flashplugin: multiple issues

CVE-2016-1006 JIT spraying mitigation bypass These updates harden a mitigation against JIT spraying attacks that could be used to bypass memory layout randomization mitigations. - CVE-2016-1015 CVE-2016-1019 arbitrary code execution These updates resolve type confusion vulnerabilities that could...

CVE-2016-1030

Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to bypass intended access restrictions via unspecified vectors...

CVE-2016-1030

Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to bypass intended access restrictions via unspecified vectors...

Adobe Flash Player Security Bypass Vulnerability (CNVD-2016-02100)

Adobe Flash Player is a cross-platform, browser-based multimedia player product. A security bypass vulnerability exists in Adobe Flash Player, which can be exploited by remote attackers to construct malicious SWF content and trick applications into parsing it, which can bypass security restrictio...

Drupal 6.x < 6.36 OpenID Security Bypass

Binary data 9214.prm...

Drupal 7.x < 7.38 Multiple Vulnerabilities

Binary data 9217.prm...

Moodle 2.9.x < 2.9.3 Security Bypass

Binary data 9189.prm...

EMC Documentum D2 < 4.6 Insufficient ACL Remote Object Manipulation (ESA-2016-034)

The remote host is running a version EMC Documentum D2 that is prior to 4.6. It is, therefore, affected by a security bypass vulnerability due to a failure to set secure access control lists ACLs for D2 configuration objects. An authenticated, remote attacker can exploit this to modify or delete ...

Adobe Flash Player for Mac <= 21.0.0.197 Multiple Vulnerabilities (APSB16-10)

The version of Adobe Flash Player installed on the remote Mac OS X host is prior or equal to version 21.0.0.197. It is, therefore, affected by multiple vulnerabilities : - An Address Space Layout Randomization ASLR bypass vulnerability exists that allows an attacker to predict memory offsets in t...

Adobe Flash Player <= 21.0.0.197 Multiple Vulnerabilities (APSB16-10)

The version of Adobe Flash Player installed on the remote Windows host is prior or equal to version 21.0.0.197. It is, therefore, affected by multiple vulnerabilities : - An Address Space Layout Randomization ASLR bypass vulnerability exists that allows an attacker to predict memory offsets in th...

Security feature bypass

The chat feature in the Real-Time Collaboration RTC services 7.3 and 7.4 in SAP NetWeaver Java AS 7.1 through 7.5 allows remote attackers to obtain sensitive user information by visiting webdynpro/resources/sap.com/tcrtccoll.appl.rtcwdchat/Chat, pressing "Add users", and doing a search, aka SAP...

Totemomail v4.x & v5.x - Bypass & Persistent Vulnerability

Document Title: =============== Totemomail v4.x & v5.x - Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1769 Release Date: ============= 2016-04-07 Vulnerability Laboratory ID VL-ID: ====================================...

KLA11442 ACE vulnerability in PuTTY

Stack-based buffer overflow vulnerability was found in PuTTY. Malicious users can exploit this vulnerability remotely cause denial of service and execute arbitrary code. Original advisories PuTTY vulnerability vuln-pscp-sink-sscanf Related products PuTTY CVE list CVE-2016-2563 critical Solution...

Adobe Experience Manager Dispatcher Security Bypass Vulnerability

Adobe Experience Manager AEM is a set of content management solutions that can be used to build web sites, mobile applications and forms from Adobe.Dispatcher is one of the tools to keep AEM cached or load balanced. A security bypass vulnerability exists in AEM's Dispatcher. A remote attacker cou...

Foreman Bookmark Access Security Bypass Vulnerability

Foreman is a set of lifecycle management tools for use in physical and virtual servers. An error in Foreman's handling of bookmarks associated with the Administer - Bookmarks feature can be exploited by a remote attacker to bypass security restrictions and gain access to other users' restricted...

Microsoft Windows RPC Authentication Downgrade (MS16-047: CVE-2016-0128; CVE-2016-2118)

A security bypass vulnerability, also referred to as BadLock, exists in Microsoft Windows clients connecting to Samba Servers. The vulnerability is due to an authentication design weakness...

The vulnerability of the Android operating system allows a hacker to bypass security measures and obtain confidential information.

The vulnerability of the BnCrypto::onTransact function media/libmedia/ICrypto.cpp in the Android operating system is caused by a numerical overflow. Exploiting this vulnerability could allow a malicious actor to bypass security measures and obtain confidential information, leading to incorrect...

Cisco Firepower System Software Security Bypass Vulnerability

Cisco Firepower System Software is a next-generation firewall product NGFW from Cisco. A security bypass vulnerability exists in the malicious file detection and blocking feature of Cisco Firepower System Software. As the program fails to properly validate fields in the HTTP header. A remote...

Apple iOS LaunchServices XPC Services API Security Restriction Bypass Vulnerability

iOS is an operating system developed by Apple for mobile devices, and supported devices include iPhone, iPod touch, iPad, and Apple TV. In Apple iOS versions prior to 9.3, a security restriction bypass vulnerability exists in the XPC Services API in LaunchServices, which allows a remote attacker ...

jdk8-openjdk: sandbox escape

It was discovered that the security fix for CVE-2013-5838 was incomplete and still allowed remote attackers to escape the Java security sandbox mechanism. The root problem is that the Reflection API does not properly guarantee type safety when Method Handle objects were invoked across two differe...