deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2015-5452
Published: 2015-07-08
Description: SQL injection vulnerability in Watchguard XCS 9.2 and 10.0 before build 150522 allows remote attackers to execute arbitrary SQL commands via the sid cookie, as demonstrated by a request to borderpost/imp/compose.php3.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/132498/Watchguard-XCS-10.0-SQL-Injection-Command-Execution.html; http://packetstormsecurity.com/files/133721/Watchguard-XCS-Remote-Command-Execution.html; http://www.rapid7.com/db/modules/exploit/freebsd/http/watchguard_cmd_exec
CVE: CVE-2015-5453
Published: 2015-07-08
Description: Watchguard XCS 9.2 and 10.0 before build 150522 allow remote authenticated users to execute arbitrary commands via shell metacharacters in the id parameter to ADMIN/mailqueue.spl.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-77
References: http://packetstormsecurity.com/files/132498/Watchguard-XCS-10.0-SQL-Injection-Command-Execution.html; http://packetstormsecurity.com/files/133721/Watchguard-XCS-Remote-Command-Execution.html; http://www.rapid7.com/db/modules/exploit/freebsd/http/watchguard_cmd_exec
CVE: CVE-2015-5454
Published: 2015-07-08
Description: Cross-site scripting (XSS) vulnerability in Nucleus CMS allows remote attackers to inject arbitrary web script or HTML via the title parameter when adding a new item.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/132461/Nucleus-CMS-3.65-Cross-Site-Scripting.html; http://www.securityfocus.com/bid/75694; https://github.com/NucleusCMS/NucleusCMS/issues/83
CVE: CVE-2015-5455
Published: 2015-07-08
Description: Cross-site scripting (XSS) vulnerability in X-Cart 4.5.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors to install/.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/132513/X-Cart-4.5.0-Cross-Site-Scripting.html; http://packetstormsecurity.com/files/132513/X-Cart-4.5.0-Cross-Site-Scripting.html
CVE: CVE-2015-5456
Published: 2015-07-08
Description: Cross-site scripting (XSS) vulnerability in the form method in modules/formclass.php in PivotX before 2.3.11 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO, related to the "PHP_SELF" variable and form actions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://blog.pivotx.net/archive/2015/06/21/pivotx-2311-released; http://packetstormsecurity.com/files/132474/PivotX-2.3.10-Session-Fixation-XSS-Code-Execution.html; http://software-talk.org/blog/2015/06/session-fixation-xss-code-execution-vulnerability-pivotx/
CVE: CVE-2015-5457
Published: 2015-07-08
Description: PivotX before 2.3.11 does not validate the new file extension when renaming a file with multiple extensions, which allows remote attackers to execute arbitrary code by uploading a crafted file, as demonstrated by a file named foo.php.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://blog.pivotx.net/archive/2015/06/21/pivotx-2311-released; http://packetstormsecurity.com/files/132474/PivotX-2.3.10-Session-Fixation-XSS-Code-Execution.html; http://software-talk.org/blog/2015/06/session-fixation-xss-code-execution-vulnerability-pivotx/
CVE: CVE-2015-5458
Published: 2015-07-08
Description: Session fixation vulnerability in fileupload.php in PivotX before 2.3.11 allows remote attackers to hijack web sessions via the sess parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://blog.pivotx.net/archive/2015/06/21/pivotx-2311-released; http://packetstormsecurity.com/files/132474/PivotX-2.3.10-Session-Fixation-XSS-Code-Execution.html; http://software-talk.org/blog/2015/06/session-fixation-xss-code-execution-vulnerability-pivotx/
CVE: CVE-2015-5459
Published: 2015-07-08
Description: SQL injection vulnerability in the AdvanceSearch.class in AdventNetPassTrix.jar in ManageEngine Password Manager Pro (PMP) before 8.1 Build 8101 allows remote authenticated users to execute arbitrary SQL commands via the ANDOR parameter, as demonstrated by a request to STATE_ID/[PII_REDACTED]47/SQLAdvancedALSearchResult.cc.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://packetstormsecurity.com/files/132511/ManageEngine-Password-Manager-Pro-8.1-SQL-Injection.html; http://seclists.org/fulldisclosure/2015/Jul/19; http://seclists.org/fulldisclosure/2015/Jun/104
CVE: CVE-2015-4614
Published: 2015-07-08
Description: Multiple SQL injection vulnerabilities in includes/Function.php in the Easy2Map plugin before 1.2.5 for WordPress allow remote attackers to execute arbitrary SQL commands via the mapName parameter in an e2m_img_save_map_name action to wp-admin/admin-ajax.php and other unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://seclists.org/fulldisclosure/2015/Jul/18; http://www.securityfocus.com/archive/1/535922/100/0/threaded; http://www.vapid.dhs.org/advisory.php?v=131
CVE: CVE-2015-4616
Published: 2015-07-08
Description: Directory traversal vulnerability in includes/MapPinImageSave.php in the Easy2Map plugin before 1.2.5 for WordPress allows remote attackers to create arbitrary files via a .. (dot dot) in the map_id parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://seclists.org/fulldisclosure/2015/Jul/18; http://www.securityfocus.com/archive/1/535922/100/0/threaded; http://www.vapid.dhs.org/advisory.php?v=131
CVE: CVE-2015-5460
Published: 2015-07-08
Description: Cross-site scripting (XSS) vulnerability in app/views/events/_menu.html.erb in Snorby 2.6.2 allows remote attackers to inject arbitrary web script or HTML via the title (cls.name variable) when creating a classification.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/132552/Snorby-2.6.2-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2015/Jul/15; http://www.securityfocus.com/archive/1/535930/100/0/threaded
CVE: CVE-2015-5461
Published: 2015-07-08
Description: Open redirect vulnerability in the Redirect function in stageshow_redirect.php in the StageShow plugin before 5.0.9 for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter.
