flash-plugin: multiple code execution issues fixed in APSB16-10

Use-after-free vulnerability in the Transform object implementation in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via a flash.geom.Matrix callback, a different...

PT-2016-1666 · Adobe +3 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player affected versions not specified Description: The issue is related to the implementation of the Transform object in the Flash Player platform, specifically a use-after-free vulnerability involving memory usage after it has...

Matrix Game 3 - Customized SSL, External URLs, KeyStore usage vulnerabilities

HackApp vulnerability scanner discovered that application Matrix Game 3 published at the 'play' market has multiple vulnerabilities...

Matrix Game 1 - Customized SSL, External URLs, KeyStore usage vulnerabilities

HackApp vulnerability scanner discovered that application Matrix Game 1 published at the 'play' market has multiple vulnerabilities...

LED Dot Matrix HD Watch Face - Base64 encoded String, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application LED Dot Matrix HD Watch Face published at the 'play' market has multiple vulnerabilities...

SOL51518670 - Linux kernel vulnerability CVE-2015-2922

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

SOL09052213 - glibc vulnerability CVE-2015-8777

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

JasPer 'jas_matrix_create()' function remote integer overflow vulnerability

JasPer is an open source implementation of the JPEG-2000 codec . JasPer suffers from a remote integer overflow vulnerability that allows an attacker to build malicious files that can be exploited to trick an application into parsing, which can crash the application...

HackerOne: Distinguish EP+Private vs Private programs in HackerOne

Hi! I would like to provide the following matrix in order to distinguish between EP+Private vs Private programs in HackerOne, without the need to login. I am using two endpoints. These are: 1. https://hackerone.com/ENTITY/thanks/2012.json and 2. https://hackerone.com/ENTITY/thanks/2013.json If...

CVE-2016-2089

The jasmatrixclip function in jasseq.c in JasPer 1.900.1 allows remote attackers to cause a denial of service invalid read and application crash via a crafted JPEG 2000 image...

[SECURITY] Fedora 21 Update: metis-5.1.0-7.fc21

METIS is a set of serial programs for partitioning graphs, partitioning finite element meshes, and producing fill reducing orderings for sparse matrices. The algorithms implemented in METIS are based on the multilevel recursive-bisection, multilevel k-way, and multi-constraint partitioning scheme...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure.

The vulnerability of the SkMatrix::invertNonIdentity function in the Skia component of Google Chrome’s browser involves the use of memory after it is freed. Exploiting this vulnerability could allow an attacker, operating remotely, to cause a service failure by modifying elements of the matrix,...

HP Virtual Connect Enterprise Manager / HP Matrix Operating Environment multiple security vulnerabilities

Information disclosure...

[security bulletin] HPSBMU03409 rev.1 - HP Matrix Operating Environment, Multiple Vulnerabilities

Note: the current version of the following document is available here: https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04774019 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04774019 Version: 1 HPSBMU03409 rev.1 - HP Matrix Operating Environment, Multiple...

Google Chrome decompose() denial of service vulnerability

Google Chrome is a WEB-based browser. The decompose function in platform/transforms/TransformationMatrix.cpp in Google Chrome Blink does not validate that the matrix inversion was successful, allowing remote attackers to construct malicious WEB pages and trick users into parsing them, which can...

Google Chrome Skia Memory Misreference Vulnerability

Google Chrome is a WEB-based browser. A memory misreference vulnerability in the SkMatrix::invertNonIdentity function in core/SkMatrix.cpp in Google Chrome Skia allows remote attackers to construct a malicious WEB page that can be tricked into being parsed by the user, which can crash the...

UBUNTU-CVE-2015-6582

The decompose function in platform/transforms/TransformationMatrix.cpp in Blink, as used in Google Chrome before 45.0.2454.85, does not verify that a matrix inversion succeeded, which allows remote attackers to cause a denial of service uninitialized memory access and application crash or possibl...

CVE-2015-1294

Removed by vendor...

HP Virtual Connect Enterprise Manager Information Disclosure Vulnerability (CNVD-2015-05742)

HP VCEM allows centralized management of network connectivity and load distribution for HP BladeSystem servers, etc. A security vulnerability exists in HP Matrix Operating Environment versions prior to 7.5.0 and other products prior to HP VCEM SDK 7.5.0. This vulnerability can be exploited by an...

HP Virtual Connect Enterprise Manager Information Disclosure Vulnerability

HP VCEM allows centralized management of network connectivity and load distribution for HP BladeSystem servers, etc. A security vulnerability exists in HP Matrix Operating Environment versions prior to 7.5.0 and other products prior to HP VCEM SDK 7.5.0. It could be exploited by an authenticated...