12956 matches found
flash -- multiple vulnerabilities
Adobe reports: These updates resolve heap buffer overflow vulnerabilities that could lead to code execution CVE-2015-8438, CVE-2015-8446. These updates resolve memory corruption vulnerabilities that could lead to code execution CVE-2015-8444, CVE-2015-8443, CVE-2015-8417, CVE-2015-8416,...
KLA10717 Multiple vulnerabilities in Microsoft Silverlight
Multiple serious vulnerabilities have been found in Microsoft Silverlight. Malicious users can exploit these vulnerabilities to execute arbitrary code or bypass security restrictions. Below is a complete list of vulnerabilities 1. Improper requests handling can be exploited remotely via a special...
Microsoft Internet Explorer XSS Filter CVE-2015-6164 Security Bypass Vulnerability
Description Microsoft Internet Explorer is prone to a security-bypass vulnerability that affects the XSS Filter. An attacker can exploit this issue by tricking an unsuspecting victim into viewing a page containing malicious content. An attacker can exploit this issue to execute arbitrary script...
Adobe AIR for Mac <= 19.0.0.241 Multiple Vulnerabilities (APSB15-32)
The version of Adobe AIR installed on the remote Mac OS X host is equal or prior to version 19.0.0.241. It is, therefore, affected by multiple vulnerabilities : - Multiple heap buffer overflow conditions exist that allow an attacker to execute arbitrary code. CVE-2015-8438, CVE-2015-8446 - Multip...
Adobe Flash Player for Mac <= 19.0.0.245 Multiple Vulnerabilities (APSB15-32)
The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 19.0.0.245. It is, therefore, affected by multiple vulnerabilities : - Multiple heap buffer overflow conditions exist that allow an attacker to execute arbitrary code. CVE-2015-8438, CVE-2015-8446 ...
Google Chrome < 47.0.2526.80 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 47.0.2526.80. It is, therefore, affected by multiple vulnerabilities : - A type confusion error exists related to extensions that allows an attacker to have an unspecified impact. CVE-2015-6788 - A use-after-free error...
Apache Traffic Server 5.3.x < 5.3.1 'url_sig' Plugin Multiple Vulnerabilities
According to its banner, the version of Apache Traffic Server running on the remote host is 5.3.x prior to 5.3.1. It is, therefore, affected by multiple vulnerabilities related to the 'urlsig' plugin : - An out-of-bounds access error exists that is triggered when handling a specially crafted HTTP...
Adobe Flash Player <= 19.0.0.245 Multiple Vulnerabilities (APSB15-32)
The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 19.0.0.245. It is, therefore, affected by multiple vulnerabilities : - Multiple heap buffer overflow conditions exist that allow an attacker to execute arbitrary code. CVE-2015-8438, CVE-2015-8446 ...
MS KB3119147: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer and Microsoft Edge
The remote Windows host is missing KB3119147. It is, therefore, affected by multiple vulnerabilities : - Multiple heap buffer overflow conditions exist that allow an attacker to execute arbitrary code. CVE-2015-8438, CVE-2015-8446 - Multiple memory corruption issues exist that allow an attacker t...
Microsoft Internet Explorer XSS Filter CVE-2015-6144 Security Bypass Vulnerability
Description Microsoft Internet Explorer is prone to a security-bypass vulnerability that affects the XSS Filter. An attacker can exploit this issue by tricking an unsuspecting victim into viewing a page containing malicious content. An attacker can exploit this issue to execute arbitrary script...
KLA10711 Multiple vulnerabilities in Adobe Flash Player
Multiple serious vulnerabilities have been found in Adobe products. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions or execute arbitrary code. Below is a complete list of vulnerabilities 1. An unknown vulnerability can be exploited remote...
Microsoft Edge XSS Filter CVE-2015-6176 Security Bypass Vulnerability
Description Microsoft Edge is prone to a security-bypass vulnerability that affects the XSS Filter. An attacker can exploit this issue by tricking an unsuspecting victim into viewing a page containing malicious content. An attacker can exploit this issue to execute arbitrary script code in the...
KLA10712 Multiple vulnerabilities in Google Chrome
Multiple serious vulnerabilities have been found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, inject arbitrary code or execute arbitrary code. Below is a complete list of vulnerabilities 1. Improper objects handling ...
Microsoft Internet Explorer and Edge CVE-2015-6161 ASLR Security Bypass Vulnerability
Description Microsoft Internet Explorer and Edge are prone to a security-bypass vulnerability. An attacker can leverage this issue to bypass certain security restrictions and execute arbitrary code by exploiting another vulnerability in the application. The following products are vulnerable:...
Adobe AIR <= 19.0.0.241 Multiple Vulnerabilities (APSB15-32)
The version of Adobe AIR installed on the remote Windows host is equal or prior to version 19.0.0.241. It is, therefore, affected by multiple vulnerabilities : - Multiple heap buffer overflow conditions exist that allow an attacker to execute arbitrary code. CVE-2015-8438, CVE-2015-8446 - Multipl...
Google Chrome < 47.0.2526.80 Multiple Vulnerabilities (Mac OS X)
The version of Google Chrome installed on the remote Mac OS X host is prior to 47.0.2526.80. It is, therefore, affected by multiple vulnerabilities : - A type confusion error exists related to extensions that allows an attacker to have an unspecified impact. CVE-2015-6788 - A use-after-free error...
OpenMRS 2.3 (1.11.4) Expression Language Injection Vulnerability
Summary OpenMRS is an application which enables design of a customized medical records system with no programming knowledge although medical and systems analysis knowledge is required. It is a common framework upon which medical informatics efforts in developing countries can be built. Descriptio...
Design/Logic Flaw
The Cisco WebEx Meetings application before 8.5.1 for Android improperly initializes custom application permissions, which allows attackers to bypass intended access restrictions via a crafted application, aka Bug ID CSCuw86442...
Red Hat JBoss Portal Security Bypass Vulnerability
Red Hat JBoss Portal is an open source and standards-compliant portal platform from Red Hat Red Hat. The platform can build , layout of a portal Web interface for publishing , managing content and customizing the user experience. A security vulnerability exists in the Red Hat JBoss Portal 6.x...
Cisco ASR 1000 IOS XE安全绕过漏洞
漏洞详情： CVE ID CVE-2015-6383 漏洞描述 Cisco IOS XE on ASR 1000是美国思科（Cisco）公司的一套运行于ASR 1000系列路由器设备中的操作系统。 Cisco ASR 1000设备上的IOS XE 15.43S版本中存在安全漏洞，由于程序未能正确加载软件程序包。本地攻击者可通过使用命令行输入特制的文件名，利用该漏洞绕过许可限制，获取root权限。 参考链接 https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-6383...