Unrestricted

file

upload

vulnerability

in

the

My

Image

plugin

in

Nibbleblog

before

allows

remote

administrators

to

execute

arbitrary

code

by

uploading

a

file

with

an

executable

extension

then

accessing

it

via

a

direct

request

to

the

file

in


Use-after-free vulnerability in the SPL unserialize implementation in ext/spl/spl_array.c in PHP before 5.4.44 5.5.x before 5.5.28 and 5.6.x before 5.6.12 allows remote attackers to execute arbitrary code via crafted serialized data that triggers misuse of an array field.


Advantech WebAccess before 8.1 allows remote attackers to execute arbitrary code via vectors involving a browser plugin.


GE Digital Energy MDS PulseNET and MDS PulseNET Enterprise before 3.1.5 have hardcoded credentials for a support account which allows remote attackers to obtain administrative access and consequently execute arbitrary code by leveraging knowledge of the password.


The SoapClient __call method in ext/soap/soap.c in PHP before 5.4.45 5.5.x before 5.5.29 and 5.6.x before 5.6.13 does not properly manage headers which allows remote attackers to execute arbitrary code via crafted serialized data that triggers a \type confusion\ in the serialize_function_call function.


Use-after-free vulnerability in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux Adobe AIR before 19.0.0.190 Adobe AIR SDK before 19.0.0.190 and Adobe AIR SDK & Compiler before 19.0.0.190 allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-5570 CVE-2015-5574 CVE-2015-5581 and CVE-2015-5584.


com.apple.driver.AppleVXD393 in the Graphics Driver subsystem in Apple iOS before 9.1 allows attackers to execute arbitrary code via a crafted app that leverages an unspecified \type confusion.\


Unrestricted

file

upload

vulnerability

in

the

Settings_Vtiger_CompanyDetailsSave_Action

class

in

in

Vtiger

CRM

and

earlier

allows

remote

authenticated

users

to

execute

arbitrary

code

by

uploading

a

file

with

an

executable

extension

then

accessing

it

via

a

direct

request

to

the

file

in

test/logo/.


hwpapp.dll in Hangul Word Processor allows remote attackers to execute arbitrary code via a crafted heap spray and by leveraging a \type confusion\ via an HWPX file containing a crafted para text tag.


The php_str_replace_in_subject function in ext/standard/string.c in PHP 7.x before 7.0.0 allows remote attackers to execute arbitrary code via a crafted value in the third argument to the str_ireplace function.


Bluetooth in Android 4.4 and 5.x before 5.1.1 LMY48Z allows user-assisted remote attackers to execute arbitrary code by leveraging access to the local physical environment aka internal bug 24595992.


Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13 Acrobat and Acrobat Reader DC Classic before 2015.006.30094 and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-5586 CVE-2015-6683 CVE-2015-6684 CVE-2015-6688 CVE-2015-6689 CVE-2015-6690 CVE-2015-6691 CVE-2015-7615 CVE-2015-7617 and CVE-2015-7621.


Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13 Acrobat and Acrobat Reader DC Classic before 2015.006.30094 and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-5586 CVE-2015-6684 CVE-2015-6687 CVE-2015-6688 CVE-2015-6689 CVE-2015-6690 CVE-2015-6691 CVE-2015-7615 CVE-2015-7617 and CVE-2015-7621.


HPE ArcSight Logger before 6.1P1 allows remote authenticated users to execute arbitrary code via unspecified input to the (1) Intellicus or (2) client-certificate upload component.


Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux Adobe AIR before 19.0.0.241 Adobe AIR SDK before 19.0.0.241 and Adobe AIR SDK & Compiler before 19.0.0.241 allows attackers to execute arbitrary code via a crafted getBounds call a different vulnerability than CVE-2015-7651 CVE-2015-7652 CVE-2015-7653 CVE-2015-7654 CVE-2015-7655 CVE-2015-7656 CVE-2015-7657 CVE-2015-7658 CVE-2015-7660 CVE-2015-7663 CVE-2015-8042 CVE-2015-8043 CVE-2015-8044 and CVE-2015-8046.


Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux Adobe AIR before 19.0.0.213 Adobe AIR SDK before 19.0.0.213 and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-7629 CVE-2015-7631 CVE-2015-7635 CVE-2015-7637 CVE-2015-7638 CVE-2015-7639 CVE-2015-7640 CVE-2015-7641 CVE-2015-7642 CVE-2015-7643 and CVE-2015-7644.


Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux Adobe AIR before 19.0.0.241 Adobe AIR SDK before 19.0.0.241 and Adobe AIR SDK & Compiler before 19.0.0.241 allows attackers to execute arbitrary code via crafted attachSound arguments a different vulnerability than CVE-2015-7651 CVE-2015-7652 CVE-2015-7653 CVE-2015-7655 CVE-2015-7656 CVE-2015-7657 CVE-2015-7658 CVE-2015-7660 CVE-2015-7661 CVE-2015-7663 CVE-2015-8042 CVE-2015-8043 CVE-2015-8044 and CVE-2015-8046.


The displayBlock function Template.php in Sensio Labs Twig before 1.20.0 when Sandbox mode is enabled allows remote attackers to execute arbitrary code via the _self variable in a template.


Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux Adobe AIR before 19.0.0.241 Adobe AIR SDK before 19.0.0.241 and Adobe AIR SDK & Compiler before 19.0.0.241 allows attackers to execute arbitrary code via crafted actionInstanceOf arguments a different vulnerability than CVE-2015-7651 CVE-2015-7652 CVE-2015-7653 CVE-2015-7654 CVE-2015-7655 CVE-2015-7656 CVE-2015-7657 CVE-2015-7660 CVE-2015-7661 CVE-2015-7663 CVE-2015-8042 CVE-2015-8043 CVE-2015-8044 and CVE-2015-8046.


Mobile Replayer in GPUTools Framework in Apple iOS before 9.2 allows attackers to execute arbitrary code in a privileged context via an app that provides a crafted pathname a different vulnerability than CVE-2015-7069.


Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux Adobe AIR before 19.0.0.213 Adobe AIR SDK before 19.0.0.213 and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-7629 CVE-2015-7631 CVE-2015-7635 CVE-2015-7636 CVE-2015-7637 CVE-2015-7638 CVE-2015-7639 CVE-2015-7641 CVE-2015-7642 CVE-2015-7643 and CVE-2015-7644.


Unrestricted file upload in GLPI before 0.85.3 allows remote authenticated users to execute arbitrary code by adding a file with an executable extension as an attachment to a new ticket then accessing it via a direct request to the file in files/_tmp/.


The mcollective-puppet-agent plugin before 1.11.1 for Puppet allows remote attackers to execute arbitrary code via vectors involving the --server argument.


Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13 Acrobat and Acrobat Reader DC Classic before 2015.006.30094 and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code by leveraging improper EScript exception handling a different vulnerability than CVE-2015-5586 CVE-2015-6683 CVE-2015-6684 CVE-2015-6687 CVE-2015-6688 CVE-2015-6689 CVE-2015-6690 CVE-2015-6691 CVE-2015-7615 and CVE-2015-7621.


SAP HANA Database 1.00 SPS10 and earlier do not require authentication which allows remote attackers to execute arbitrary code or have unspecified other impact via a TrexNet packet to the (1) fcopydir (2) fmkdir (3) frmdir (4) getenv (5) dumpenv (6) fcopy (7) fput (8) fdel (9) fmove (10) fget (11) fappend (12) fdir (13) getTraces (14) kill (15) pexec (16) stop or (17) pythonexec method aka SAP Security Note 2165583.


Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux Adobe AIR before 19.0.0.213 Adobe AIR SDK before 19.0.0.213 and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-7629 CVE-2015-7631 and CVE-2015-7643.


The SQL interface in SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote attackers to execute arbitrary code via unspecified vectors related to \SQL Login \ aka SAP Security Note 2197428.


Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux Adobe AIR before 19.0.0.241 Adobe AIR SDK before 19.0.0.241 and Adobe AIR SDK & Compiler before 19.0.0.241 allow attackers to execute arbitrary code by leveraging an unspecified \type confusion\ in the NetConnection object implementation.


MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A local privilege escalation vulnerability was reported (fixed and publicly disclosed in 2015) in Lenovo System Update version 5.07.0008 and prior where the SUService.exe /type COMMAND type could allow a user to execute arbitrary code with elevated privileges.


Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux Adobe AIR before 19.0.0.213 Adobe AIR SDK before 19.0.0.213 and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-7629 CVE-2015-7631 CVE-2015-7635 CVE-2015-7636 CVE-2015-7637 CVE-2015-7638 CVE-2015-7639 CVE-2015-7640 CVE-2015-7642 CVE-2015-7643 and CVE-2015-7644.


The files_external app in ownCloud Server before 7.0.9 8.0.x before 8.0.7 and 8.1.x before 8.1.2 allows remote authenticated users to instantiate arbitrary classes and possibly execute arbitrary code via a crafted mount point option related to \objectstore.\


Mobile Replayer in GPUTools Framework in Apple iOS before 9.2 allows attackers to execute arbitrary code in a privileged context via an app that provides a crafted pathname a different vulnerability than CVE-2015-7070.


The System Integrity Protection feature in Apple OS X before 10.11.2 mishandles union mounts which allows attackers to execute arbitrary code in a privileged context via a crafted app with root privileges.


Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attackers to execute arbitrary code via a crafted SWF file as exploited in the wild in October 2015.


Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux Adobe AIR before 19.0.0.241 Adobe AIR SDK before 19.0.0.241 and Adobe AIR SDK & Compiler before 19.0.0.241 allows attackers to execute arbitrary code via crafted DefineFunction atoms a different vulnerability than CVE-2015-7652 CVE-2015-7653 CVE-2015-7654 CVE-2015-7655 CVE-2015-7656 CVE-2015-7657 CVE-2015-7658 CVE-2015-7660 CVE-2015-7661 CVE-2015-7663 CVE-2015-8042 CVE-2015-8043 CVE-2015-8044 and CVE-2015-8046.


coreaudiod in Audio in Apple OS X before 10.11.1 does not initialize an unspecified data structure which allows attackers to execute arbitrary code via a crafted app.


Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux Adobe AIR before 19.0.0.241 Adobe AIR SDK before 19.0.0.241 and Adobe AIR SDK & Compiler before 19.0.0.241 allows attackers to execute arbitrary code via crafted setMask arguments a different vulnerability than CVE-2015-7651 CVE-2015-7652 CVE-2015-7653 CVE-2015-7654 CVE-2015-7655 CVE-2015-7656 CVE-2015-7657 CVE-2015-7658 CVE-2015-7661 CVE-2015-7663 CVE-2015-8042 CVE-2015-8043 CVE-2015-8044 and CVE-2015-8046.


Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux Adobe AIR before 19.0.0.213 Adobe AIR SDK before 19.0.0.213 and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-7629 CVE-2015-7631 CVE-2015-7635 CVE-2015-7636 CVE-2015-7638 CVE-2015-7639 CVE-2015-7640 CVE-2015-7641 CVE-2015-7642 CVE-2015-7643 and CVE-2015-7644.


zlib in the Compression component in Apple iOS before 9.2 OS X before 10.11.2 tvOS before 9.1 and watchOS before 2.1 does not initialize memory for an unspecified data structure which allows remote attackers to execute arbitrary code via a crafted web site.


The theme editor in Bolt before 2.2.5 does not check the file extension when renaming files which allows remote authenticated users to execute arbitrary code by renaming a crafted file and then directly accessing it.


Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux Adobe AIR before 19.0.0.241 Adobe AIR SDK before 19.0.0.241 and Adobe AIR SDK & Compiler before 19.0.0.241 allows attackers to execute arbitrary code via crafted actionExtends arguments a different vulnerability than CVE-2015-7651 CVE-2015-7652 CVE-2015-7653 CVE-2015-7654 CVE-2015-7656 CVE-2015-7657 CVE-2015-7658 CVE-2015-7660 CVE-2015-7661 CVE-2015-7663 CVE-2015-8042 CVE-2015-8043 CVE-2015-8044 and CVE-2015-8046.


Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13 Acrobat and Acrobat Reader DC Classic before 2015.006.30094 and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code via a crafted U3D object a different vulnerability than CVE-2015-5586 CVE-2015-6683 CVE-2015-6684 CVE-2015-6687 CVE-2015-6688 CVE-2015-6689 CVE-2015-6690 CVE-2015-6691 CVE-2015-7615 and CVE-2015-7617.


Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux Adobe AIR before 19.0.0.213 Adobe AIR SDK before 19.0.0.213 and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via a Video object with a crafted deblocking property a different vulnerability than CVE-2015-7629 CVE-2015-7631 and CVE-2015-7644.


The Extended Application Services (aka XS or XS Engine) in SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote attackers to execute arbitrary code via unspecified vectors related to \HTTP Login \ aka SAP Security Note 2197397.


Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux Adobe AIR before 19.0.0.213 Adobe AIR SDK before 19.0.0.213 and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-7629 CVE-2015-7631 CVE-2015-7635 CVE-2015-7636 CVE-2015-7637 CVE-2015-7638 CVE-2015-7640 CVE-2015-7641 CVE-2015-7642 CVE-2015-7643 and CVE-2015-7644.


The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before 2.3.10 2.4.x before 2.4.10 2.5.x before 2.5.4 and 2.6.x before 2.6.1 do not properly restrict the allowed protocols which might allow remote attackers to execute arbitrary code via a URL in a (a) .gitmodules file or (b) unknown other sources in a submodule.


Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux Adobe AIR before 19.0.0.213 Adobe AIR SDK before 19.0.0.213 and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via a TextLine object with a crafted validity property a different vulnerability than CVE-2015-7629 CVE-2015-7643 and CVE-2015-7644.


Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux Adobe AIR before 19.0.0.241 Adobe AIR SDK before 19.0.0.241 and Adobe AIR SDK & Compiler before 19.0.0.241 allows attackers to execute arbitrary code via crafted globalToLocal arguments a different vulnerability than CVE-2015-7651 CVE-2015-7652 CVE-2015-7654 CVE-2015-7655 CVE-2015-7656 CVE-2015-7657 CVE-2015-7658 CVE-2015-7660 CVE-2015-7661 CVE-2015-7663 CVE-2015-8042 CVE-2015-8043 CVE-2015-8044 and CVE-2015-8046.


Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux Adobe AIR before 19.0.0.213 Adobe AIR SDK before 19.0.0.213 and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via a TextFormat object with a crafted tabStops property a different vulnerability than CVE-2015-7631 CVE-2015-7643 and CVE-2015-7644.


lib/core.php in the Cool Video Gallery plugin 1.9 for WordPress allows remote attackers to execute arbitrary code via shell metacharacters in the \Width of preview image\ and possibly other input fields in the \Video Gallery Settings\ page.


Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux Adobe AIR before 19.0.0.213 Adobe AIR SDK before 19.0.0.213 and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-7629 CVE-2015-7631 CVE-2015-7636 CVE-2015-7637 CVE-2015-7638 CVE-2015-7639 CVE-2015-7640 CVE-2015-7641 CVE-2015-7642 CVE-2015-7643 and CVE-2015-7644.


The initialize method in the Histogram class in lib/colorscore/histogram.rb in the colorscore gem before 0.0.5 for Ruby allows context-dependent attackers to execute arbitrary code via shell metacharacters in the (1) image_path (2) colors or (3) depth variable.


Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux Adobe AIR before 19.0.0.241 Adobe AIR SDK before 19.0.0.241 and Adobe AIR SDK & Compiler before 19.0.0.241 allows attackers to execute arbitrary code via crafted actionCallMethod arguments a different vulnerability than CVE-2015-7651 CVE-2015-7652 CVE-2015-7653 CVE-2015-7654 CVE-2015-7655 CVE-2015-7656 CVE-2015-7658 CVE-2015-7660 CVE-2015-7661 CVE-2015-7663 CVE-2015-8042 CVE-2015-8043 CVE-2015-8044 and CVE-2015-8046.


Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux Adobe AIR before 19.0.0.241 Adobe AIR SDK before 19.0.0.241 and Adobe AIR SDK & Compiler before 19.0.0.241 allows attackers to execute arbitrary code via a crafted gridFitType property value a different vulnerability than CVE-2015-7651 CVE-2015-7653 CVE-2015-7654 CVE-2015-7655 CVE-2015-7656 CVE-2015-7657 CVE-2015-7658 CVE-2015-7660 CVE-2015-7661 CVE-2015-7663 CVE-2015-8042 CVE-2015-8043 CVE-2015-8044 and CVE-2015-8046.


The Remote Agent component in Schneider Electric InduSoft Web Studio before 8.0 allows remote attackers to execute arbitrary code via unspecified vectors aka ZDI-CAN-2649.


Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux Adobe AIR before 19.0.0.241 Adobe AIR SDK before 19.0.0.241 and Adobe AIR SDK & Compiler before 19.0.0.241 allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-7651 CVE-2015-7652 CVE-2015-7653 CVE-2015-7654 CVE-2015-7655 CVE-2015-7656 CVE-2015-7657 CVE-2015-7658 CVE-2015-7660 CVE-2015-7661 CVE-2015-8042 CVE-2015-8043 CVE-2015-8044 and CVE-2015-8046.


The command line management console (CMC) in SolarWinds Log and Event Manager (LEM) before 6.2.0 allows remote attackers to execute arbitrary code via unspecified vectors involving the ping feature.


Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux Adobe AIR before 19.0.0.241 Adobe AIR SDK before 19.0.0.241 and Adobe AIR SDK & Compiler before 19.0.0.241 allows attackers to execute arbitrary code via crafted actionImplementsOp arguments a different vulnerability than CVE-2015-7651 CVE-2015-7652 CVE-2015-7653 CVE-2015-7654 CVE-2015-7655 CVE-2015-7657 CVE-2015-7658 CVE-2015-7660 CVE-2015-7661 CVE-2015-7663 CVE-2015-8042 CVE-2015-8043 CVE-2015-8044 and CVE-2015-8046.


Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux Adobe AIR before 19.0.0.213 Adobe AIR SDK before 19.0.0.213 and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-7629 CVE-2015-7631 CVE-2015-7635 CVE-2015-7636 CVE-2015-7637 CVE-2015-7638 CVE-2015-7639 CVE-2015-7640 CVE-2015-7641 CVE-2015-7643 and CVE-2015-7644.


Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux Adobe AIR before 19.0.0.213 Adobe AIR SDK before 19.0.0.213 and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-7629 CVE-2015-7631 CVE-2015-7635 CVE-2015-7636 CVE-2015-7637 CVE-2015-7639 CVE-2015-7640 CVE-2015-7641 CVE-2015-7642 CVE-2015-7643 and CVE-2015-7644.


MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A local privilege escalation vulnerability was reported (fixed and publicly disclosed in 2015) in Lenovo System Update version 5.07.0008 and prior where the SUService.exe /type INF and INF_BY_COMPATIBLE_ID command types could allow a user to execute arbitrary code with elevated privileges.


Use-after-free vulnerability in a SaveAs feature in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13 Acrobat and Acrobat Reader DC Classic before 2015.006.30094 and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-5586 CVE-2015-6683 CVE-2015-6684 CVE-2015-6687 CVE-2015-6688 CVE-2015-6689 CVE-2015-6690 CVE-2015-6691 CVE-2015-7617 and CVE-2015-7621.


Persistent Accelerite Radia Client Automation (formerly HP Client Automation) possibly before 9.1 allows remote attackers to execute arbitrary code by sending unspecified commands in an environment that lacks relationship-based firewalling.


Mozilla Firefox before 43.0 does not properly store the properties of unboxed objects which allows remote attackers to execute arbitrary code via crafted JavaScript variable assignments.


Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux Adobe AIR before 18.0.0.199 Adobe AIR SDK before 18.0.0.199 and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-5127 CVE-2015-5130 CVE-2015-5134 CVE-2015-5539 CVE-2015-5540 CVE-2015-5550 CVE-2015-5551 CVE-2015-5556 CVE-2015-5557 CVE-2015-5559 CVE-2015-5561 CVE-2015-5564 and CVE-2015-5565.


Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux Adobe AIR before 18.0.0.199 Adobe AIR SDK before 18.0.0.199 and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-5127 CVE-2015-5130 CVE-2015-5134 CVE-2015-5539 CVE-2015-5540 CVE-2015-5550 CVE-2015-5551 CVE-2015-5557 CVE-2015-5559 CVE-2015-5561 CVE-2015-5563 CVE-2015-5564 and CVE-2015-5565.


Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12 Acrobat and Acrobat Reader DC Classic before 2015.006.30060 and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-4448 CVE-2015-5095 CVE-2015-5101 CVE-2015-5111 CVE-2015-5113 and CVE-2015-5114.


Techno Project Japan Enisys Gw before 1.4.1 allows remote authenticated users to write to arbitrary files and consequently execute arbitrary code via unspecified vectors.


Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12 Acrobat and Acrobat Reader DC Classic before 2015.006.30060 and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-4448 CVE-2015-5095 CVE-2015-5099 CVE-2015-5101 CVE-2015-5111 and CVE-2015-5113.


Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux Adobe AIR before 19.0.0.190 Adobe AIR SDK before 19.0.0.190 and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to execute arbitrary code by leveraging an unspecified \type confusion.\


Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12 Acrobat and Acrobat Reader DC Classic before 2015.006.30060 and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-4448 CVE-2015-5099 CVE-2015-5101 CVE-2015-5111 CVE-2015-5113 and CVE-2015-5114.


The Landing Pages plugin before 1.9.2 for WordPress allows remote attackers to execute arbitrary code via the url parameter.


Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13 Acrobat and Acrobat Reader DC Classic before 2015.006.30094 and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-6683 CVE-2015-6684 CVE-2015-6687 CVE-2015-6688 CVE-2015-6689 CVE-2015-6690 CVE-2015-6691 CVE-2015-7615 CVE-2015-7617 and CVE-2015-7621.


Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12 Acrobat and Acrobat Reader DC Classic before 2015.006.30060 and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-4448 CVE-2015-5095 CVE-2015-5099 CVE-2015-5111 CVE-2015-5113 and CVE-2015-5114.


Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux Adobe AIR before 18.0.0.199 Adobe AIR SDK before 18.0.0.199 and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-5127 CVE-2015-5130 CVE-2015-5134 CVE-2015-5540 CVE-2015-5550 CVE-2015-5551 CVE-2015-5556 CVE-2015-5557 CVE-2015-5559 CVE-2015-5561 CVE-2015-5563 CVE-2015-5564 and CVE-2015-5565.


Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux Adobe AIR before 18.0.0.199 Adobe AIR SDK before 18.0.0.199 and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-5127 CVE-2015-5134 CVE-2015-5539 CVE-2015-5540 CVE-2015-5550 CVE-2015-5551 CVE-2015-5556 CVE-2015-5557 CVE-2015-5559 CVE-2015-5561 CVE-2015-5563 CVE-2015-5564 and CVE-2015-5565.


Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux Adobe AIR before 18.0.0.199 Adobe AIR SDK before 18.0.0.199 and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-5127 CVE-2015-5130 CVE-2015-5539 CVE-2015-5540 CVE-2015-5550 CVE-2015-5551 CVE-2015-5556 CVE-2015-5557 CVE-2015-5559 CVE-2015-5561 CVE-2015-5563 CVE-2015-5564 and CVE-2015-5565.


** DISPUTED ** Elasticsearch before 1.6.1 allows remote attackers to execute arbitrary code via unspecified vectors involving the transport protocol. NOTE: ZDI appears to claim that CVE-2015-3253 and CVE-2015-5377 are the same vulnerability.


Apache ActiveMQ 5.x before 5.13.0 does not restrict the classes that can be serialized in the broker which allows remote attackers to execute arbitrary code via a crafted serialized Java Message Service (JMS) ObjectMessage object.


Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12 Acrobat and Acrobat Reader DC Classic before 2015.006.30060 and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-4448 CVE-2015-5095 CVE-2015-5099 CVE-2015-5101 CVE-2015-5113 and CVE-2015-5114.


The lazy_bdecode function in BitTorrent DHT bootstrap server (bootstrap-dht ) allows remote attackers to execute arbitrary code via a crafted packet related to \improper indexing.\


Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux Adobe AIR before 18.0.0.199 Adobe AIR SDK before 18.0.0.199 and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code by leveraging an unspecified \type confusion \ a different vulnerability than CVE-2015-5554 CVE-2015-5555 and CVE-2015-5558.


Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux Adobe AIR before 18.0.0.199 Adobe AIR SDK before 18.0.0.199 and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-5127 CVE-2015-5130 CVE-2015-5134 CVE-2015-5539 CVE-2015-5540 CVE-2015-5550 CVE-2015-5551 CVE-2015-5556 CVE-2015-5559 CVE-2015-5561 CVE-2015-5563 CVE-2015-5564 and CVE-2015-5565.


Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux Adobe AIR before 18.0.0.199 Adobe AIR SDK before 18.0.0.199 and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-5127 CVE-2015-5130 CVE-2015-5134 CVE-2015-5539 CVE-2015-5540 CVE-2015-5550 CVE-2015-5551 CVE-2015-5556 CVE-2015-5557 CVE-2015-5559 CVE-2015-5561 CVE-2015-5563 CVE-2015-5564 and CVE-2015-5565.


Unrestricted file upload vulnerability in upload.php in the Powerplay Gallery plugin 3.3 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension then accessing it via a direct request to the file in *_uploadfolder/big/.


Use-after-free vulnerability in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux Adobe AIR before 19.0.0.190 Adobe AIR SDK before 19.0.0.190 and Adobe AIR SDK & Compiler before 19.0.0.190 allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-5574 CVE-2015-5581 CVE-2015-5584 and CVE-2015-6682.


SuiteCRM before 7.2.3 allows remote attackers to execute arbitrary code.


Use-after-free vulnerability in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux Adobe AIR before 19.0.0.190 Adobe AIR SDK before 19.0.0.190 and Adobe AIR SDK & Compiler before 19.0.0.190 allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-5570 CVE-2015-5574 CVE-2015-5584 and CVE-2015-6682.


Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux Adobe AIR before 18.0.0.199 Adobe AIR SDK before 18.0.0.199 and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-5127 CVE-2015-5130 CVE-2015-5134 CVE-2015-5539 CVE-2015-5540 CVE-2015-5550 CVE-2015-5551 CVE-2015-5556 CVE-2015-5557 CVE-2015-5561 CVE-2015-5563 CVE-2015-5564 and CVE-2015-5565.


OpenStack Swift-on-File (aka Swiftonfile) does not properly restrict use of the pickle Python module when loading metadata which allows remote authenticated users to execute arbitrary code via a crafted extended attribute (xattrs).


Use-after-free vulnerability in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux Adobe AIR before 19.0.0.190 Adobe AIR SDK before 19.0.0.190 and Adobe AIR SDK & Compiler before 19.0.0.190 allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-5570 CVE-2015-5581 CVE-2015-5584 and CVE-2015-6682.


Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12 Acrobat and Acrobat Reader DC Classic before 2015.006.30060 and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-4448 CVE-2015-5095 CVE-2015-5099 CVE-2015-5101 CVE-2015-5111 and CVE-2015-5114.


Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux Adobe AIR before 18.0.0.199 Adobe AIR SDK before 18.0.0.199 and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-5127 CVE-2015-5130 CVE-2015-5134 CVE-2015-5539 CVE-2015-5540 CVE-2015-5550 CVE-2015-5556 CVE-2015-5557 CVE-2015-5559 CVE-2015-5561 CVE-2015-5563 CVE-2015-5564 and CVE-2015-5565.


PivotX before 2.3.11 does not validate the new file extension when renaming a file with multiple extensions which allows remote attackers to execute arbitrary code by uploading a crafted file as demonstrated by a file named foo.php.php.


Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux Adobe AIR before 18.0.0.199 Adobe AIR SDK before 18.0.0.199 and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code by leveraging an unspecified \type confusion \ a different vulnerability than CVE-2015-5554 CVE-2015-5558 and CVE-2015-5562.


IBM

Emptoris

Contract

Management

before

and

before

before

and

before

allows

remote

attackers

to

execute

arbitrary

code

by

including

a

crafted

Flash

file.


Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux Adobe AIR before 18.0.0.199 Adobe AIR SDK before 18.0.0.199 and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-5127 CVE-2015-5130 CVE-2015-5134 CVE-2015-5539 CVE-2015-5540 CVE-2015-5550 CVE-2015-5551 CVE-2015-5556 CVE-2015-5557 CVE-2015-5559 CVE-2015-5561 CVE-2015-5563 and CVE-2015-5565.


Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux Adobe AIR before 18.0.0.180 Adobe AIR SDK before 18.0.0.180 and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-3118 CVE-2015-3124 CVE-2015-3127 CVE-2015-3128 CVE-2015-3129 CVE-2015-3131 CVE-2015-3132 CVE-2015-3136 CVE-2015-3137 CVE-2015-4428 and CVE-2015-4430.


Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux Adobe AIR before 18.0.0.199 Adobe AIR SDK before 18.0.0.199 and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-5127 CVE-2015-5130 CVE-2015-5134 CVE-2015-5539 CVE-2015-5540 CVE-2015-5550 CVE-2015-5551 CVE-2015-5556 CVE-2015-5557 CVE-2015-5559 CVE-2015-5563 CVE-2015-5564 and CVE-2015-5565.


Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux Adobe AIR before 18.0.0.199 Adobe AIR SDK before 18.0.0.199 and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-5127 CVE-2015-5130 CVE-2015-5134 CVE-2015-5539 CVE-2015-5540 CVE-2015-5551 CVE-2015-5556 CVE-2015-5557 CVE-2015-5559 CVE-2015-5561 CVE-2015-5563 CVE-2015-5564 and CVE-2015-5565.


Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux Adobe AIR before 18.0.0.199 Adobe AIR SDK before 18.0.0.199 and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-5130 CVE-2015-5134 CVE-2015-5539 CVE-2015-5540 CVE-2015-5550 CVE-2015-5551 CVE-2015-5556 CVE-2015-5557 CVE-2015-5559 CVE-2015-5561 CVE-2015-5563 CVE-2015-5564 and CVE-2015-5565.


Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux Adobe AIR before 18.0.0.199 Adobe AIR SDK before 18.0.0.199 and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code by leveraging an unspecified \type confusion \ a different vulnerability than CVE-2015-5555 CVE-2015-5558 and CVE-2015-5562.


Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux Adobe AIR before 18.0.0.199 Adobe AIR SDK before 18.0.0.199 and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-5127 CVE-2015-5130 CVE-2015-5134 CVE-2015-5539 CVE-2015-5540 CVE-2015-5550 CVE-2015-5551 CVE-2015-5556 CVE-2015-5557 CVE-2015-5559 CVE-2015-5561 CVE-2015-5563 and CVE-2015-5564.


runner in Install.framework in the Install Framework Legacy component in Apple OS X before 10.10.5 does not properly drop privileges which allows attackers to execute arbitrary code in a privileged context via a crafted app.


Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux Adobe AIR before 18.0.0.199 Adobe AIR SDK before 18.0.0.199 and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-5127 CVE-2015-5130 CVE-2015-5134 CVE-2015-5539 CVE-2015-5550 CVE-2015-5551 CVE-2015-5556 CVE-2015-5557 CVE-2015-5559 CVE-2015-5561 CVE-2015-5563 CVE-2015-5564 and CVE-2015-5565.


HP StoreOnce Backup system software before 3.13.1 allows remote attackers to execute arbitrary code via unspecified vectors.


Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux Adobe AIR before 18.0.0.199 Adobe AIR SDK before 18.0.0.199 and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code by leveraging an unspecified \type confusion \ a different vulnerability than CVE-2015-5554 CVE-2015-5555 and CVE-2015-5562.


admin_messages.php in the management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users to execute arbitrary code by uploading a file with a safe extension and content type and then leveraging an improper Sudo configuration to make this a setuid-root file.


The Fortishield.sys driver in Fortinet FortiClient before 5.2.4 allows local users to execute arbitrary code with kernel privileges by setting the callback function in a (1) 0x220024 or (2) 0x220028 ioctl call.


The Qpid server on Red Hat Satellite 6 does not properly restrict message types which allows remote authenticated users with administrative access on a managed content host to execute arbitrary code via a crafted message related to a pickle processing problem in pulp.


Use-after-free vulnerability in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux Adobe AIR before 19.0.0.190 Adobe AIR SDK before 19.0.0.190 and Adobe AIR SDK & Compiler before 19.0.0.190 allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-5570 CVE-2015-5574 CVE-2015-5581 and CVE-2015-6682.


scripts/xzgrep.in in xzgrep 5.2.x before 5.2.0 before 5.0.0 does not properly process file names containing semicolons which allows remote attackers to execute arbitrary code by having a user run xzgrep on a crafted file name.


EMC Documentum Content Server before 6.7SP1 P32 6.7SP2 before P25 7.0 before P19 7.1 before P16 and 7.2 before P02 does not properly check authorization and does not properly restrict object types which allows remote authenticated users to run save RPC commands with super-user privileges and consequently execute arbitrary code via unspecified vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2514.


Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux Adobe AIR before 18.0.0.180 Adobe AIR SDK before 18.0.0.180 and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-3118 CVE-2015-3124 CVE-2015-3127 CVE-2015-3128 CVE-2015-3129 CVE-2015-3131 CVE-2015-3132 CVE-2015-3136 CVE-2015-3137 CVE-2015-4428 and CVE-2015-5117.


Multiple unspecified vulnerabilities in TIBCO Spotfire Client and Spotfire Web Player Client in Spotfire Analyst before 5.5.2 6.0.x before 6.0.3 6.5.x before 6.5.3 and 7.0.x before 7.0.1; Spotfire Analytics Platform for AWS 6.5 and 7.0.x before 7.0.1; Spotfire Automation Services before 5.5.2 6.0.x before 6.0.3 6.5.x before 6.5.3 and 7.0.x before 7.0.1; Spotfire Deployment Kit before 5.5.2 6.0.x before 6.0.3 6.5.x before 6.5.3 and 7.0.x before 7.0.1; Spotfire Desktop before 6.5.2 and 7.0.x before 7.0.1; Spotfire Desktop Language Packs 7.0.x before 7.0.1; Spotfire Professional before 5.5.2 6.0.x before 6.0.3 6.5.x before 6.5.3 and 7.0.x before 7.0.1; Spotfire Web Player before 5.5.2 6.0.x before 6.0.3 6.5.x before 6.5.3 and 7.0.x before 7.0.1; and Silver Fabric Enabler for Spotfire Web Player before 2.1.1 allow remote attackers to execute arbitrary code or obtain sensitive information via unknown vectors.


Use-after-free vulnerability in the XMLHttpRequest::Open implementation in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 might allow remote attackers to execute arbitrary code via a SharedWorker object that makes recursive calls to the open method of an XMLHttpRequest object.


The on-demand plugin in IBM Endpoint Manager for Remote Control 9.0.1 and 9.1.0 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors. IBM X-Force ID: 105196.


Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux Adobe AIR before 18.0.0.180 Adobe AIR SDK before 18.0.0.180 and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-3118 CVE-2015-3124 CVE-2015-3127 CVE-2015-3128 CVE-2015-3129 CVE-2015-3131 CVE-2015-3132 CVE-2015-3136 CVE-2015-3137 CVE-2015-4430 and CVE-2015-5117.


Use-after-free vulnerability in the CanvasRenderingContext2D implementation in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to execute arbitrary code by leveraging improper interaction between resize events and changes to Cascading Style Sheets (CSS) token sequences for a CANVAS element.


EMC Documentum Content Server before 6.7SP1 P32 6.7SP2 before P25 7.0 before P19 7.1 before P16 and 7.2 before P02 does not properly check authorization after creation of an object which allows remote authenticated users to execute arbitrary code with super-user privileges via a custom script. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2513.


The snapshot API in Elasticsearch before 1.6.0 when another application exists on the system that can read Lucene files and execute code from them is accessible by the attacker and the Java VM on which Elasticsearch is running can write to a location that the other application can read and execute from allows remote authenticated users to write to and create arbitrary snapshot metadata files and potentially execute arbitrary code.


mc_demux_mp4_ds.ax in an unspecified third-party codec demux in BlackBerry Link before 1.2.3.53 with installer before 1.1.0.22 allows remote attackers to execute arbitrary code via a crafted MP4 file.


Unrestricted file upload vulnerability in includes/upload.php in the Aviary Image Editor Add-on For Gravity Forms plugin 3.0 beta for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension then accessing it via a direct request to the file in wp-content/uploads/gform_aviary.


Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux Adobe AIR before 18.0.0.180 Adobe AIR SDK before 18.0.0.180 and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code by leveraging an unspecified \type confusion \ a different vulnerability than CVE-2015-3119 CVE-2015-3120 CVE-2015-3121 and CVE-2015-3122.


Unrestricted file upload vulnerability in the Job Fair (jobfair) extension before 1.0.1 for TYPO3 when using Apache with mod_mime allows remote attackers to execute arbitrary code by uploading a file with an executable extension then accessing it via a direct request to the file in the extension upload folder.


