform exists due to improper file validation. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code...
Adobe Flash Player Multiple Vulnerabilities-01 (Jan 2015) - Linux
Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...
flashplayer to version 11.2.202.429 (important)
Following issues was resolved in this update: an improper file validation issue CVE-2015-0301, an information disclosure vulnerability that could be exploited to capture keystrokes on the affected system CVE-2015-0302, memory corruption vulnerabilities that could lead to code execution...
Updated flash-player-plugin packages fix security vulnerabilities
Adobe Flash Player 11.2.202.429 contains fixes to critical security vulnerabilities found in earlier versions that could potentially allow an attacker to take control of the affected system. This update resolves an improper file validation issue CVE-2015-0301. This update resolves an information...
UBUNTU-CVE-2015-0301
Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 do n...
CVE-2015-0301
Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 do n...
Adobe AIR <= 15.0.0.356 Multiple Vulnerabilities (APSB15-01)
According to its version, the Adobe AIR installed on the remote Windows host is equal or prior to 15.0.0.356. It is, therefore, affected by the following vulnerabilities : - An unspecified improper file validation issue. CVE-2015-0301 - An unspecified information disclosure vulnerability, which c...
Google Chrome < 39.0.2171.99 Multiple Vulnerabilities (Mac OS X)
The version of Google Chrome installed on the remote Mac OS X host is a version prior to 39.0.2171.99. It is, therefore, affected by the following vulnerabilities : - An unspecified improper file validation issue. CVE-2015-0301 - An unspecified information disclosure vulnerability, which can be...
MS KB3024663: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer
The remote host is missing KB3024663. It is, therefore, affected by the following vulnerabilities : - An unspecified improper file validation issue. CVE-2015-0301 - An unspecified information disclosure vulnerability, which could be exploited to capture keystrokes. CVE-2015-0302 - Multiple memory...
Adobe Flash Player Improper File Validation (APSB15-01: CVE-2015-0301)
An improper file validation issue has been reported in Adobe Flash Player. The vulnerability occurs when the Flash Broker application allows malicious dlls or exes files to be written to one of the whitelisted directories. such a malicious dll dropped in these directories could be used to deliver...