CVSS Score: 6.4 (MEDIUM)
References: http://packetstormsecurity.com/files/132553/WordPress-StageShow-5.0.8-Open-Redirect.html; http://seclists.org/fulldisclosure/2015/Jul/27; http://www.securityfocus.com/bid/75552
CVE: CVE-2015-5380
Published: 2015-07-09
Description: The Utf8DecoderBase::WriteUtf16Slow function in unicode-decoder.cc in Google V8, as used in Node.js before 0.12.6, io.js before 1.8.3 and 2.x before 2.3.3, and other products, does not verify that there is memory available for a UTF-16 surrogate pair, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted byte sequence.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://blog.nodejs.org/2015/07/03/node-v0-12-6-stable/; http://www.securityfocus.com/bid/75556; https://codereview.chromium.org/[PII_REDACTED]
CVE: CVE-2014-0578
Published: 2015-07-09
Description: Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-3115, CVE-2015-3116, CVE-2015-3125, and CVE-2015-5116.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-284
References: http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00017.html; http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1214.html
CVE: CVE-2015-3114
Published: 2015-07-09
Description: Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-284
References: http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00017.html; http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1214.html
CVE: CVE-2015-3115
Published: 2015-07-09
Description: Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2014-0578, CVE-2015-3116, CVE-2015-3125, and CVE-2015-5116.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-284
References: http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00017.html; http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1214.html
CVE: CVE-2015-3116
Published: 2015-07-09
Description: Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2014-0578, CVE-2015-3115, CVE-2015-3125, and CVE-2015-5116.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-284
References: http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00017.html; http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1214.html
CVE: CVE-2015-3117
Published: 2015-07-09
Description: Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3123, CVE-2015-3130, CVE-2015-3133, CVE-2015-3134, and CVE-2015-4431.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00017.html; http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1214.html
CVE: CVE-2015-3118
Published: 2015-07-09
Description: Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3124, CVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, and CVE-2015-5117.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00017.html; http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1214.html
CVE: CVE-2015-3119
Published: 2015-07-09
Description: Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-3120, CVE-2015-3121, CVE-2015-3122, and CVE-2015-4433.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00017.html; http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1214.html
CVE: CVE-2015-3120
Published: 2015-07-09
Description: Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-3119, CVE-2015-3121, CVE-2015-3122, and CVE-2015-4433.
CVSS Score: 10.0 (HIGH)
CWE: CWE-704
References: http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00017.html; http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1214.html
CVE: CVE-2015-3121
Published: 2015-07-09
Description: Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-3119, CVE-2015-3120, CVE-2015-3122, and CVE-2015-4433.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00017.html; http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1214.html
CVE: CVE-2015-3122
Published: 2015-07-09
Description: Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-3119, CVE-2015-3120, CVE-2015-3121, and CVE-2015-4433.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00017.html; http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1214.html
CVE: CVE-2015-3123
Published: 2015-07-09
Description: Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3117, CVE-2015-3130, CVE-2015-3133, CVE-2015-3134, and CVE-2015-4431.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00017.html; http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1214.html
CVE: CVE-2015-3124
Published: 2015-07-09
Description: Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, and CVE-2015-5117.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00017.html; http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1214.html
CVE: CVE-2015-3125
Published: 2015-07-09
Description: Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2014-0578, CVE-2015-3115, CVE-2015-3116, and CVE-2015-5116.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-284
References: http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00017.html; http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1214.html
CVE: CVE-2015-3126
Published: 2015-07-09
Description: Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2015-4429.
CVSS Score: 7.5 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00017.html; http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1214.html
CVE: CVE-2015-3127
Published: 2015-07-09
Description: Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, and CVE-2015-5117.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00017.html; http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1214.html
CVE: CVE-2015-3128
Published: 2015-07-09
Description: Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3127, CVE-2015-3129, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, and CVE-2015-5117.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00017.html; http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1214.html
CVE: CVE-2015-3129
Published: 2015-07-09
Description: Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3127, CVE-2015-3128, CVE-2015-3131, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, and CVE-2015-5117.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00017.html; http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1214.html
CVE: CVE-2015-3130
Published: 2015-07-09
Description: Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3117, CVE-2015-3123, CVE-2015-3133, CVE-2015-3134, and CVE-2015-4431.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00017.html; http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1214.html
CVE: CVE-2015-3131
Published: 2015-07-09
Description: Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3132, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, and CVE-2015-5117.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00017.html; http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1214.html
CVE: CVE-2015-3132
Published: 2015-07-09
Description: Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3118, CVE-2015-3124, CVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3131, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4430, and CVE-2015-5117.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00017.html; http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1214.html
CVE: CVE-2015-3133
Published: 2015-07-09
Description: Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3117, CVE-2015-3123, CVE-2015-3130, CVE-2015-3134, and CVE-2015-4431.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00017.html; http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1214.html
CVE: CVE-2015-3134
Published: 2015-07-09
Description: Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3117, CVE-2015-3123, CVE-2015-3130, CVE-2015-3133, and CVE-2015-4431.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00017.html; http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00018.html; http://rhn.redhat.com/errata/RHSA-2015-1214.html