Use-after-free vulnerability in the HTMLVideoElement interface in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allows remote attackers to execute arbitrary code via crafted JavaScript code that modifies the URI table of a media element aka ZDI-CAN-3176.


Unrestricted file upload vulnerability in the Frontend User Upload (feupload) extension 0.5.0 and earlier for TYPO3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension using a frontend form then accessing it via a direct request to the file in the fileadmin folder.


The exception::getTraceAsString function in Zend/zend_exceptions.c in PHP before 5.4.40 5.5.x before 5.5.24 and 5.6.x before 5.6.8 allows remote attackers to execute arbitrary code via an unexpected data type related to a \type confusion\ issue.


Unrestricted file upload vulnerability in EMC Documentum WebTop 6.7SP1 before P31 6.7SP2 before P23 and 6.8 before P01; Documentum Administrator 6.7SP1 before P31 6.7SP2 before P23 7.0 before P18 7.1 before P15 and 7.2 before P01; Documentum Digital Assets Manager 6.5SP6 before P25; Documentum Web Publishers 6.5 SP7 before P25; and Documentum Task Space 6.7SP1 before P31 and 6.7SP2 before P23 allows remote authenticated users to execute arbitrary code by uploading a file to the backend Content Server.


The resource/endpoint for uploading files in the Services module 7.x-3.x before 7.x-3.12 for Drupal allows remote authenticated users with the \Save file information\ permission to execute arbitrary code via a crafted filename.


Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12 Acrobat and Acrobat Reader DC Classic before 2015.006.30060 and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-5095 CVE-2015-5099 CVE-2015-5101 CVE-2015-5111 CVE-2015-5113 and CVE-2015-5114.


The SoapClient::__call method in ext/soap/soap.c in PHP before 5.4.39 5.5.x before 5.5.23 and 5.6.x before 5.6.7 does not verify that __default_headers is an array which allows remote attackers to execute arbitrary code by providing crafted serialized data with an unexpected data type related to a \type confusion\ issue.


Java Method Server (JMS) in EMC Documentum Content Server before 6.7SP1 P32 6.7SP2 before P25 7.0 before P19 7.1 before P16 and 7.2 before P02 allows remote authenticated users to execute arbitrary code by forging a signature for a query string that lacks the method_verb parameter.


Use-after-free vulnerability in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android Adobe AIR SDK before 16.0.0.272 and Adobe AIR SDK & Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors.


IBM Tivoli IT Asset Management for IT Tivoli Service Request Manager and Change and Configuration Management Database 7.1 through 7.1.1.8 and 7.2 and Maximo Asset Management and Maximo Industry Solutions 7.1 through 7.1.1.8 7.5 before 7.5.0.7 IFIX003 and 7.6 before 7.6.0.0 IFIX002 allow remote authenticated users to execute arbitrary code via unspecified vectors.


Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 11.5.10.2 12.0.6 12.1.3 12.2.2 12.2.3 and 12.2.4 allows remote authenticated users to affect confidentiality integrity and availability via unknown vectors related to DB Privileges. NOTE: the previous information is from the January 2015 CPU. Oracle has not commented on the researcher's claim that the PUBLIC role is granted the INDEX privilege for the DUAL table during a \seeded install \ which allows remote authenticated users to gain SYSDBA privileges and execute arbitrary code.


Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-0313 CVE-2015-0315 CVE-2015-0320 and CVE-2015-0322.


Use-after-free vulnerability in Microsoft Office 2007 SP3 Excel 2007 SP3 PowerPoint 2007 SP3 Word 2007 SP3 Office 2010 SP2 Excel 2010 SP2 PowerPoint 2010 SP2 Word 2010 SP2 Office 2013 Gold and SP1 Word 2013 Gold and SP1 Office 2013 RT Gold and SP1 Word 2013 RT Gold and SP1 Excel Viewer Office Compatibility Pack SP3 Word Automation Services on SharePoint Server 2010 SP2 Excel Services on SharePoint Server 2013 Gold and SP1 Word Automation Services on SharePoint Server 2013 Gold and SP1 Web Applications 2010 SP2 Office Web Apps Server 2010 SP2 Web Apps Server 2013 Gold and SP1 SharePoint Server 2007 SP3 Windows SharePoint Services 3.0 SP3 SharePoint Foundation 2010 SP2 SharePoint Server 2010 SP2 SharePoint Foundation 2013 Gold and SP1 and SharePoint Server 2013 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted Office document aka \Microsoft Office Component Use After Free Vulnerability.\


Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a crafted XSLT extension in a (1) <x:parse> or (2) <x:transform> JSTL XML tag.


Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \type confusion \ a different vulnerability than CVE-2015-0317.


Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \type confusion \ a different vulnerability than CVE-2015-0336.


Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android Adobe AIR SDK before 16.0.0.272 and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to execute arbitrary code by leveraging an unspecified \type confusion.\


Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x 15.x and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote attackers to execute arbitrary code via unknown vectors as exploited in the wild in January 2015.


Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-0313 CVE-2015-0315 and CVE-2015-0322.


SYNCK GRAPHICA Mailform Pro CGI 4.1.4 and 4.1.5 when the mailauth module is enabled does not properly send e-mail messages which allows remote attackers to execute arbitrary code via unspecified vectors.


Use-after-free vulnerability in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-0341.


FastBack Mount in IBM Tivoli Storage Manager FastBack 6.1.x before 6.1.11.1 allows remote attackers to execute arbitrary code by connecting to the Mount port.


The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25 4.0.x before 4.0.25 4.1.x before 4.1.17 and 4.2.x before 4.2.0rc5 performs a free operation on an uninitialized stack pointer which allows remote attackers to execute arbitrary code via crafted Netlogon packets that use the ServerPasswordSet RPC API as demonstrated by packets reaching the _netr_ServerPasswordSet function in rpc_server/netlogon/srv_netlog_nt.c.


Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-0313 CVE-2015-0320 and CVE-2015-0322.


Multiple incomplete blacklist vulnerabilities in the avatar upload functionality in manageuser.php in Collabtive before 2.1 allow remote authenticated users to execute arbitrary code by uploading a file with a (1) .php3 (2) .php4 (3) .php5 or (4) .phtml extension.


Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-0359.


Unrestricted file upload vulnerability in admin/uploadImage.html in SearchBlox before 8.2 allows remote attackers to execute arbitrary code by uploading a file with an executable extension and the image/jpeg content type a different vulnerability than CVE-2013-3590.


KENT-WEB Joyful Note before 5.3 allows remote attackers to delete files or write to files and consequently execute arbitrary code via vectors involving an article.


Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \type confusion \ a different vulnerability than CVE-2015-0334.


The _mediaLibraryPlayCb function in mainwindow.py in pitivi before 0.95 allows attackers to execute arbitrary code via shell metacharacters in a file path.


Ektron Content Management System (CMS) 8.5 and 8.7 before 8.7sp2 and 9.0 before sp1 when the Saxon XSLT parser is used allows remote attackers to execute arbitrary code via a crafted XSLT document related to a \resource injection\ issue.


Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute arbitrary code via unspecified vectors as exploited in the wild in February 2015 a different vulnerability than CVE-2015-0315 CVE-2015-0320 and CVE-2015-0322.


Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-0349 CVE-2015-0351 and CVE-2015-3039.


The Debian build procedure for the smokeping package in wheezy before 2.6.8-2+deb7u1 and jessie before 2.6.9-1+deb8u1 does not properly configure the way Apache httpd passes arguments to smokeping_cgi which allows remote attackers to execute arbitrary code via crafted CGI arguments.


Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-0313 CVE-2015-0315 and CVE-2015-0320.


The client in iPass Open Mobile before 2.4.5 on Windows allows remote authenticated users to execute arbitrary code via a DLL pathname in a crafted Unicode string that is improperly handled by a subprocess reached through a named pipe as demonstrated by a UNC share pathname.


Unrestricted file upload vulnerability in the Custom Prompts upload implementation in Cisco Unified MeetingPlace 8.6(1.9) allows remote authenticated users to execute arbitrary code by using the languageShortName parameter to upload a file that provides shell access aka Bug ID CSCus95712.


Multiple use-after-free vulnerabilities in ext/date/php_date.c in PHP before 5.4.38 5.5.x before 5.5.22 and 5.6.x before 5.6.6 allow remote attackers to execute arbitrary code via crafted serialized input containing a (1) R or (2) r type specifier in (a) DateTimeZone data handled by the php_date_timezone_initialize_from_hash function or (b) DateTime data handled by the php_date_initialize_from_hash function.


Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code by leveraging an unspecified \type confusion \ a different vulnerability than CVE-2015-0319.


EMC Unisphere for VMAX 8.x before 8.0.3.4 sets up the Java Debugging Wire Protocol (JDWP) service which allows remote attackers to execute arbitrary code via unspecified vectors.


Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-0346.


Use-after-free vulnerability in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-0342.


The asm.js implementation in Mozilla Firefox before 36.0.3 Firefox ESR 31.x before 31.5.2 and SeaMonkey before 2.33.1 does not properly determine the cases in which bounds checking may be safely skipped during JIT compilation and heap access which allows remote attackers to read or write to unintended memory locations and consequently execute arbitrary code via crafted JavaScript.


Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-0351 CVE-2015-0358 and CVE-2015-3039.


Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-0349 CVE-2015-0358 and CVE-2015-3039.


