deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-0071
Published: 2016-02-10
Description: Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1034971; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-009; http://www.securitytracker.com/id/1034971
CVE: CVE-2016-0072
Published: 2016-02-10
Description: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0060, CVE-2016-0061, CVE-2016-0063, and CVE-2016-0067.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1034971; http://www.zerodayinitiative.com/advisories/ZDI-16-157; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-009
CVE: CVE-2016-0077
Published: 2016-02-10
Description: Microsoft Internet Explorer 9 through 11 and Microsoft Edge misparse HTTP responses, which allows remote attackers to spoof web sites via a crafted URL, aka "Microsoft Browser Spoofing Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-19
References: http://www.securitytracker.com/id/1034971; http://www.securitytracker.com/id/1034972; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-009
CVE: CVE-2016-0080
Published: 2016-02-10
Description: Microsoft Edge mishandles exceptions during window-message dispatch operations, which allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Microsoft Edge ASLR Bypass."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/82631; http://www.securitytracker.com/id/1034972; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-011
CVE: CVE-2016-0084
Published: 2016-02-10
Description: Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge Memory Corruption Vulnerability."
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/82635; http://www.securitytracker.com/id/1034972; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-011
CVE: CVE-2015-7675
Published: 2016-02-10
Description: The "Send as attachment" feature in Ipswitch MOVEit DMZ before 8.2 and MOVEit Mobile before 1.2.2 allow remote authenticated users to bypass authorization and read uploaded files via a valid FileID in the (1) serverFileIds parameter to mobile/sendMsg or (2) arg01 parameter to human.aspx.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://docs.ipswitch.com/MOVEit/DMZ82/ReleaseNotes/MOVEitReleaseNotes82.pdf; http://packetstormsecurity.com/files/135457/Ipswitch-MOVEit-DMZ-8.1-Authorization-Bypass.html; http://seclists.org/fulldisclosure/2016/Jan/95
CVE: CVE-2015-7677
Published: 2016-02-10
Description: The MOVEitISAPI service in Ipswitch MOVEit DMZ before 8.2 provides different error messages depending on whether a FileID exists, which allows remote authenticated users to enumerate FileIDs via the X-siLock-FileID parameter in a download action to MOVEitISAPI/MOVEitISAPI.dll.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://docs.ipswitch.com/MOVEit/DMZ82/ReleaseNotes/MOVEitReleaseNotes82.pdf; http://packetstormsecurity.com/files/135459/Ipswitch-MOVEit-DMZ-8.1-File-ID-Enumeration.html; http://seclists.org/fulldisclosure/2016/Jan/95
CVE: CVE-2015-7678
Published: 2016-02-10
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Ipswitch MOVEit Mobile 1.2.0.962 and earlier allow remote attackers to hijack the authentication of unspecified victims via unknown vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://packetstormsecurity.com/files/135460/Ipswitch-MOVEit-Mobile-1.2.0.962-Cross-Site-Request-Forgery.html; http://seclists.org/fulldisclosure/2016/Jan/95; https://www.profundis-labs.com/advisories/CVE-2015-7678.txt
CVE: CVE-2015-7679
Published: 2016-02-10
Description: Cross-site scripting (XSS) vulnerability in Ipswitch MOVEit Mobile before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the query string to mobile/.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://docs.ipswitch.com/MOVEit/DMZ82/ReleaseNotes/MOVEitReleaseNotes82.pdf; http://packetstormsecurity.com/files/135461/Ipswitch-MOVEit-Mobile-1.2.0.962-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2016/Jan/95
CVE: CVE-2015-7680
Published: 2016-02-10
Description: Ipswitch MOVEit DMZ before 8.2 provides different error messages for authentication attempts depending on whether the user account exists, which allows remote attackers to enumerate usernames via a series of SOAP requests to machine.aspx.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://docs.ipswitch.com/MOVEit/DMZ82/ReleaseNotes/MOVEitReleaseNotes82.pdf; http://packetstormsecurity.com/files/135462/Ipswitch-MOVEit-DMZ-8.1-Information-Disclosure.html; http://seclists.org/fulldisclosure/2016/Jan/95
CVE: CVE-2015-7681
Published: 2016-02-10
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn. Notes: none
CVE: CVE-2016-0948
Published: 2016-02-10
Description: Cross-site request forgery (CSRF) vulnerability in Adobe Connect before 9.5.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.securitytracker.com/id/1034978; https://helpx.adobe.com/security/products/connect/apsb16-07.html; http://www.securitytracker.com/id/1034978
CVE: CVE-2016-0949
Published: 2016-02-10
Description: Adobe Connect before 9.5.2 allows remote attackers to have an unspecified impact via a crafted parameter in a URL.
