Cisco IOS Security Bypass Vulnerability (CNVD-2016-09463)

Cisco IOS is an operating system developed by Cisco for its network devices. A security vulnerability exists in Cisco IOS version 12.233SXJ9, which can be exploited by remote attackers to bypass established access restrictions...

Adobe Reader < 11.0.18 / 15.006.30243 / 15.020.20039 Multiple Vulnerabilities (APSB16-33) (macOS)

The version of Adobe Reader installed on the remote macOS or Mac OS X host is prior to 11.0.18, 15.006.30243, or 15.020.20039. It is, therefore, affected by multiple vulnerabilities : - Multiple use-after-free errors exist that allow an unauthenticated, remote attacker to execute arbitrary code...

SAP NetWeaver Security Bypass Vulnerability

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A security bypass vulnerability exists in SAP NetWeaver version 7.40, which can be exploited by an attacker to...

Juniper vMX Local Security Bypass Vulnerability

Juniper Junos is a Juniper Networks network operating system designed for the company's hardware systems. The operating system provides a secure programming interface and the Junos SDK. A local security bypass vulnerability exists in Juniper vMX, which could allow an attacker to bypass security...

Adobe Acrobat < 11.0.18 / 15.006.30243 / 15.020.20039 Multiple Vulnerabilities (APSB16-33) (macOS)

The version of Adobe Acrobat installed on the remote macOS Mac OS X host is prior to 11.0.18, 15.006.30243, or 15.020.20039. It is, therefore, affected by multiple vulnerabilities : - Multiple use-after-free errors exist that allow an unauthenticated, remote attacker to execute arbitrary code...

Design/Logic Flaw

Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to bypass intended access restrictions via unspecified vectors...

Design/Logic Flaw

Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allow attackers to bypass JavaScript API execution restrictions via unspecified vectors...

Adobe Flash Player Security Bypass Vulnerability (CNVD-2016-09025)

Adobe Flash Player is a cross-platform, browser-based multimedia player product. A security vulnerability exists in Adobe Flash Player that could be exploited by attackers to bypass security restrictions or launch further attacks...

Microsoft Edge Security Bypass Vulnerability

Microsoft Edge is the web browser built into the Windows 10 version. A security feature bypass vulnerability exists when the Edge content security policy fails to properly handle validation of certain specially designed documents. An attacker could trick a user into loading a page containing...

Cisco Unified Intelligence Center Security Mechanism Bypass Vulnerability

Cisco Unified Intelligence Center is the management center for Cisco's Unified Communications system. A security mechanism bypass vulnerability exists in Cisco Unified Intelligence Center that could be exploited by a remote attacker to create user accounts by submitting a special request...

Cisco IOS XE Remote Security Bypass Vulnerability

Cisco IOS XE is an operating system developed by the American company Cisco Cisco for its network equipment. A remote security bypass vulnerability exists in version 3.18 of Cisco IOS XE. An attacker could exploit this vulnerability to bypass security restrictions and perform unauthorized...

Adobe Reader and Acrobat Security Bypass Vulnerability (CNVD-2016-09398)

Adobe Reader is a free PDF file reader; Acrobat is a PDF file editing and conversion tool; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDFs. A security bypass vulnerability exists in Adobe Reader and Acrobat that allows remote attackers to build malicious PDF files th...

SUSE-SU-2016:2512-1 Security update for flash-playerqemu

flash-player was updated to version 11.2.202.637 to fix the following issues bsc1004019: CVE-2016-6992: A type confusion vulnerability that could lead to code execution. CVE-2016-6981, CVE-2016-6987: use-after-free vulnerabilities that could lead to code execution CVE-2016-4286: Security bypass...

Cybozu Office Security Bypass Vulnerability

Cybozu Office is a Web-based, cross-platform collaboration solution from Cybozu. A security bypass vulnerability exists in Cybozu Office versions 9.0.0 through 10.4.0. An attacker can exploit the vulnerability to bypass security restrictions and perform unauthorized operations...

SPIP Security Bypass Vulnerability (CNVD-2016-09664)

SPIP is a free Web-based content publishing system. The system is primarily used for online collaboration. A security bypass vulnerability exists in SPIP versions 1.9.2-SPIP 3.0.7, which can be exploited by an attacker to bypass security restrictions...

Adobe Fixes 81 Vulnerabilities in Acrobat, Reader, Flash

Adobe patched 81 vulnerabilities across Acrobat, Reader, and Flash on Tuesday, including a handful of critical bugs that if exploited, could allow an attacker to take control of a system. The lion’s share of vulnerabilities – 71 in total – exist in the company’s Acrobat and Reader platforms...

flash -- multiple vulnerabilities

Adobe reports: Adobe has released security updates for Adobe Flash Player for Windows, Macintosh, Linux and ChromeOS. These updates address critical vulnerabilities that could potentially allow an attacker to take control of the affected system. These updates resolve a type confusion vulnerabilit...

Apache Tomcat 8/7/6 (based on the RedHat distro)local mention the right vulnerability-vulnerability warning-the black bar safety net

I. vulnerability description Apache Tomcat on RedHat distributions local to mention the right vulnerability II. Background description Tomcat is by Apache Software Foundation subordinate's Jakarta a project development Servlet vessel, in accordance with Sun Microsystems to provide the technical...

GE Bently Nevada 3500/22M Security Bypass Vulnerability

The GE Bently Nevada 3500/22M is a vibration monitoring system. A security bypass vulnerability exists in the GE Bently Nevada 3500/22M. Allowing an attacker to perform unauthorized operations...

Adobe Flash Player for Mac <= 23.0.0.162 Multiple Vulnerabilities (APSB16-32)

The version of Adobe Flash Player installed on the remote Mac OS X host is equal or prior to version 23.0.0.162. It is, therefore, affected by multiple vulnerabilities : - A type confusion error exists that allows an unauthenticated, remote attacker to execute arbitrary code. CVE-2016-6992 -...