wolverineworldwide.com XSS vulnerability

Open Bug Bounty ID: OBB-151787 Description| Value ---|--- Affected Website:| wolverineworldwide.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

WordPress <= 4.5.1 - Pupload Same Origin Method Execution (SOME)

Description Affects 'wp-includes/js/plupload/plupload.flash.swf'...

Adobe Flash Player Use After Free Code Execution (APSB15-32: CVE-2015-8822)

A security bypass vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insufficient security restrictions while handling specially crafted SWF files. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file using...

Adobe Flash Player Use After Free Code Execution (APSB16-10: CVE-2016-1016)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially craft...

Adobe Flash Player Security Bypass (APSB16-10: CVE-2016-1006)

A security bypass vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insufficient security restrictions while handling specially crafted SWF files. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file using...

Adobe Flash Player Type Confusion (APSB16-10: CVE-2016-1015)

A type confusion vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file with an...

Adobe Flash Player Use After Free Code Execution (APSB16-10: CVE-2016-1017)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially craft...

Adobe Flash Player Buffer Overflow (APSB16-10: CVE-2016-1018)

A buffer overflow vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-02103)

Adobe Flash Player is a cross-platform, browser-based multimedia player product. Adobe Flash Player suffers from a memory corruption vulnerability that can be exploited by remote attackers to construct malicious SWF content and trick applications into parsing it, which can crash the application o...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-02101)

Adobe Flash Player is a cross-platform, browser-based multimedia player product. Adobe Flash Player suffers from a memory corruption vulnerability, which can be exploited by remote attackers to construct malicious SWF content and trick applications into parsing it, which can cause the application...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-02096)

Adobe Flash Player is a cross-platform, browser-based multimedia player product. Adobe Flash Player suffers from a memory corruption vulnerability that can be exploited by remote attackers to construct malicious SWF content and trick applications into parsing it, which can crash the application o...

Adobe Flash Player Security Bypass Vulnerability (CNVD-2016-02100)

Adobe Flash Player is a cross-platform, browser-based multimedia player product. A security bypass vulnerability exists in Adobe Flash Player, which can be exploited by remote attackers to construct malicious SWF content and trick applications into parsing it, which can bypass security restrictio...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-02098)

Adobe Flash Player is a cross-platform, browser-based multimedia player product. Adobe Flash Player suffers from a memory corruption vulnerability that can be exploited by remote attackers to construct malicious SWF content and trick applications into parsing it, which can crash the application o...

Critical: Red Hat Security Advisory: flash-plugin security update

An update for flash-plugin is now available for Red Hat Enterprise Linux 5 Supplementary and Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a...

Adobe Flash Player Use After Free Code Execution (APSB16-10: CVE-2016-1011)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially craft...

Adobe Flash Player Memory Corruption (APSB16-10: CVE-2016-1012)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

Adobe Flash Player Remote Code Execution (APSA16-01: CVE-2016-1019)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while handling a specially crafted SWF file. Successful exploitation could cause a crash and potentially allow an attacker to take control of the affected syst...

SWF Player - Flash File Viewer - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application SWF Player - Flash File Viewer published at the 'play' market has multiple vulnerabilities...

Adobe Flash - Sprite Creation Use-After-Free

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=718 There is a use-after-free in Sprite Creation. If a Sprite is created, and then the handler for the frameConstructed event triggers a remove object action, the Sprite is then used after it has been freed. A sample swf is attache...

Adobe Flash - Uninitialized Stack Parameter Access in MovieClip.swapDepths UaF Fix

Adobe Flash - Uninitialized Stack Parameter Access in MovieClip.swapDepths UaF Fix Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=715 The ActionScript parameter conversion in the fix for issue 403 https://code.google.com/p/google-security-research/issues/detail?id=403 can...