CVE-2016-4134

CVE-2016-4134 is an Adobe Flash Player vulnerability that was addressed as part of the APSB16-18 bulletin. Several connected advisories indicate the fix was delivered by upgrading Flash Player to 11.2.202.626 (e.g., SUSE/openSUSE updates, ALT Linux packages, and Red Hat advisories). The provided ...

CVE-2016-4140

CVE-2016-4140 is a directory search path vulnerability in the Adobe Flash Library used by Flash Player in Internet Explorer 10/11 and Microsoft Edge that could lead to arbitrary code execution. The issue affects Adobe Flash Player 21.0.0.242 and earlier (as used within IE/Edge). Publicly document...

CVE-2016-4129

CVE-2016-4129 is part of Adobe Flash Player updates delivered via the 11.2.202.626 patch (APSb16-18) used in Flash libraries in browsers. The connected sources enumerate multiple vulnerabilities in Flash Player (CVE-2016-4122, -4123, -4124, -4125, -4127, -4128, -4129, -4130, -4131, -4132, -4133, ...

CVE-2016-4136

CVE-2016-4136 is an Adobe Flash Player vulnerability affecting Flash libraries used in Microsoft Internet Explorer 10/11 and Edge. Connected sources describe it as a heap-based buffer overflow/memory corruption flaw that can lead to arbitrary code execution. Impact is described as code execution ...

CVE-2016-4122

CVE-2016-4122 concerns Adobe Flash Player/Flash plugin. Connected advisories cite multiple vendors (openSUSE/SUSE, Red Hat, ALT Linux, arch linux) reporting this CVE along with related ones (4123–4129, 4130–4132, 4133–4137, 4138–4148, 4150–4171). The vulnerability set includes memory corruption, ...

CVE-2016-4144

CVE-2016-4144 is an Adobe Flash Player vulnerability described as a type confusion issue in Flash Player 21.0.0.242 and earlier, used within the Flash libraries in Microsoft Internet Explorer 10/11 and Microsoft Edge, with unspecified impact and attack vectors. Public advisories and security bull...

CVE-2016-4128

CVE-2016-4128 is listed as part of the Adobe Flash Player fixes in the APSB16-18 update. The connected sources describe multiple CVEs addressed by this update and indicate that distributions such as openSUSE, SUSE, ALT Linux, and Red Hat released security updates to Flash Player, upgrading to ver...

CVE-2016-4147

CVE-2016-4147 is an Adobe Flash Player memory-corruption vulnerability reported in multiple advisories. Connected sources describe affected Flash Player components (ActiveX/NPAPI) and Flash libraries, with root causes including type confusion, use-after-free, heap-based and other memory-corruptio...

CVE-2016-4127

CVE-2016-4127 is part of a set of Flash Player vulnerabilities documented across multiple advisories (e.g., APSB16-18) affecting Adobe Flash Player used in Internet Explorer 10/11 and Edge. Connected sources indicate this family includes CVEs such as 2016-4122, 4123, 4124, 4125, 4127, 4128, 4129,...

CVE-2016-9958

CVE-2016-9958 affects Game Music Emu, prior to version 0.6.1. The vulnerability enables a remote attacker to cause arbitrary memory writes, potentially enabling arbitrary code execution or DoS when opening a crafted SPC file. Public sources (Gentoo GLSA 201707-02 and related advisories) instruct ...

CVE-2014-6474

The CVE-2014-6474 entry concerns Oracle MySQL Server 5.6.19 and earlier. It is described as an unspecified vulnerability that remote authenticated users can exploit to affect availability via vectors related to SERVER:MEMCACHED. The NVD metadata shows a base score of 3.5 (LOW) with CVSS2 metrics:...

CVE-2015-5969

CVE-2015-5969 involves the mysql-systemd-helper script in mysql-community-server and mariadb packages on openSUSE/OpenSUSE Leap/SLE. The issue allows local users to discover database credentials by listing a running process and its arguments. Affected packages/versions (from the Initial Descripti...

CVE-2016-4131

CVE-2016-4131 is listed among the Flash Player vulnerabilities addressed by the 2016 APSB16-18 update (Adobe Flash Player security bulletin) affecting Flash Player in Windows IE/Edge and in Linux distributions’ packages. The connected documents corroborate that multiple CVEs, including CVE-2016-4...

CVE-2016-4139

CVE-2016-4139 is an unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, used in the Flash libraries for IE10/IE11 and Edge. Connected advisories associate this CVE with information disclosure and a same-origin policy bypass, and note that fixes exist (Adobe APSB16-18) along wi...

CVE-2016-4155

CVE-2016-4155 describes an unspecified memory-corruption vulnerability in Adobe Flash Player 21.0.0.242 and earlier, when used within the Flash libraries in Internet Explorer 10/11 and Microsoft Edge. The connected HackerOne entry attributes the issue to ShimContentResolver.resolve() with resolve...

CVE-2016-9959

CVE-2016-9959 affects Game Music Emu prior to 0.6.1. The vulnerability allows a remote attacker to cause out-of-bounds 8-bit values in SPC/music processing, as described by NVD. Consequences are stated as enabling potential arbitrary behavior from crafted inputs; exploitation details are not prov...

CVE-2014-9852

ImageMagick vulnerability CVE-2014-9852 affects the ImageMagick code path distribute-cache.c, where objects are re-used after being destroyed. This can allow remote attackers to trigger unspecified impact via unspecified vectors. The initial entry notes a remote-exploit scenario with unspecified ...

CVE-2016-4133

CVE-2016-4133 is an unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, used in the Flash libraries for Internet Explorer 10/11 and Edge. Connected documents indicate this CVE was addressed as part of Flash Player security updates across multiple distributions (e.g., ALT Linux...

CVE-2014-2977

CVE-2014-2977 in DirectFB (Dispatch_Write in proxy/dispatcher/idirectfbsurface_dispatcher.c) allows remote attackers to cause a denial of service (crash) and possibly execute code via the Voodoo interface; CVE-2014-2978 is an out-of-bounds write in the same area. Connected advisories confirm thes...

CVE-2014-2978

CVE-2014-2978 is a DirectFB vulnerability in the Dispatch_Write function of proxy/dispatcher/idirectfbsurface_dispatcher.c (DirectFB 1.4.4). It allows remote attackers to cause a denial of service (crash) and, possibly, execute arbitrary code via the Voodoo interface due to an out-of-bounds write...

CVE-2016-1602

CVE-2016-1602 is a local code injection vulnerability in the supportconfig data collection tool of supportutils used by SUSE Linux Enterprise Server 12/12-SP1 and SUSE Linux Enterprise Desktop 12/12-SP1. The issue allows a local attacker to execute code as the user running supportconfig (typicall...