CVSS Score: 9.8 (CRITICAL)
References: http://www.securitytracker.com/id/1034978; https://helpx.adobe.com/security/products/connect/apsb16-07.html; http://www.securitytracker.com/id/1034978
CVE: CVE-2016-0950
Published: 2016-02-10
Description: Adobe Connect before 9.5.2 allows remote attackers to spoof the user interface via unspecified vectors.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20, CWE-254
References: http://www.securitytracker.com/id/1034978; https://helpx.adobe.com/security/products/connect/apsb16-07.html; http://www.securitytracker.com/id/1034978
CVE: CVE-2016-0951
Published: 2016-02-10
Description: Adobe Photoshop CC 2014 before 15.2.4, Photoshop CC 2015 before 16.1.2, and Bridge CC before 6.2 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0952 and CVE-2016-0953.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securitytracker.com/id/1034979; https://helpx.adobe.com/security/products/photoshop/apsb16-03.html; https://www.exploit-db.com/exploits/39429/
CVE: CVE-2016-0952
Published: 2016-02-10
Description: Adobe Photoshop CC 2014 before 15.2.4, Photoshop CC 2015 before 16.1.2, and Bridge CC before 6.2 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0951 and CVE-2016-0953.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securitytracker.com/id/1034979; https://helpx.adobe.com/security/products/photoshop/apsb16-03.html; https://www.exploit-db.com/exploits/39430/
CVE: CVE-2016-0953
Published: 2016-02-10
Description: Adobe Photoshop CC 2014 before 15.2.4, Photoshop CC 2015 before 16.1.2, and Bridge CC before 6.2 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0951 and CVE-2016-0952.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securitytracker.com/id/1034979; https://helpx.adobe.com/security/products/photoshop/apsb16-03.html; https://www.exploit-db.com/exploits/39431/
CVE: CVE-2016-0955
Published: 2016-02-10
Description: Cross-site scripting (XSS) vulnerability in Adobe Experience Manager (AEM) 6.1.0 allows remote authenticated users to inject arbitrary web script or HTML via a folder title field that is mishandled in the Deletion popup dialog.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.csnc.ch/misc/files/advisories/CVE-2016-0955_AEM-XSS.txt; https://helpx.adobe.com/security/products/experience-manager/apsb16-05.html; http://www.csnc.ch/misc/files/advisories/CVE-2016-0955_AEM-XSS.txt
CVE: CVE-2016-0956
Published: 2016-02-10
Description: The Servlets Post component 2.3.6 in Apache Sling, as used in Adobe Experience Manager 5.6.1, 6.0.0, and 6.1.0, allows remote attackers to obtain sensitive information via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://packetstormsecurity.com/files/135720/Apache-Sling-Framework-2.3.6-Information-Disclosure.html; http://seclists.org/fulldisclosure/2016/Feb/48; http://www.securityfocus.com/archive/1/537498/100/0/threaded
CVE: CVE-2016-0957
Published: 2016-02-10
Description: Dispatcher before 4.1.5 in Adobe Experience Manager 5.6.1, 6.0.0, and 6.1.0 does not properly implement a URL filter, which allows remote attackers to bypass dispatcher rules via unspecified vectors.
CVSS Score: 7.5 (HIGH)
References: https://helpx.adobe.com/security/products/experience-manager/apsb16-05.html; https://helpx.adobe.com/security/products/experience-manager/apsb16-05.html
CVE: CVE-2016-0958
Published: 2016-02-10
Description: Adobe Experience Manager 5.6.1, 6.0.0, and 6.1.0 might allow remote attackers to have an unspecified impact via a crafted serialized Java object.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://helpx.adobe.com/security/products/experience-manager/apsb16-05.html; https://helpx.adobe.com/security/products/experience-manager/apsb16-05.html
CVE: CVE-2016-0964
Published: 2016-02-10
Description: Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00025.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00027.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00029.html
CVE: CVE-2016-0965
Published: 2016-02-10
Description: Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00025.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00027.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00029.html
CVE: CVE-2016-0966
Published: 2016-02-10
Description: Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00025.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00027.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00029.html
CVE: CVE-2016-0967
Published: 2016-02-10
Description: Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00025.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00027.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00029.html
CVE: CVE-2016-0968
Published: 2016-02-10
Description: Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00025.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00027.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00029.html
CVE: CVE-2016-0969
Published: 2016-02-10
Description: Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00025.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00027.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00029.html
CVE: CVE-2016-0970
Published: 2016-02-10
Description: Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00025.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00027.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00029.html
CVE: CVE-2016-0971
Published: 2016-02-10
Description: Heap-based buffer overflow in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allows attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00025.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00027.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00029.html
CVE: CVE-2016-0972
Published: 2016-02-10
Description: Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00025.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00027.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00029.html
CVE: CVE-2016-0973
Published: 2016-02-10
Description: Use-after-free vulnerability in the URLRequest object implementation in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allows attackers to execute arbitrary code via a URLLoader.load call, a different vulnerability than CVE-2016-0974, CVE-2016-0975, CVE-2016-0982, CVE-2016-0983, and CVE-2016-0984.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00025.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00027.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00029.html
CVE: CVE-2016-0974
Published: 2016-02-10
Description: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0973, CVE-2016-0975, CVE-2016-0982, CVE-2016-0983, and CVE-2016-0984.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00025.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00027.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00029.html
CVE: CVE-2016-0975
Published: 2016-02-10
Description: Use-after-free vulnerability in the instanceof function in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allows attackers to execute arbitrary code by leveraging improper reference handling, a different vulnerability than CVE-2016-0973, CVE-2016-0974, CVE-2016-0982, CVE-2016-0983, and CVE-2016-0984.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00025.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00027.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00029.html
CVE: CVE-2016-0976
Published: 2016-02-10
Description: Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00025.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00027.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00029.html
CVE: CVE-2016-0977
Published: 2016-02-10
Description: Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00025.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00027.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00029.html
CVE: CVE-2016-0978
Published: 2016-02-10
Description: Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00025.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00027.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00029.html
CVE: CVE-2016-0979
Published: 2016-02-10
Description: Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0980, and CVE-2016-0981.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00025.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00027.html; http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00029.html