CVSS: 10.0EPSS: 3%CPEs: 19EXPL: 0CVE-2015-0322 – flash-plugin: multiple code execution flaws (APSB15-04)
https://notcve.org/view.php?id=CVE-2015-0322
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0313, CVE-2015-0315, and CVE-2015-0320. Vulnerabilidad de uso después de liberación en Adobe Flash Player anterior a 13.0.0.269 y 14.x hasta 16.x anterior a 16.0.0.305 en Windows y OS X y anteriores 11.2.202.442 en Linux permite a atacantes ejecutar código arbitrario a través de vectores no especificados, una vulnerabilidad diferente a CVE-2015-0313, CVE-2015-0315, y CVE-2015-0320. • http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00006.html http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00007.html http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00008.html http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00009.html http://rhn.redhat.com/errata/RHSA-2015-0140.html http://secunia.com/advisories/62777 http://secunia.com/advisories/62886 http://secunia.com/advisories/62895 http://security.gentoo.org/glsa/glsa •
CVSS: 10.0EPSS: 3%CPEs: 19EXPL: 0CVE-2015-0320 – flash-plugin: multiple code execution flaws (APSB15-04)
https://notcve.org/view.php?id=CVE-2015-0320
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0313, CVE-2015-0315, and CVE-2015-0322. Vulnerabilidad de uso después liberación en Adobe Flash Player anterior a 13.0.0.269 y 14.x hasta 16.x anterior a 16.0.0.305 en Windows y OS X y anterior a 11.2.202.442 en Linux permite a atacantes ejecutar código arbitrario a través de vectores no especificados, una vulnerabilidad diferente a CVE-2015-0313, CVE-2015-0315, y CVE-2015-0322. • http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00006.html http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00007.html http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00008.html http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00009.html http://rhn.redhat.com/errata/RHSA-2015-0140.html http://secunia.com/advisories/62777 http://secunia.com/advisories/62886 http://secunia.com/advisories/62895 http://security.gentoo.org/glsa/glsa •
CVSS: 10.0EPSS: 97%CPEs: 19EXPL: 1CVE-2015-0318 – Adobe Flash Player - PCRE Regex
https://notcve.org/view.php?id=CVE-2015-0318
Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0314, CVE-2015-0316, CVE-2015-0321, CVE-2015-0329, and CVE-2015-0330. Adobe Flash Player anterior a 13.0.0.269 y 14.x hasta 16.x anterior a 16.0.0.305 en Windows y OS X y anterior a 11.2.202.442 en Linux permite a atacantes ejecutar código arbitrario o causar una denegación de servicio (corrupción de memoria) a través de vectores no especificados, una vulnerabilidad diferente a CVE-2015-0314, CVE-2015-0316, CVE-2015-0321, CVE-2015-0329, y CVE-2015-0330. There's a logic error in the PCRE engine version used in Adobe Flash that allows the execution of arbitrary PCRE bytecode, with potential for memory corruption and remote code execution. • https://www.exploit-db.com/exploits/36420 http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00006.html http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00007.html http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00008.html http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00009.html http://rhn.redhat.com/errata/RHSA-2015-0140.html http://secunia.com/advisories/62777 http://secunia.com/advisories/62886 http://secunia.com/advisories/ •
CVSS: 10.0EPSS: 21%CPEs: 19EXPL: 0CVE-2015-0327 – flash-plugin: multiple code execution flaws (APSB15-04)
https://notcve.org/view.php?id=CVE-2015-0327
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0323. Desbordamiento de buffer basado en memoria dinámica en Adobe Flash Player anterior a 13.0.0.269 y 14.x hasta 16.x anterior a 16.0.0.305 en Windows y OS X y anterior a 11.2.202.442 en Linux permite a atacantes ejecutar código arbitrario a través de vectores no especificados, una vulnerabilidad diferente a CVE-2015-0323. • http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00006.html http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00007.html http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00008.html http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00009.html http://rhn.redhat.com/errata/RHSA-2015-0140.html http://secunia.com/advisories/62777 http://secunia.com/advisories/62886 http://secunia.com/advisories/62895 http://security.gentoo.org/glsa/glsa • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 10.0EPSS: 2%CPEs: 19EXPL: 0CVE-2015-0326 – flash-plugin: multiple code execution flaws (APSB15-04)
https://notcve.org/view.php?id=CVE-2015-0326
Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2015-0325 and CVE-2015-0328. Adobe Flash Player anterior a 13.0.0.269 y 14.x hasta 16.x anterior a 16.0.0.305 en Windows y OS X y anterior a 11.2.202.442 en Linux permite a atacantes causar una denegación de servicio (referencia a puntero nulo) o posiblemente tener otro impacto no especificado a través de vectores desconocidos, una vulnerabilidad diferente a CVE-2015-0325 y CVE-2015-0328. • http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00006.html http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00007.html http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00008.html http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00009.html http://rhn.redhat.com/errata/RHSA-2015-0140.html http://secunia.com/advisories/62886 http://secunia.com/advisories/62895 http://security.gentoo.org/glsa/glsa-201502-02.xml http://www.securityfoc •