Adobe Flash Player Security Bypass Vulnerability (CNVD-2016-09025)

Adobe Flash Player is a cross-platform, browser-based multimedia player product. A security vulnerability exists in Adobe Flash Player that could be exploited by attackers to bypass security restrictions or launch further attacks...

Adobe Reader and Acrobat Security Bypass Vulnerability (CNVD-2016-09398)

Adobe Reader is a free PDF file reader; Acrobat is a PDF file editing and conversion tool; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDFs. A security bypass vulnerability exists in Adobe Reader and Acrobat that allows remote attackers to build malicious PDF files th...

SUSE-SU-2016:2512-1 Security update for flash-playerqemu

flash-player was updated to version 11.2.202.637 to fix the following issues bsc1004019: CVE-2016-6992: A type confusion vulnerability that could lead to code execution. CVE-2016-6981, CVE-2016-6987: use-after-free vulnerabilities that could lead to code execution CVE-2016-4286: Security bypass...

Cybozu Office Security Bypass Vulnerability

Cybozu Office is a Web-based, cross-platform collaboration solution from Cybozu. A security bypass vulnerability exists in Cybozu Office versions 9.0.0 through 10.4.0. An attacker can exploit the vulnerability to bypass security restrictions and perform unauthorized operations...

SPIP Security Bypass Vulnerability (CNVD-2016-09664)

SPIP is a free Web-based content publishing system. The system is primarily used for online collaboration. A security bypass vulnerability exists in SPIP versions 1.9.2-SPIP 3.0.7, which can be exploited by an attacker to bypass security restrictions...

Adobe Fixes 81 Vulnerabilities in Acrobat, Reader, Flash

Adobe patched 81 vulnerabilities across Acrobat, Reader, and Flash on Tuesday, including a handful of critical bugs that if exploited, could allow an attacker to take control of a system. The lion’s share of vulnerabilities – 71 in total – exist in the company’s Acrobat and Reader platforms...

Apache Tomcat 8/7/6 (based on the RedHat distro)local mention the right vulnerability-vulnerability warning-the black bar safety net

I. vulnerability description Apache Tomcat on RedHat distributions local to mention the right vulnerability II. Background description Tomcat is by Apache Software Foundation subordinate's Jakarta a project development Servlet vessel, in accordance with Sun Microsystems to provide the technical...

GE Bently Nevada 3500/22M Security Bypass Vulnerability

The GE Bently Nevada 3500/22M is a vibration monitoring system. A security bypass vulnerability exists in the GE Bently Nevada 3500/22M. Allowing an attacker to perform unauthorized operations...

Adobe Flash Player for Mac <= 23.0.0.162 Multiple Vulnerabilities (APSB16-32)

The version of Adobe Flash Player installed on the remote Mac OS X host is equal or prior to version 23.0.0.162. It is, therefore, affected by multiple vulnerabilities : - A type confusion error exists that allows an unauthenticated, remote attacker to execute arbitrary code. CVE-2016-6992 -...

flash -- multiple vulnerabilities

Adobe reports: Adobe has released security updates for Adobe Flash Player for Windows, Macintosh, Linux and ChromeOS. These updates address critical vulnerabilities that could potentially allow an attacker to take control of the affected system. These updates resolve a type confusion vulnerabilit...

Microsoft Edge CVE-2016-3392 Security Bypass Vulnerability

Description Microsoft Edge is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks. Technologies Affected Microsoft Edge Recommendations Block external acces...

Adobe Flash Player <= 23.0.0.162 Multiple Vulnerabilities (APSB16-32)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 23.0.0.162. It is, therefore, affected by multiple vulnerabilities : - A type confusion error exists that allows an unauthenticated, remote attacker to execute arbitrary code. CVE-2016-6992 -...

KLA10884 Code execution vulnerability in Microsoft Office

An improper RTF handling was found in Microsoft Office. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed file. Original advisories CVE-2016-3263 CVE-2016-3209 CVE-2016-3262 CVE-2016-7182 CVE-2016-339...

Security feature bypass

Unspecified vulnerability in a Qualcomm component in Android before 2016-10-05 on Nexus 5X and 6P devices has unknown impact and attack vectors, aka internal bug 28823675...

shiro: Security constraint bypass

It was found that Apache Shiro uses a default cipher key for its "remember me" feature. An attacker could use this to devise a malicious request parameter and gain access to unauthorized content...

shiro: Security constraint bypass

It was found that Apache Shiro uses a default cipher key for its "remember me" feature. An attacker could use this to devise a malicious request parameter and gain access to unauthorized content...

Symantec Web Gateway Management Console Interface Command Injection

SUMMARY Symantec has released an update to address a Symantec Web Gateway SWG Management Console Interface command injection issue bypassing validation restrictions to add an unauthorized whitelist entry. AFFECTED PRODUCTS Symantec Web Gateway SWG --- CVE | Affected Versions | Remediation...

CVE-2016-7572

CVE-2016-7572 affects Drupal 8.x prior to 8.1.10, where the system.temporary route does not properly enforce the Export configuration permission, allowing remote authenticated users to bypass restrictions and read the full config export. Impact is sensitive information disclosure via an authentic...

Oracle MySQL 5.5.x < 5.5.49 X.509 Certificate Security Bypass

Binary data 9607.prm...

ZOHO ManageEngine ServiceDesk Plus Security Bypass Vulnerability

ZOHO ManageEngine ServiceDesk is the United States ZhuoHao ZOHO company's set of web-based help desk HelpDesk and asset management software. A security bypass vulnerability exists in ManageEngine ServiceDesk Plus 9.2 and prior versions, which can be exploited by an attacker to bypass security...