CVSS: 10.0EPSS: 1%CPEs: 29EXPL: 0CVE-2015-3103 – flash-plugin: multiple code execution issues fixed in APSB15-11
https://notcve.org/view.php?id=CVE-2015-3103
10 Jun 2015 — Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-20... • http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00005.html •
CVSS: 7.5EPSS: 0%CPEs: 29EXPL: 0CVE-2015-3108 – flash-plugin: information leak leading to ASLR bypass (APSB15-11)
https://notcve.org/view.php?id=CVE-2015-3108
10 Jun 2015 — Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified ve... • http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00005.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 8.8EPSS: 0%CPEs: 29EXPL: 0CVE-2015-3096 – flash-plugin: cross-site request forgery against JSONP endpoints fixed in APSB15-11 (incomplete fix for CVE-2014-5333)
https://notcve.org/view.php?id=CVE-2015-3096
10 Jun 2015 — Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass a CVE-2014-5333 protection mechanism via unspecified vectors. Adobe Flash Player anterior a 13.0.0.292 y... • http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00005.html • CWE-352: Cross-Site Request Forgery (CSRF) •
CVSS: 10.0EPSS: 2%CPEs: 30EXPL: 2CVE-2015-3107 – Adobe Flash - NetConnection.connect Use-After-Free
https://notcve.org/view.php?id=CVE-2015-3107
10 Jun 2015 — Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-20... • https://packetstorm.news/files/id/133177 • CWE-416: Use After Free •
CVSS: 10.0EPSS: 34%CPEs: 29EXPL: 1CVE-2015-3106 – Adobe Flash AS2 - textfield.filters Use-After-Free
https://notcve.org/view.php?id=CVE-2015-3106
10 Jun 2015 — Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-20... • https://www.exploit-db.com/exploits/37847 •
CVSS: 10.0EPSS: 9%CPEs: 29EXPL: 0CVE-2015-3100 – flash-plugin: multiple code execution issues fixed in APSB15-11
https://notcve.org/view.php?id=CVE-2015-3100
10 Jun 2015 — Stack-based buffer overflow in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors. Desbordamiento de buffer basado en pil... • http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00005.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 8.8EPSS: 0%CPEs: 29EXPL: 0CVE-2015-3098 – flash-plugin: same-origin-policy bypass fixed in APSB15-11
https://notcve.org/view.php?id=CVE-2015-3098
10 Jun 2015 — Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-3099 and CVE-201... • http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00005.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 10.0EPSS: 97%CPEs: 29EXPL: 2CVE-2015-3105 – Adobe Flash Player - Drawing Fill Shader Memory Corruption
https://notcve.org/view.php?id=CVE-2015-3105
10 Jun 2015 — Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. Adobe Flash Player an... • https://packetstorm.news/files/id/132464 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 8.8EPSS: 0%CPEs: 29EXPL: 0CVE-2015-3099 – flash-plugin: same-origin-policy bypass fixed in APSB15-11
https://notcve.org/view.php?id=CVE-2015-3099
10 Jun 2015 — Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allow remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-3098 and CVE-201... • http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00005.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 10.0EPSS: 3%CPEs: 29EXPL: 0CVE-2015-3104 – flash-plugin: multiple code execution issues fixed in APSB15-11
https://notcve.org/view.php?id=CVE-2015-3104
10 Jun 2015 — Integer overflow in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors. Desbordamiento de enteros en Adobe Flash Player a... • http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00005.html • CWE-189: Numeric Errors •