The Git plugin for FusionForge before 6.0rc4 allows remote attackers to execute arbitrary code via an unspecified parameter when creating a secondary Git repository.


Common LaTeX Service Interface (CLSI) before 0.1.3 as used in ShareLaTeX before 0.1.3 allows remote authenticated users to execute arbitrary code via ` (backtick) characters in a filename.


Cisco Unified Communications Domain Manager 8.1(4) allows remote authenticated users to execute arbitrary code by visiting a \deprecated page \ aka Bug ID CSCup90168.


Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.37 5.5.x before 5.5.21 and 5.6.x before 5.6.5 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate numerical keys within the serialized properties of an object. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-8142.


A successful exploit of these vulnerabilities requires the local user to load a crafted DLL file in the system directory on servers running Schneider Electric OFS v3.5 with version v7.40 of SCADA Expert Vijeo Citect/CitectSCADA OFS v3.5 with version v7.30 of Vijeo Citect/CitectSCADA and OFS v3.5 with version v7.20 of Vijeo Citect/CitectSCADA.. If the application attempts to open that file the application could crash or allow the attacker to execute arbitrary code. Schneider Electric recommends vulnerable users upgrade the OFS to V3.5 and install the latest service pack (SP 6 or newer) for their associated version.


The httpd package in fli4l before 3.10.1 and 4.0 before 2015-01-30 allows remote attackers to execute arbitrary code.


Red Hat Gluster Storage RPM Package 3.2 allows local users to gain privileges and execute arbitrary code as root.


Unrestricted file upload vulnerability in asys/site/files.php in Adminsystems CMS before 4.0.2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension then accessing it via a direct request to the file in upload/files/.


The combination filter Groovy script in Jenkins before 1.600 and LTS before 1.596.1 allows remote authenticated users with job configuration permission to gain privileges and execute arbitrary code on the master via unspecified vectors.


Microsoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted Office document aka \Microsoft Office Uninitialized Memory Use Vulnerability.\


The Audio Drivers subsystem in Apple iOS before 8.3 and Apple TV before 7.2 does not properly validate IOKit object metadata which allows attackers to execute arbitrary code in a privileged context via a crafted app.


Use-after-free vulnerability in Microsoft Word 2007 SP3 Office 2010 SP2 Word 2010 SP2 Word Viewer Office Compatibility Pack SP3 Word Automation Services on SharePoint Server 2010 SP2 and Office Web Apps Server 2010 SP2 allows remote attackers to execute arbitrary code via a crafted Office document aka \Microsoft Office Component Use After Free Vulnerability.\


Multiple integer underflows in the ESDS::parseESDescriptor function in ESDS.cpp in libstagefright in Android before 5.1.1 LMY48I allow remote attackers to execute arbitrary code via crafted ESDS atoms aka internal bug 20139950 a related issue to CVE-2015-4493.


Microsoft SharePoint Server 2007 SP3 SharePoint Foundation 2010 SP2 SharePoint Server 2010 SP2 and SharePoint Foundation 2013 SP1 allow remote authenticated users to execute arbitrary code via crafted page content aka \Microsoft SharePoint Page Content Vulnerabilities.\


The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to ping.ccp.


The

Windows

DirectWrite

library

as

used

in

Microsoft

.NET

Framework

and

Office

and

Live

Meeting

Console;

Lync

Lync

Attendee;

Lync

Lync

Basic

Silverlight

before

and

Silverlight

Developer

Runtime

before

allows

remote

attackers

to

execute

arbitrary

code

via

a

crafted

TrueType

font

aka

\TrueType

Font

Parsing

Vulnerability.\


Google Chrome before 41.0.2272.118 does not properly handle the interaction of IPC the Gamepad API and Google V8 which allows remote attackers to execute arbitrary code via unspecified vectors.


The factory.loadExtensionFactory function in TSUnicodeGraphEditorControl in SolarWinds Server and Application Monitor (SAM) allow remote attackers to execute arbitrary code via a UNC path to a crafted binary.


Movable Type Pro Open Source and Advanced before 5.2.12 and Pro and Advanced 6.0.x before 6.0.7 does not properly use the Perl Storable::thaw function which allows remote attackers to include and execute arbitrary local Perl files and possibly execute arbitrary code via unspecified vectors.


Use-after-free vulnerability in Microsoft Common Controls in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 allows user-assisted remote attackers to execute arbitrary code via a crafted web site that is accessed with the F12 Developer Tools feature of Internet Explorer aka \Microsoft Common Control Use After Free Vulnerability.\


Use-after-free vulnerability in Microsoft Word 2007 SP3 Office 2010 SP2 Word 2010 SP2 Word 2013 SP1 Word 2013 RT SP1 Word Viewer Office Compatibility Pack SP3 Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1 and Office Web Apps Server 2010 SP2 and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted Office document aka \Microsoft Office Component Use After Free Vulnerability.\


Google Chrome before 44.0.2403.89 does not ensure that the auto-open list omits all dangerous file types which makes it easier for remote attackers to execute arbitrary code by providing a crafted file and leveraging a user's previous \Always open files of this type\ choice related to download_commands.cc and download_prefs.cc.


Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-3103 and CVE-2015-3106.


Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux Adobe AIR before 18.0.0.180 Adobe AIR SDK before 18.0.0.180 and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-3118 CVE-2015-3124 CVE-2015-3127 CVE-2015-3128 CVE-2015-3129 CVE-2015-3131 CVE-2015-3132 CVE-2015-3137 CVE-2015-4428 CVE-2015-4430 and CVE-2015-5117.


The UI daemon in Apache Storm 0.10.0 before 0.10.0-beta1 allows remote attackers to execute arbitrary code via unspecified vectors.


Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux Adobe AIR before 18.0.0.180 Adobe AIR SDK before 18.0.0.180 and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-3118 CVE-2015-3124 CVE-2015-3127 CVE-2015-3128 CVE-2015-3129 CVE-2015-3131 CVE-2015-3136 CVE-2015-3137 CVE-2015-4428 CVE-2015-4430 and CVE-2015-5117.


Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-3106 and CVE-2015-3107.


Integer underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in mediaserver in Android before 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted MPEG-4 data aka internal bug 23034759. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-3824.


The installer in NetApp OnCommand Workflow Automation before 2.2.1P1 and 3.x before 3.0P1 sets up the Java Debugging Wire Protocol (JDWP) service which allows remote attackers to execute arbitrary code via unspecified vectors.


The

class

in

in

Android

before

improperly

includes

certain

context

data

during

serialization

and

deserialization

which

allows

attackers

to

execute

arbitrary

code

via

an

application

that

sends

a

crafted

Intent

aka

internal

bug


Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux Adobe AIR before 17.0.0.172 Adobe AIR SDK before 17.0.0.172 and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code by leveraging an unspecified \type confusion \ a different vulnerability than CVE-2015-3077 and CVE-2015-3084.


The Region_createFromParcel function in core/jni/android/graphics/Region.cpp in Region in Android before 5.1.1 LMY48M does not check the return values of certain read operations which allows attackers to execute arbitrary code via an application that sends a crafted message to a service aka internal bug 21585255.


Samsung Security Manager (SSM) before 1.31 allows remote attackers to execute arbitrary code by uploading a file with an HTTP (1) PUT or (2) MOVE request.


Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux Adobe AIR before 18.0.0.180 Adobe AIR SDK before 18.0.0.180 and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code by leveraging an unspecified \type confusion \ a different vulnerability than CVE-2015-3119 CVE-2015-3120 CVE-2015-3121 and CVE-2015-4433.


Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux Adobe AIR before 17.0.0.172 Adobe AIR SDK before 17.0.0.172 and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code by leveraging an unspecified \type confusion \ a different vulnerability than CVE-2015-3084 and CVE-2015-3086.


The Telephony subsystem in Apple iOS before 8.4 allows physically proximate attackers to execute arbitrary code via a crafted (1) SIM or (2) UIM card.


Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-0349 CVE-2015-0351 and CVE-2015-0358.


Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux Adobe AIR before 18.0.0.180 Adobe AIR SDK before 18.0.0.180 and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-3118 CVE-2015-3124 CVE-2015-3128 CVE-2015-3129 CVE-2015-3131 CVE-2015-3132 CVE-2015-3136 CVE-2015-3137 CVE-2015-4428 CVE-2015-4430 and CVE-2015-5117.


Unrestricted file upload vulnerability in the (1) myAccount (2) projects (3) tasks (4) tickets (5) discussions (6) reports and (7) scheduler pages in qdPM 8.3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension then accessing it via a direct request to the file in uploads/attachments/ or uploads/users/.


Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Adobe AIR SDK & Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-3103 and CVE-2015-3107.


Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-3054 CVE-2015-3055 CVE-2015-3059 and CVE-2015-3075.


Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux Adobe AIR before 18.0.0.180 Adobe AIR SDK before 18.0.0.180 and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-3118 CVE-2015-3124 CVE-2015-3127 CVE-2015-3128 CVE-2015-3129 CVE-2015-3131 CVE-2015-3132 CVE-2015-3136 CVE-2015-4428 CVE-2015-4430 and CVE-2015-5117.


The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between read lengths and write lengths which might allow guest OS users to execute arbitrary code on the host OS by triggering use of an invalid index.


Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-3053 CVE-2015-3054 CVE-2015-3055 and CVE-2015-3075.


Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux Adobe AIR before 18.0.0.180 Adobe AIR SDK before 18.0.0.180 and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code by leveraging an unspecified \type confusion \ a different vulnerability than CVE-2015-3119 CVE-2015-3120 CVE-2015-3122 and CVE-2015-4433.


Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux Adobe AIR before 18.0.0.180 Adobe AIR SDK before 18.0.0.180 and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-3118 CVE-2015-3124 CVE-2015-3127 CVE-2015-3128 CVE-2015-3131 CVE-2015-3132 CVE-2015-3136 CVE-2015-3137 CVE-2015-4428 CVE-2015-4430 and CVE-2015-5117.


Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux Adobe AIR before 18.0.0.180 Adobe AIR SDK before 18.0.0.180 and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-3124 CVE-2015-3127 CVE-2015-3128 CVE-2015-3129 CVE-2015-3131 CVE-2015-3132 CVE-2015-3136 CVE-2015-3137 CVE-2015-4428 CVE-2015-4430 and CVE-2015-5117.


Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-3053 CVE-2015-3054 CVE-2015-3059 and CVE-2015-3075.


Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux Adobe AIR before 18.0.0.180 Adobe AIR SDK before 18.0.0.180 and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-3118 CVE-2015-3124 CVE-2015-3127 CVE-2015-3128 CVE-2015-3129 CVE-2015-3132 CVE-2015-3136 CVE-2015-3137 CVE-2015-4428 CVE-2015-4430 and CVE-2015-5117.


runner in Install.framework in the Install Framework Legacy subsystem in Apple OS X before 10.10.4 does not properly drop privileges which allows attackers to execute arbitrary code in a privileged context via a crafted app.


libstagefright in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a (1) MP3 or (2) MP4 file.


syscheck/seechanges.c in OSSEC 2.7 through 2.8.1 on NIX systems allows local users to execute arbitrary code as root.


The Monitor Control Command Set kernel extension in the Display Drivers subsystem in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context via a crafted app that leverages control of a function pointer.


Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux Adobe AIR before 18.0.0.180 Adobe AIR SDK before 18.0.0.180 and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-3118 CVE-2015-3124 CVE-2015-3127 CVE-2015-3129 CVE-2015-3131 CVE-2015-3132 CVE-2015-3136 CVE-2015-3137 CVE-2015-4428 CVE-2015-4430 and CVE-2015-5117.


Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux Adobe AIR before 18.0.0.180 Adobe AIR SDK before 18.0.0.180 and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code by leveraging an unspecified \type confusion \ a different vulnerability than CVE-2015-3120 CVE-2015-3121 CVE-2015-3122 and CVE-2015-4433.


Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-3053 CVE-2015-3055 CVE-2015-3059 and CVE-2015-3075.


systemstatsd in the System Stats subsystem in Apple OS X before 10.10.4 does not properly interpret data types encountered in interprocess communication which allows attackers to execute arbitrary code with systemstatsd privileges via a crafted app related to a \type confusion\ issue.


Use-after-free vulnerability in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux Adobe AIR before 17.0.0.172 Adobe AIR SDK before 17.0.0.172 and Adobe AIR SDK & Compiler before 17.0.0.172 allows attackers to execute arbitrary code via unspecified vectors.


Unrestricted file upload vulnerability in h5ai before 0.25.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension then accessing it via a direct request to the file in the directory specified by the href parameter.


Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux Adobe AIR before 18.0.0.180 Adobe AIR SDK before 18.0.0.180 and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-3118 CVE-2015-3127 CVE-2015-3128 CVE-2015-3129 CVE-2015-3131 CVE-2015-3132 CVE-2015-3136 CVE-2015-3137 CVE-2015-4428 CVE-2015-4430 and CVE-2015-5117.


Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux Adobe AIR before 17.0.0.172 Adobe AIR SDK before 17.0.0.172 and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code by leveraging an unspecified \type confusion \ a different vulnerability than CVE-2015-3077 and CVE-2015-3086.


Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux Adobe AIR before 18.0.0.180 Adobe AIR SDK before 18.0.0.180 and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code by leveraging an unspecified \type confusion \ a different vulnerability than CVE-2015-3119 CVE-2015-3121 CVE-2015-3122 and CVE-2015-4433.


Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-3053 CVE-2015-3054 CVE-2015-3055 and CVE-2015-3059.


The JMX RMI service in VMware vCenter Server 5.0 before u3e 5.1 before u3b 5.5 before u3 and 6.0 before u1 does not restrict registration of MBeans which allows remote attackers to execute arbitrary code via the RMI protocol.


Use-after-free vulnerability in the CSPService::ShouldLoad function in the microtask implementation in Mozilla Firefox before 39.0 Firefox ESR 38.x before 38.1 and Thunderbird before 38.1 allows remote attackers to execute arbitrary code by leveraging client-side JavaScript that triggers removal of a DOM object on the basis of a Content Policy.


userlogin.jsp in SolarWinds Firewall Security Manager (FSM) before 6.6.5 HotFix1 allows remote attackers to gain privileges and execute arbitrary code via unspecified vectors related to client session handling.


ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT Gold and 8.1 and Windows 10 allows remote attackers to execute arbitrary code via a crafted OpenType font aka \OpenType Font Parsing Vulnerability \ a different vulnerability than CVE-2015-2458 and CVE-2015-2461.


Unrestricted file upload vulnerability in sam-ajax-admin.php in the Simple Ads Manager plugin before 2.5.96 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension then accessing it via a direct request to the file in the directory specified by the path parameter.


Integer underflow in Microsoft Office 2007 SP3 Office 2010 SP2 Office 2013 SP1 Office 2013 RT SP1 Office for Mac 2011 and Word Viewer allows remote attackers to execute arbitrary code via a crafted document aka \Microsoft Office Integer Underflow Vulnerability.\


Windows Journal in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT Gold and 8.1 and Windows 10 allows remote attackers to execute arbitrary code via a crafted .jnt file aka \Windows Journal RCE Vulnerability \ a different vulnerability than CVE-2015-2513 and CVE-2015-2530.


The PJSIP PJSUA2 SDK before SVN Changeset 51322 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable class that improperly passes an attacker-controlled pointer to a native function.


Unrestricted file upload vulnerability on Seagate GoFlex Satellite Seagate Wireless Mobile Storage Seagate Wireless Plus Mobile Storage and LaCie FUEL devices with firmware before 3.4.1.105 allows remote attackers to execute arbitrary code by uploading a file to /media/sda2 during a Wi-Fi session.


PDF.js in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 enables excessive privileges for internal Workers which might allow remote attackers to execute arbitrary code by leveraging a Same Origin Policy bypass.


Microsoft

Windows

Vista

Windows

Server

and

Windows

Windows

Windows

Windows

Server

Gold

and

Windows

RT

Gold

and

Windows

Office

and

Live

Meeting

Console

Lync

Lync

Attendee

Lync

Lync

Basic

Silverlight

before

and

.NET

Framework

and

allow

remote

attackers

to

execute

arbitrary

code

via

a

crafted

TrueType

font

aka

\TrueType

Font

Parsing

Vulnerability

a

different

vulnerability

than


Microsoft

Windows

Vista

Windows

Server

and

Windows

Windows

Windows

Windows

Server

Gold

and

Windows

RT

Gold

and

Office

and

Live

Meeting

Console

Lync

Lync

Attendee

Lync

Lync

Basic

Silverlight

before

and

.NET

Framework

and

allow

remote

attackers

to

execute

arbitrary

code

via

a

crafted

TrueType

font

aka

\TrueType

Font

Parsing

Vulnerability

a

different

vulnerability

than


Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.39 5.5.x before 5.5.23 and 5.6.x before 5.6.7 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages use of the unset function within an __wakeup function a related issue to CVE-2015-0231.


Accellion File Transfer Appliance before FTA_9_11_210 allows remote attackers to execute arbitrary code via shell metacharacters in the oauth_token parameter.


ATMFD.DLL

in

the

Windows

Adobe

Type

Manager

Library

in

Microsoft

Windows

Vista

Windows

Server

and

Windows

Windows

Windows

Windows

Server

Gold

and

Windows

RT

Gold

and

and

.NET

Framework

and

allows

remote

attackers

to

execute

arbitrary

code

via

a

crafted

OpenType

font

aka

\OpenType

Font

Parsing

Vulnerability.\


Hyper-V in Microsoft Windows Server 2008 SP2 and R2 SP1 Windows 8 Windows 8.1 and Windows Server 2012 Gold and R2 does not properly initialize guest OS system data structures which allows guest OS users to execute arbitrary code on the host OS by leveraging guest OS privileges aka \Hyper-V System Data Structure Vulnerability.\


Windows Journal in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT Gold and 8.1 and Windows 10 allows remote attackers to execute arbitrary code via a crafted .jnt file aka \Windows Journal RCE Vulnerability \ a different vulnerability than CVE-2015-2513 and CVE-2015-2514.


Unrestricted file upload vulnerability in ChangePhoto.jsp in SysAid Help Desk before 15.2 allows remote administrators to execute arbitrary code by uploading a file with a .jsp extension then accessing it via a direct request to the file in icons/user_photo/.


ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted OpenType font aka \OpenType Font Parsing Vulnerability.\


ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT Gold and 8.1 and Windows 10 allows remote attackers to execute arbitrary code via a crafted OpenType font aka \OpenType Font Parsing Vulnerability \ a different vulnerability than CVE-2015-2458 and CVE-2015-2459.


