Vulnerability CVE-2014-4671

Vulnerability Name:

CVE-2014-4671 (CCN-94318)

Assigned:

2014-07-08

Published:

2014-07-08

Updated:

2015-09-22

Summary:

Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows and OS X and before 11.2.202.394 on Linux, Adobe AIR before 14.0.0.137 on Android, Adobe AIR SDK before 14.0.0.137, and Adobe AIR SDK & Compiler before 14.0.0.137 do not properly restrict the SWF file format, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks against JSONP endpoints, and obtain sensitive information, via a crafted OBJECT element with SWF content satisfying the character-set requirements of a callback API.

CVSS v3 Severity:

5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): Low Availibility (A): None

CVSS v2 Severity:

4.3 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N)
3.7 Low (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N/E:H/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): None Availibility (A): None

4.3 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N)
3.7 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N/E:H/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): Partial Availibility (A): None

4.3 Medium (REDHAT CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N)
3.7 Low (REDHAT Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N/E:H/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): Partial Availibility (A): None

Vulnerability Type:

CWE-352

Vulnerability Consequences:

Gain Access

References:

Source: MITRE
Type: CNA
CVE-2014-4671

Source: CCN
Type: APSB14-17
Security updates available for Adobe Flash Player

Source: CONFIRM
Type: Vendor Advisory
http://helpx.adobe.com/security/products/flash-player/apsb14-17.html

Source: MISC
Type: Exploit
http://miki.it/blog/2014/7/8/abusing-jsonp-with-rosetta-flash/

Source: CCN
Type: RHSA-2014-0860
Critical: flash-plugin security update

Source: REDHAT
Type: UNKNOWN
RHSA-2014:0860

Source: SECUNIA
Type: UNKNOWN
59774

Source: SECUNIA
Type: UNKNOWN
59837

Source: GENTOO
Type: UNKNOWN
GLSA-201407-02

Source: BID
Type: UNKNOWN
68457

Source: CCN
Type: BID-68457
Adobe Flash Player and AIR CVE-2014-4671 Unspecified Security Vulnerability

Source: SECTRACK
Type: UNKNOWN
1030533

Source: XF
Type: UNKNOWN
adobe-flash-cve20144671-csrf(94318)

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2014-4671

Vulnerable Configuration:

Configuration 1:

cpe:/a:adobe:flash_player:11.2.202.223:*:*:*:*:*:*:*

OR cpe:/a:adobe:flash_player:11.2.202.228:*:*:*:*:*:*:*

OR cpe:/a:adobe:flash_player:11.2.202.233:*:*:*:*:*:*:*

OR cpe:/a:adobe:flash_player:11.2.202.235:*:*:*:*:*:*:*

OR cpe:/a:adobe:flash_player:11.2.202.236:*:*:*:*:*:*:*

OR cpe:/a:adobe:flash_player:11.2.202.238:*:*:*:*:*:*:*

OR cpe:/a:adobe:flash_player:11.2.202.243:*:*:*:*:*:*:*

OR cpe:/a:adobe:flash_player:11.2.202.251:*:*:*:*:*:*:*

OR cpe:/a:adobe:flash_player:11.2.202.258:*:*:*:*:*:*:*

OR cpe:/a:adobe:flash_player:11.2.202.261:*:*:*:*:*:*:*

OR cpe:/a:adobe:flash_player:11.2.202.262:*:*:*:*:*:*:*

OR cpe:/a:adobe:flash_player:11.2.202.270:*:*:*:*:*:*:*

OR cpe:/a:adobe:flash_player:11.2.202.273:*:*:*:*:*:*:*

OR cpe:/a:adobe:flash_player:11.2.202.275:*:*:*:*:*:*:*

OR cpe:/a:adobe:flash_player:11.2.202.280:*:*:*:*:*:*:*

OR cpe:/a:adobe:flash_player:11.2.202.285:*:*:*:*:*:*:*

OR cpe:/a:adobe:flash_player:11.2.202.291:*:*:*:*:*:*:*

OR cpe:/a:adobe:flash_player:11.2.202.297:*:*:*:*:*:*:*

OR cpe:/a:adobe:flash_player:11.2.202.310:*:*:*:*:*:*:*

OR cpe:/a:adobe:flash_player:11.2.202.332:*:*:*:*:*:*:*

OR cpe:/a:adobe:flash_player:11.2.202.335:*:*:*:*:*:*:*

OR cpe:/a:adobe:flash_player:11.2.202.336:*:*:*:*:*:*:*

OR cpe:/a:adobe:flash_player:11.2.202.341:*:*:*:*:*:*:*

OR cpe:/a:adobe:flash_player:11.2.202.346:*:*:*:*:*:*:*

OR cpe:/a:adobe:flash_player:11.2.202.350:*:*:*:*:*:*:*

OR cpe:/a:adobe:flash_player:11.2.202.356:*:*:*:*:*:*:*

OR cpe:/a:adobe:flash_player:11.2.202.359:*:*:*:*:*:*:*

OR cpe:/a:adobe:flash_player:*:*:*:*:*:*:*:* (Version <= 11.2.202.378)

