Mozilla Firefox Security Bypass Vulnerability (CNVD-2016-12692)

Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A security vulnerability exists in Mozilla Firefox versions prior to 50.1 and Firefox ESR version...

CVE-2016-7890

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have security bypass vulnerability in the implementation of the same origin policy...

CVE-2016-7890

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have security bypass vulnerability in the implementation of the same origin policy...

Security feature bypass

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have security bypass vulnerability in the implementation of the same origin policy...

CVE-2016-7890

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have security bypass vulnerability in the implementation of the same origin policy...

CVE-2016-7890

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have security bypass vulnerability in the implementation of the same origin policy...

SAP GUI for Windows - Remote Code Execution + bypass security policy

Application: SAP GUI Versions Affected: SAP GUI 7.2-7.5 Vendor URL: SAP Bugs: Remote Code Execution Reported: 15.12.2016 Vendor response: 16.12.2016 Date of Public Advisory: 14.03.2017 Reference: SAP Security Note 2407616 Authors: Dmitry Yudin ERPScan aka @ret5et, Vahagn Vardanyan ERPScan, Dmitry...

Mozilla Firefox < 50.1 Multiple Vulnerabilities (macOS)

The version of Mozilla Firefox installed on the remote macOS or Mac OS X host is prior to 50.1. It is, therefore, affected by the following vulnerabilities : - Multiple memory corruption issues exists when handling style contexts, regular expressions, and clamped gradients that allow an...

MCabber Security Bypass Vulnerability

MCabber is a small XMPP Jabber console client. A security bypass vulnerability exists in MCabber that could allow an attacker to perform a man-in-the-middle attack or emulate a trusted server...

SIMATIC WinCC and SIMATIC PCS 7 ActiveX Control Security Bypass Vulnerability

Siemens SIMATIC WinCC and SIMATIC PCS 7 are both industrial automation products from Siemens, an automated data acquisition and monitoring SCADA system, and SIMATIC PCS 7, a distributed process control system using WinCC. control system using WinCC. A security bypass vulnerability exists in SIMAT...

Mozilla Firefox < 50.1 Multiple Vulnerabilities

The version of Mozilla Firefox installed on the remote Windows host is prior to 50.1. It is, therefore, affected by the following vulnerabilities : - Multiple memory corruption issues exists when handling style contexts, regular expressions, and clamped gradients that allow an unauthenticated,...

Mozilla Firefox ESR 45.x < 45.6 Multiple Vulnerabilities

The version of Mozilla Firefox ESR installed on the remote Windows host is 45.x prior to 45.6. It is, therefore, affected by the following vulnerabilities : - Multiple memory corruption issues exist, such as when handling document state changes or HTML5 content, or else due to dereferencing alrea...

SAP GUI for Java - insecure default settings

Application: SAP GUI for Java Versions Affected: SAP GUI for Java 7.40 Vendor URL: SAP Bug: Insecure default settings Reported: 15.12.2016 Vendor response: 16.12.2016 Date of Public Advisory: 09.05.2017 Reference: SAP Security Note 2448972 Authors: Dmitry Yudin ERPScan, Vahagn Vardanyan ERPScan,...

Mozilla Firefox ESR 45.x < 45.6 Multiple Vulnerabilities (macOS)

The version of Mozilla Firefox ESR installed on the remote macOS or Mac OS X host is 45.x prior to 45.6. It is, therefore, affected by the following vulnerabilities : - Multiple memory corruption issues exist, such as when handling document state changes or HTML5 content, or else due to...

flash-plugin: multiple code execution issues fixed in APSB16-39

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have security bypass vulnerability in the implementation of the same origin policy...

Flash Player Bug An Eavesdropper's Delight

Adobe yesterday patched a not-so-sweet 16 Flash Player vulnerabilities, including a zero day under attack. While not much is known about the targeted attacks using the Flash Player bug, or its victims, details have surfaced on another patched flaw that is a potential privacy nightmare...

SUSE-SU-2016:3148-1 Security update for flash-player

This update for flash-player fixes the following issues: - Security update to 24.0.0.186 bsc1015379 APSB16-39: These updates resolve use-after-free vulnerabilities that could have lead to code execution CVE-2016-7872, CVE-2016-7877, CVE-2016-7878, CVE-2016-7879, CVE-2016-7880, CVE-2016-7881,...

Microsoft Office Security Feature Bypass Vulnerability (CNVD-2016-12459)

Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. A security feature bypass vulnerability exists in Microsoft Office software that originates when the progr...

Adobe Flash Player Security Bypass Vulnerability (CNVD-2016-12379)

Adobe Flash Player is a proprietary multimedia program developed by Adobe, Incorporated, and is widely used. A security bypass vulnerability exists in Adobe Flash Player, which can be exploited by an attacker to compromise control of a system...

Apple iOS APPLE-SA-2016-12-12-1 has multiple vulnerabilities (CNVD-2016-12712)

Apple iOS is an operating system developed for mobile devices. Apple iOS has multiple vulnerabilities. An attacker can exploit the vulnerabilities to bypass security restrictions, execute arbitrary code or perform unauthorized actions, and obtain sensitive information...