Apple iOS APPLE-SA-2016-12-12-1 has multiple vulnerabilities (CNVD-2016-12712)

Apple iOS is an operating system developed for mobile devices. Apple iOS has multiple vulnerabilities. An attacker can exploit the vulnerabilities to bypass security restrictions, execute arbitrary code or perform unauthorized actions, and obtain sensitive information...

Microsoft Internet Explorer and Edge Security Bypass Vulnerability

Microsoft Internet Explorer is the default browser that comes with operating systems prior to Windows 10, and Microsoft Edge is the default browser that comes with the latest operating system, Windows 10. A security bypass vulnerability exists in Microsoft Internet Explorer versions 10 and 11 and...

SUSE SLED12 Security Update : flash-player (SUSE-SU-2016:3148-1)

This update for flash-player fixes the following issues : - Security update to 24.0.0.186 bsc1015379 APSB16-39 : - These updates resolve use-after-free vulnerabilities that could have lead to code execution CVE-2016-7872, CVE-2016-7877, CVE-2016-7878, CVE-2016-7879, CVE-2016-7880, CVE-2016-7881,...

Apple iOS and watchOS security bypass vulnerability

Apple iOS and watchOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices. watchOS is an operating system for smart watches. A security bypass vulnerability exists in Apple iOS and watchOS. An attacker can exploit this vulnerability to perform unauthorized...

KLA10911 Multiple vulnerabilities in Adobe Flash Player

Multiple serious vulnerabilities have been found in Adobe Flash Player. Malicious users can exploit these vulnerabilities to execute arbitrary code or bypass security restrictions. Below is a complete list of vulnerabilities: 1. Use-after-free vulnerabilities can be exploited remotely to execute...

Apple iOS APPLE-SA-2016-12-12-1 has multiple vulnerabilities (CNVD-2016-12713)

Apple iOS is an operating system developed for mobile devices. Apple iOS has multiple vulnerabilities. An attacker can exploit the vulnerabilities to bypass security restrictions, execute arbitrary code or perform unauthorized actions, and obtain sensitive information...

McAfee VirusScan Enterprise Security Bypass Vulnerability

McAfee VirusScan Enterprise is a suite of antivirus software from the American company McAfee. The software provides a full range of security protection, scans memory for malicious code and optimizes updates for remote systems. A security bypass vulnerability exists in VirusScan Enterprise for...

McAfee VirusScan Enterprise for Linux <= 2.0.3 Multiple vulnerabilities (SB10181)

The remote host has a version of McAfee VirusScan Enterprise for Linux VSEL installed that is prior or equal to 2.0.3. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists in the web interface due to improper error reporting. An authenticated,...

Apple iOS APPLE-SA-2016-12-12-1 has multiple vulnerabilities (CNVD-2016-12710)

Apple iOS is an operating system developed for mobile devices. Apple iOS has multiple vulnerabilities. An attacker can exploit the vulnerabilities to bypass security restrictions, execute arbitrary code or perform unauthorized actions, and obtain sensitive information...

Apple iOS APPLE-SA-2016-12-12-1 has multiple vulnerabilities (CNVD-2016-12711)

Apple iOS is an operating system developed for mobile devices. Apple iOS has multiple vulnerabilities. An attacker can exploit the vulnerabilities to bypass security restrictions, execute arbitrary code or perform unauthorized actions, and obtain sensitive information...

CVE-2016-7890

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have security bypass vulnerability in the implementation of the same origin policy...

Microsoft Office CVE-2016-7267 Security Bypass Vulnerability

Description Microsoft Office is prone to a security bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks. Technologies Affected Microsoft Excel 2010 Service Pack 2 32-bit editio...

PHP FormMail Generator Security Bypass Vulnerability (CNVD-2016-12387)

PHP FormMail Generator is a suite of PHP applications for generating standard web forms for inclusion in PHP or WordPress websites. A security bypass vulnerability exists in PHP FormMail Generator. The vulnerability stems from the program incorrectly detecting a folder directory entered by the...

KLA10925 Information Disclosure vulnerability in Microsoft .NET Framework 4.6.2

Mishandling of a developer-supplied key was found in Microsoft .NET 4.6.2 Framework’s Data Provider for SQL Server. By exploiting this vulnerability malicious users can obtain sensitive cleartext information. This vulnerability can be exploited remotely via leveraging key guessability. Original...

Adobe Flash Player <= 23.0.0.207 Multiple Vulnerabilities (APSB16-39)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 23.0.0.207. It is, therefore, affected by multiple vulnerabilities : - Multiple use-after-free errors exist that allow an unauthenticated, remote attacker to execute arbitrary code. CVE-2016-7872,...

Microsoft Internet Explorer and Edge CVE-2016-7281 Security Bypass Vulnerability

Description Microsoft Internet Explorer and Edge are prone to a security bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may lead to further attacks. Internet Explorer 10, 11, and Edge are vulnerable...

Cisco FirePOWER Malware Security Bypass Vulnerability

Cisco FirePOWER is a next-generation firewall developed by Cisco. A security bypass vulnerability exists in the Cisco FirePOWER Malware TCP processing, which allows remote attackers to exploit the vulnerability to bypass security restrictions and download files...

MS16-154: Security Update for Adobe Flash Player (3209498)

The remote Windows host is missing KB3209498. It is, therefore, affected by multiple vulnerabilities : - Multiple use-after-free errors exist that allow an unauthenticated, remote attacker to execute arbitrary code. CVE-2016-7872, CVE-2016-7877, CVE-2016-7878, CVE-2016-7879, CVE-2016-7880,...

PHP FormMail Generator Security Bypass Vulnerability

PHP FormMail Generator is a suite of PHP applications for generating standard web forms for inclusion in PHP or WordPress websites. A security bypass vulnerability exists in PHP FormMail Generator. A remote attacker can use this vulnerability to bypass authentication and gain administrator access...

Splunk Enterprise Server-Side Request Forgery Vulnerability

Splunk is a suite of data collection and analysis software from Splunk, Inc. in the United States. A request forgery vulnerability exists on the server side of Splunk Enterprise. An attacker could use this vulnerability to bypass security restrictions and perform unauthorized operations...