CVSS: 10.0EPSS: 1%CPEs: 16EXPL: 0CVE-2013-0639 – flash-plugin: multiple code execution flaws (APSB13-05)
https://notcve.org/view.php?id=CVE-2013-0639
12 Feb 2013 — Integer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors. Vulnerabilidad de desbordamiento de entero en Adobe Flash Player anterior a v10.3... • http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html • CWE-189: Numeric Errors •
CVSS: 10.0EPSS: 1%CPEs: 16EXPL: 0CVE-2013-1374 – flash-plugin: multiple code execution flaws (APSB13-05)
https://notcve.org/view.php?id=CVE-2013-1374
12 Feb 2013 — Use-after-free vulnerability in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 on Android 4.x; Adobe AIR before 3.6.0.597; and Adobe AIR SDK before 3.6.0.599 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0644 and CVE-2013-0649. Vulne... • http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00009.html • CWE-399: Resource Management Errors •
CVSS: 9.3EPSS: 96%CPEs: 12EXPL: 2CVE-2013-0634 – Adobe Flash Player - Regular Expression Heap Overflow
https://notcve.org/view.php?id=CVE-2013-0634
08 Feb 2013 — Adobe Flash Player before 10.3.183.51 and 11.x before 11.5.502.149 on Windows and Mac OS X, before 10.3.183.51 and 11.x before 11.2.202.262 on Linux, before 11.1.111.32 on Android 2.x and 3.x, and before 11.1.115.37 on Android 4.x allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted SWF content, as exploited in the wild in February 2013. Adobe Flash Player antes de v10.3.183.51 y v11.x antes de v11.5.502.149 para Windows y Mac OS X, antes de v10.3.18... • https://packetstorm.news/files/id/126227 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 5%CPEs: 12EXPL: 1CVE-2013-0633 – Adobe Flash Player - Regular Expression Heap Overflow
https://notcve.org/view.php?id=CVE-2013-0633
08 Feb 2013 — Buffer overflow in Adobe Flash Player before 10.3.183.51 and 11.x before 11.5.502.149 on Windows and Mac OS X, before 10.3.183.51 and 11.x before 11.2.202.262 on Linux, before 11.1.111.32 on Android 2.x and 3.x, and before 11.1.115.37 on Android 4.x allows remote attackers to execute arbitrary code via crafted SWF content, as exploited in the wild in February 2013. Desbordamiento de búfer en Adobe Flash Player antes de v10.3.183.51 y v11.x antes de v11.5.502.149 en Windows y Mac OS X, antes de v10.3.183.51 ... • https://www.exploit-db.com/exploits/32959 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 8.4EPSS: 0%CPEs: 17EXPL: 1CVE-2011-1352
https://notcve.org/view.php?id=CVE-2011-1352
05 Feb 2013 — The PowerVR SGX driver in Android before 2.3.6 allows attackers to gain root privileges via an application that triggers kernel memory corruption using crafted user data to the pvrsrvkm device. El controlador PowerVR SGX en Android antes de v2.3.6 permite a atacantes obtener privilegios de administrador a través de una aplicación que provoca corrupción de memoria del núcleo a partir de datos elaborados del usuario al dispositivo pvrsrvkm. • http://code.google.com/p/android/issues/detail?id=21523 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.5EPSS: 0%CPEs: 17EXPL: 1CVE-2011-1350 – Google Android 2.3.5 - PowerVR SGX Driver Information Disclosure
https://notcve.org/view.php?id=CVE-2011-1350
05 Feb 2013 — The PowerVR SGX driver in Android before 2.3.6 allows attackers to obtain potentially sensitive information from kernel stack memory via an application that uses a crafted length parameter in a request to the pvrsrvkm device. El controlador PowerVR SGX en Android antes de v2.3.6 permite a atacantes obtener la información potencialmente confidencial de la memoria de pila del núcleo a través de una aplicación que utiliza un parámetro de longitud diseñado en una solicitud al dispositivo pvrsrvkm. • https://www.exploit-db.com/exploits/38310 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 6.1EPSS: 0%CPEs: 332EXPL: 0CVE-2013-0751 – Gentoo Linux Security Advisory 201309-23
https://notcve.org/view.php?id=CVE-2013-0751
13 Jan 2013 — Mozilla Firefox before 18.0 on Android and SeaMonkey before 2.15 do not restrict a touch event to a single IFRAME element, which allows remote attackers to obtain sensitive information or possibly conduct cross-site scripting (XSS) attacks via a crafted HTML document. Mozilla Firefox anterior a 18.0 en Android y SeaMonkey anterior a 2.15 no restringen los eventos de "tap" (tocar la pantalla) a un único elemento IFRAME, lo que permite a atacantes remotos obtener información sensible o posiblemente llevar a c... • http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00006.html • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 10.0EPSS: 1%CPEs: 95EXPL: 0CVE-2013-0630 – flash-plugin: buffer overflow flaw that can lead to arbitrary code execution (APSB13-01)
https://notcve.org/view.php?id=CVE-2013-0630
11 Jan 2013 — Buffer overflow in Adobe Flash Player before 10.3.183.50 and 11.x before 11.5.502.146 on Windows and Mac OS X, before 10.3.183.50 and 11.x before 11.2.202.261 on Linux, before 11.1.111.31 on Android 2.x and 3.x, and before 11.1.115.36 on Android 4.x; Adobe AIR before 3.5.0.1060; and Adobe AIR SDK before 3.5.0.1060 allows attackers to execute arbitrary code via unspecified vectors. Desbordamiento de búfer en Adobe Flash Player anteriores a v10.3.183.50 y 11.x anteriores a v11.5.502.146 en Windows y Mac OS X,... • http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00003.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 10.0EPSS: 2%CPEs: 22EXPL: 0CVE-2012-5676 – flash-plugin: multiple code execution flaws (APSB12-27)
https://notcve.org/view.php?id=CVE-2012-5676
12 Dec 2012 — Buffer overflow in Adobe Flash Player before 10.3.183.48 and 11.x before 11.5.502.135 on Windows, before 10.3.183.48 and 11.x before 11.5.502.136 on Mac OS X, before 10.3.183.48 and 11.x before 11.2.202.258 on Linux, before 11.1.111.29 on Android 2.x and 3.x, and before 11.1.115.34 on Android 4.x; Adobe AIR before 3.5.0.880 on Windows and before 3.5.0.890 on Mac OS X; and Adobe AIR SDK before 3.5.0.880 on Windows and before 3.5.0.890 on Mac OS X allows attackers to execute arbitrary code via unspecified vec... • http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00014.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 10.0EPSS: 69%CPEs: 22EXPL: 0CVE-2012-5677 – Adobe Flash Player loadPCMFromByteArray Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2012-5677
12 Dec 2012 — Integer overflow in Adobe Flash Player before 10.3.183.48 and 11.x before 11.5.502.135 on Windows, before 10.3.183.48 and 11.x before 11.5.502.136 on Mac OS X, before 10.3.183.48 and 11.x before 11.2.202.258 on Linux, before 11.1.111.29 on Android 2.x and 3.x, and before 11.1.115.34 on Android 4.x; Adobe AIR before 3.5.0.880 on Windows and before 3.5.0.890 on Mac OS X; and Adobe AIR SDK before 3.5.0.880 on Windows and before 3.5.0.890 on Mac OS X allows attackers to execute arbitrary code via unspecified ve... • http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00014.html • CWE-189: Numeric Errors •