Windows Media Center in Microsoft Windows Vista SP2 Windows 7 SP1 Windows 8 and Windows 8.1 allows user-assisted remote attackers to execute arbitrary code via a crafted Media Center link (mcl) file aka \Windows Media Center RCE Vulnerability.\


Unrestricted file upload vulnerability in go_audiostore.php in the audiostore (Voice Files) upload functionality in GoAutoDial GoAdmin CE 3.x before 3.3-1421902800 allows remote attackers to execute arbitrary code by uploading a file with an executable extension then accessing it via a direct request to the file in sounds/.


ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT Gold and 8.1 and Windows 10 allows remote attackers to execute arbitrary code via a crafted OpenType font aka \OpenType Font Parsing Vulnerability \ a different vulnerability than CVE-2015-2459 and CVE-2015-2461.


The ESRI ArcGis Runtime SDK before 10.2.6-2 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable class that improperly passes an attacker-controlled pointer to a native function.


Use-after-free vulnerability in Windows Shell in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT Gold and 8.1 and Windows 10 allows remote attackers to execute arbitrary code via a crafted toolbar object aka \Toolbar Use After Free Vulnerability.\


Unspecified vulnerability in HP Easy Deploy as distributed standalone and in HP Easy Tools before 3.0.1.1650 on HP Thin Client t5540 t5740 and t5740e devices and HP Flexible Thin Client t510 t520 t610 t620 and t820 devices allows remote authenticated users to execute arbitrary code via unknown vectors.


Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 allows remote attackers to execute arbitrary code via vectors involving attachment of an XMLHttpRequest object to a shared worker.


Use-after-free vulnerability in the Tablet Input Band in Windows Shell in Microsoft Windows Vista SP2 and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site aka \Microsoft Tablet Input Band Use After Free Vulnerability.\


TPInt.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1 VMware Player 6.x before 6.0.6 and 7.x before 7.1.1 and VMware Horizon Client 3.2.x before 3.2.1 3.3.x and 5.x local-mode before 5.4.2 on Windows does not properly allocate memory which allows guest OS users to execute arbitrary code on the host OS via unspecified vectors.


Microsoft

Windows

Vista

Windows

Server

and

Windows

Windows

Windows

Windows

Server

Gold

and

Windows

RT

Gold

and

Office

and

Live

Meeting

Console

Lync

Lync

Attendee

Lync

Lync

Basic

Silverlight

before

and

.NET

Framework

and

allow

remote

attackers

to

execute

arbitrary

code

via

a

crafted

TrueType

font

aka

\TrueType

Font

Parsing

Vulnerability

a

different

vulnerability

than


The ec_ajax_update_option and ec_ajax_clear_all_taxrates functions in inc/admin/admin_ajax_functions.php in the WP EasyCart plugin 1.1.30 through 3.0.20 for WordPress allow remote attackers to gain administrator privileges and execute arbitrary code via the option_name and option_value parameters.


Webservice-DIC yoyaku_v41 allows remote attackers to create arbitrary files and consequently execute arbitrary code via unspecified vectors.


Windows Journal in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT Gold and 8.1 and Windows 10 allows remote attackers to execute arbitrary code via a crafted .jnt file aka \Windows Journal RCE Vulnerability \ a different vulnerability than CVE-2015-2514 and CVE-2015-2530.


The GraceNote GNSDK SDK before SVN Changeset 1.1.7 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable class that improperly passes an attacker-controlled pointer to a native function.


The Jumio SDK before 1.5.0 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable class that improperly passes an attacker-controlled pointer to a native function.


The help window in Epicor CRS Retail Store before 3.2.03.01.008 allows local users to execute arbitrary code by injecting Javascript into the window source to create a button that spawns a command shell.


Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 allows remote attackers to execute arbitrary code via vectors involving attachment of an XMLHttpRequest object to a dedicated worker.


Unrestricted file upload vulnerability in the fusion_options function in functions.php in the Fusion theme 3.1 for Wordpress allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension in a fusion_save action then accessing it via unspecified vectors.


** DISPUTED ** Mobile Devices (aka MDI) C4 OBD-II dongles with firmware 2.x and 3.4.x as used in Metromile Pulse and other products do not validate firmware updates which allows remote attackers to execute arbitrary code by specifying an update server. NOTE: the vendor states \This was a flaw for the developer/debugging devices and was fixed in production version about 3 years ago.\


The MetaIO SDK before 6.0.2.1 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable class that improperly passes an attacker-controlled pointer to a native function.


The AnnotationX.AnnList.1 ActiveX control in Agilent Technologies Feature Extraction allows remote attackers to execute arbitrary code via a crafted object parameter in the Insert function related to \Index Out-Of-Bounds.\


Unspecified vulnerability in HP Easy Deploy as distributed standalone and in HP Easy Tools before 3.0.1.1650 on HP Thin Client t5540 t5740 and t5740e devices and HP Flexible Thin Client t510 t520 t610 t620 and t820 devices allows remote attackers to execute arbitrary code via unknown vectors.


Microsoft

Windows

Vista

Windows

Server

and

Windows

Windows

Windows

Windows

Server

Gold

and

Windows

RT

Gold

and

Windows

Office

and

Live

Meeting

Console

Lync

Lync

Attendee

Lync

Lync

Basic

and

Silverlight

before

allow

remote

attackers

to

execute

arbitrary

code

via

a

crafted

TrueType

font

aka

\TrueType

Font

Parsing

Vulnerability.\


CGI RESCUE BloBee 1.20 and earlier allows remote attackers to write to arbitrary files and consequently execute arbitrary code via unspecified vectors.


TPView.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1 VMware Player 6.x before 6.0.6 and 7.x before 7.1.1 and VMware Horizon Client 3.2.x before 3.2.1 3.3.x and 5.x local-mode before 5.4.2 on Windows does not properly allocate memory which allows guest OS users to execute arbitrary code on the host OS via unspecified vectors a different vulnerability than CVE-2012-0897.


Huawei OceanStor UDS devices with software before V100R002C01SPC102 might allow remote attackers to execute arbitrary code with root privileges via a crafted UDS patch with shell scripts.


Citrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 does not properly restrict access to the Advent Java Management Extensions (JMX) Servlet which allows remote attackers to execute arbitrary code via unspecified vectors to servlets/Jmx_dynamic.


HP TippingPoint Security Management System (SMS) and TippingPoint Virtual Security Management System (vSMS) before 4.1 patch 3 and 4.2 before patch 1 do not require authentication for JBoss RMI requests which allows remote attackers to execute arbitrary code by (1) uploading this code within an archive or (2) instantiating a class.


ATMFD.DLL

in

the

Windows

Adobe

Type

Manager

Library

in

Microsoft

Windows

Vista

Windows

Server

and

Windows

Windows

Windows

Windows

Server

Gold

and

Windows

RT

Gold

and

Windows

and

.NET

Framework

and

allows

remote

attackers

to

execute

arbitrary

code

via

a

crafted

OpenType

font

aka

\OpenType

Font

Parsing

Vulnerability.\


The MyScript SDK before 1.3 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable class that improperly passes an attacker-controlled pointer to a native function.


Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux Adobe AIR before 20.0.0.233 Adobe AIR SDK before 20.0.0.233 and Adobe AIR SDK & Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-8634 CVE-2015-8635 CVE-2015-8638 CVE-2015-8639 CVE-2015-8640 CVE-2015-8641 CVE-2015-8643 CVE-2015-8646 CVE-2015-8647 CVE-2015-8648 CVE-2015-8649 and CVE-2015-8650.


Use-after-free

vulnerability

in

Adobe

Flash

Player

before

and

and

before

on

Windows

and

OS

X

and

before

on

Linux

Adobe

AIR

before

Adobe

AIR

SDK

before

and

Adobe

AIR

SDK

Compiler

before

allows

attackers

to

execute

arbitrary

code

via

unspecified

vectors

a

different

vulnerability

than

and


Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux Adobe AIR before 20.0.0.233 Adobe AIR SDK before 20.0.0.233 and Adobe AIR SDK & Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-8634 CVE-2015-8635 CVE-2015-8639 CVE-2015-8640 CVE-2015-8641 CVE-2015-8642 CVE-2015-8643 CVE-2015-8646 CVE-2015-8647 CVE-2015-8648 CVE-2015-8649 and CVE-2015-8650.


Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux Adobe AIR before 19.0.0.241 Adobe AIR SDK before 19.0.0.241 and Adobe AIR SDK & Compiler before 19.0.0.241 allows attackers to execute arbitrary code via unspecified vectors a different vulnerability than CVE-2015-7651 CVE-2015-7652 CVE-2015-7653 CVE-2015-7654 CVE-2015-7655 CVE-2015-7656 CVE-2015-7657 CVE-2015-7658 CVE-2015-7660 CVE-2015-7661 CVE-2015-7663 CVE-2015-8042 CVE-2015-8044 and CVE-2015-8046.


Samsung SmartViewer allows remote attackers to execute arbitrary code via unspecified vectors to the (1) DVRSetupSave method in the STWAxConfig control or (2) SendCustomPacket method in the STWAxConfigNVR control which trigger an untrusted pointer dereference.


Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux Adobe AIR before 20.0.0.204 Adobe AIR SDK before 20.0.0.204 and Adobe AIR SDK & Compiler before 20.0.0.204 allow attackers to execute arbitrary code by leveraging an unspecified \type confusion \ a different vulnerability than CVE-2015-8439.