Adobe Fixes 81 Vulnerabilities in Acrobat, Reader, Flash

Adobe patched 81 vulnerabilities across Acrobat, Reader, and Flash on Tuesday, including a handful of critical bugs that if exploited, could allow an attacker to take control of a system. The lion’s share of vulnerabilities – 71 in total – exist in the company’s Acrobat and Reader platforms...

flash -- multiple vulnerabilities

Adobe reports: Adobe has released security updates for Adobe Flash Player for Windows, Macintosh, Linux and ChromeOS. These updates address critical vulnerabilities that could potentially allow an attacker to take control of the affected system. These updates resolve a type confusion vulnerabilit...

Apache Tomcat 8/7/6 (based on the RedHat distro)local mention the right vulnerability-vulnerability warning-the black bar safety net

I. vulnerability description Apache Tomcat on RedHat distributions local to mention the right vulnerability II. Background description Tomcat is by Apache Software Foundation subordinate's Jakarta a project development Servlet vessel, in accordance with Sun Microsystems to provide the technical...

GE Bently Nevada 3500/22M Security Bypass Vulnerability

The GE Bently Nevada 3500/22M is a vibration monitoring system. A security bypass vulnerability exists in the GE Bently Nevada 3500/22M. Allowing an attacker to perform unauthorized operations...

Adobe Flash Player for Mac <= 23.0.0.162 Multiple Vulnerabilities (APSB16-32)

The version of Adobe Flash Player installed on the remote Mac OS X host is equal or prior to version 23.0.0.162. It is, therefore, affected by multiple vulnerabilities : - A type confusion error exists that allows an unauthenticated, remote attacker to execute arbitrary code. CVE-2016-6992 -...

Microsoft Edge CVE-2016-3392 Security Bypass Vulnerability

Description Microsoft Edge is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks. Technologies Affected Microsoft Edge Recommendations Block external acces...

Adobe Flash Player <= 23.0.0.162 Multiple Vulnerabilities (APSB16-32)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 23.0.0.162. It is, therefore, affected by multiple vulnerabilities : - A type confusion error exists that allows an unauthenticated, remote attacker to execute arbitrary code. CVE-2016-6992 -...

KLA10884 Code execution vulnerability in Microsoft Office

An improper RTF handling was found in Microsoft Office. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed file. Original advisories CVE-2016-3263 CVE-2016-3209 CVE-2016-3262 CVE-2016-7182 CVE-2016-339...

Security feature bypass

Unspecified vulnerability in a Qualcomm component in Android before 2016-10-05 on Nexus 5X and 6P devices has unknown impact and attack vectors, aka internal bug 28823675...

shiro: Security constraint bypass

It was found that Apache Shiro uses a default cipher key for its "remember me" feature. An attacker could use this to devise a malicious request parameter and gain access to unauthorized content...

shiro: Security constraint bypass

It was found that Apache Shiro uses a default cipher key for its "remember me" feature. An attacker could use this to devise a malicious request parameter and gain access to unauthorized content...

Symantec Web Gateway Management Console Interface Command Injection

SUMMARY Symantec has released an update to address a Symantec Web Gateway SWG Management Console Interface command injection issue bypassing validation restrictions to add an unauthorized whitelist entry. AFFECTED PRODUCTS Symantec Web Gateway SWG --- CVE | Affected Versions | Remediation...

CVE-2016-7572

CVE-2016-7572 affects Drupal 8.x prior to 8.1.10, where the system.temporary route does not properly enforce the Export configuration permission, allowing remote authenticated users to bypass restrictions and read the full config export. Impact is sensitive information disclosure via an authentic...

Oracle MySQL 5.5.x < 5.5.49 X.509 Certificate Security Bypass

Binary data 9607.prm...

ZOHO ManageEngine ServiceDesk Plus Security Bypass Vulnerability

ZOHO ManageEngine ServiceDesk is the United States ZhuoHao ZOHO company's set of web-based help desk HelpDesk and asset management software. A security bypass vulnerability exists in ManageEngine ServiceDesk Plus 9.2 and prior versions, which can be exploited by an attacker to bypass security...

HP Network Automation Local Security Bypass Vulnerability

HP Network Automation is a suite of automated network configuration management tools from Hewlett-Packard HP. The tool automates configuration changes, software updates, compliance audits, and tracking and control of widely distributed, multi-vendor network devices. A local security bypass...

KLA10878 Denial of service vulnerability in Google Chrome

Multiple serious vulnerabilities have been found in Google Chrome before 53.0.2785.143. Malicious users can exploit these vulnerabilities to cause denial of service or possibly conduct other unknown impacts. Below is a complete list of vulnerabilities: 1. Use-after-free vulnerability in V8 can be...

Node.js Security Bypass Vulnerability

Joyent Node.js is the United States Joyent company's set of web applications built on top of the Google V8 JavaScript engine platform. The platform is primarily used for building highly scalable applications and writing code that can handle tens of thousands of simultaneous connections to a singl...

Huawei HiSuite Man-in-the-Middle Security Bypass Vulnerability

Huawei HiSuite is a set of cell phone assistant software for PC from Huawei, China. A man-in-the-middle security bypass vulnerability exists in Huawei HiSuite, which could be exploited by attackers to bypass security restrictions and perform unauthorized operations, or conduct man-in-the-middle...

Trend Micro Internet Security Security Bypass Vulnerability

Trend Micro Internet Security is a set of Trend Micro Trend Micro integrated with personal firewall, anti-virus, anti-spam and other features in one network security software. A security bypass vulnerability exists in versions 8 and 10 of Trend Micro Internet Security, which could be exploited by...