Adobe Flash - JXR Processing Double-Free

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=788 There is a heap overflow when loading the attacked JXR file in Adobe Flash. To reproduce, load the attached file using LoadImage.swf?img=12.atf. This issue can be a bit difficult to reproduce, as the crash occurs when the playe...

Palo Alto Networks PAN-OS 7.0.7 Multiple Vulnerabilities

The version of Palo Alto Networks PAN-OS running on the remote host is 7.0.7. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in the passive firewall where a VM-series ESXi configuration processes and forwards traffic. No other details are available. - An unspecified...

F5 BIG-IP - TCP vulnerability CVE-2015-8099

Under limited conditions, an invalid TCP segment can lead to a Denial of Service for the High-Speed Bridge HSB on the following platforms: 3900, 6900, 8900, 8950, 11000, 11050, PB100 or PB200. This issue is only exposed on virtual servers while Software SYN cookies are configured for use and...

F5 Networks BIG-IP : TCP vulnerability (K35358312)

Under limited conditions, an invalid TCP segment can lead to a Denial of Service for the High-Speed Bridge HSB on the following platforms: 3900, 6900, 8900, 8950, 11000, 11050, PB100 or PB200. This issue is only exposed on virtual servers while Software SYN cookies are configured for use and...

Cargo Plane Car Transporter - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Cargo Plane Car Transporter published at the 'play' market has multiple vulnerabilities...

RC-AirSim - RC Model Plane Sim - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application RC-AirSim - RC Model Plane Sim published at the 'play' market has multiple vulnerabilities...

Cargo Plane City Airport - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Cargo Plane City Airport published at the 'play' market has multiple vulnerabilities...

Airport Plane Rescue 911 - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Airport Plane Rescue 911 published at the 'play' market has multiple vulnerabilities...

X-Plane 10 Flight Simulator - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application X-Plane 10 Flight Simulator published at the 'play' market has multiple vulnerabilities...

Transporter Plane 3D - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Transporter Plane 3D published at the 'play' market has multiple vulnerabilities...

Stickman Plane - SQLite database found, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Stickman Plane published at the 'play' market has multiple vulnerabilities...

Plane Simulator 3D - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Plane Simulator 3D published at the 'play' market has multiple vulnerabilities...

Plane Finder Free - Dangerous filesystem permissions, GPL license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Plane Finder Free published at the 'play' market has multiple vulnerabilities...

SOL02201365 - SLOTH: TLS 1.2 handshake vulnerability CVE-2015-7575

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

Juniper Networks Junos OS Trio Chipset DoS Vulnerability

Junos OS with Trio Chipsets are prone to a DoS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; if...

CVE-2015-8236

Arista EOS before 4.11.12, 4.12 before 4.12.11, 4.13 before 4.13.14M, 4.14 before 4.14.5FX.5, and 4.15 before 4.15.0FX1.1 allows remote attackers to execute arbitrary code as root by leveraging management-plane access, aka Bug 138716...

Design/Logic Flaw

Arista EOS before 4.11.12, 4.12 before 4.12.11, 4.13 before 4.13.14M, 4.14 before 4.14.5FX.5, and 4.15 before 4.15.0FX1.1 allows remote attackers to execute arbitrary code as root by leveraging management-plane access, aka Bug 138716...

CVE-2015-8236

Arista EOS before 4.11.12, 4.12 before 4.12.11, 4.13 before 4.13.14M, 4.14 before 4.14.5FX.5, and 4.15 before 4.15.0FX1.1 allows remote attackers to execute arbitrary code as root by leveraging management-plane access, aka Bug 138716...

Security Advisory 0015

Security Advisory 0015 PDF Date: November 18th, 2015 Revision | Date | Changes ---|---|--- 1.0 | November 18th, 2015 | Public release 1.1 | November 18th, 2015 | Updated to include CVE number and bug ID Arista EOS Remote Privilege Escalation Vulnerability - CVE-2015-8236 This advisory is to...

Cisco IOS IPv6 Snooping DoS (cisco-sa-20150923-fhs)

The remote Cisco IOS device missing vendor-supplied security patches, and is configured for IPv6 snooping. It is, therefore, affected by the following vulnerabilities : - A flaw exists in the IPv6 Snooping feature due to missing Control Plane Protection CPPr protection mechanisms. An...