AND

cpe:/o:linux:linux_kernel:*:*:*:*:*:*:*:*

Configuration 2:

cpe:/a:adobe:adobe_air:13.0.0.83:*:*:*:*:*:*:*

OR cpe:/a:adobe:adobe_air:13.0.0.111:*:*:*:*:*:*:*

OR cpe:/a:adobe:adobe_air:*:*:*:*:*:*:*:* (Version <= 14.0.0.110)

Configuration 3:

cpe:/a:adobe:adobe_air_sdk:13.0.0.83:*:*:*:*:*:*:*

OR cpe:/a:adobe:adobe_air_sdk:13.0.0.111:*:*:*:*:*:*:*

OR cpe:/a:adobe:adobe_air_sdk:*:*:*:*:*:*:*:* (Version <= 14.0.0.110)

Configuration 4:

cpe:/a:adobe:flash_player:13.0.0.182:*:*:*:*:*:*:*

OR cpe:/a:adobe:flash_player:13.0.0.201:*:*:*:*:*:*:*

OR cpe:/a:adobe:flash_player:13.0.0.206:*:*:*:*:*:*:*

OR cpe:/a:adobe:flash_player:13.0.0.214:*:*:*:*:*:*:*

OR cpe:/a:adobe:flash_player:*:*:*:*:*:*:*:* (Version <= 13.0.0.223)

OR cpe:/a:adobe:flash_player:14.0.0.125:*:*:*:*:*:*:*

AND

cpe:/o:apple:mac_os_x:*:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows:*:*:*:*:*:*:*:*

Configuration RedHat 1:

cpe:/a:redhat:rhel_extras:6:*:*:*:*:*:*:*

Configuration RedHat 2:

cpe:/a:redhat:rhel_extras:5:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:adobe:flash_player:14.0.0.125:*:*:*:*:*:*:*

AND

cpe:/o:redhat:enterprise_linux_server_supplementary:6:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux_workstation_supplementary:6:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux_desktop_supplementary:6:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_8:-:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_rt:-:*:*:*:*:*:*:*

OR cpe:/o:microsoft:windows_8.1:-:-:-:*:-:-:x32:*

OR cpe:/a:adobe:flash_player:14.0.0.125:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:52002	P	Security update for haproxy (Critical)	2023-02-14
oval:org.opensuse.security:def:51934	P	Security update for python3 (Important)	2022-10-06
oval:org.opensuse.security:def:5302	P	Security update for postgresql12 (Important) (in QA)	2022-08-31
oval:org.opensuse.security:def:5335	P	Security update for postgresql10 (Important)	2022-08-26
oval:org.opensuse.security:def:20144671	V	CVE-2014-4671	2022-06-30
oval:org.opensuse.security:def:5277	P	Security update for the Linux Kernel (Important)	2022-06-20
oval:org.opensuse.security:def:7	P	apr-util-devel-1.6.1-16.43 on GA media (Moderate)	2022-06-13
oval:org.opensuse.security:def:20	P	bubblewrap-0.4.1-1.16 on GA media (Moderate)	2022-06-13
oval:org.opensuse.security:def:6026	P	Security update for xen (Moderate)	2022-05-03
oval:org.opensuse.security:def:5366	P	Security update for flac (Moderate)	2022-03-14
oval:org.opensuse.security:def:5353	P	Security update for php72 (Moderate)	2022-02-25
oval:org.opensuse.security:def:5344	P	Security update for xen (Important)	2022-02-17
oval:org.opensuse.security:def:6004	P	Security update for MozillaFirefox (Important)	2022-01-18
oval:org.opensuse.security:def:113220	P	python-pyramid-1.6-1.4 on GA media (Moderate)	2022-01-17
oval:org.opensuse.security:def:113286	P	python36-pyramid-2.0-1.2 on GA media (Moderate)	2022-01-17
oval:org.opensuse.security:def:113352	P	ruby2.2-rubygem-actionpack-4_2-4.2.7.1-1.1 on GA media (Moderate)	2022-01-17
oval:org.opensuse.security:def:10711	P	Security update for MozillaThunderbird (Important)	2022-01-12
oval:org.opensuse.security:def:51768	P	Security update for apache2 (Important)	2022-01-12
oval:org.opensuse.security:def:106759	P	Security update for log4j (Important)	2021-12-17
oval:org.opensuse.security:def:5168	P	Security update for mozilla-nss (Important)	2021-12-06
oval:org.opensuse.security:def:10663	P	Security update for ffmpeg (Moderate)	2021-10-26
oval:org.opensuse.security:def:5132	P	Security update for the Linux Kernel (Important)	2021-10-12
oval:org.opensuse.security:def:55254	P	Security update for webkit2gtk3 (Important)	2021-10-06
oval:org.opensuse.security:def:106638	P	python-pyramid-1.6-1.4 on GA media (Moderate)	2021-10-01
oval:org.opensuse.security:def:106698	P	python36-pyramid-2.0-1.2 on GA media (Moderate)	2021-10-01
oval:org.opensuse.security:def:51662	P	Security update for the Linux Kernel (Live Patch 40 for SLE 12 SP3) (Important)	2021-09-23
oval:org.opensuse.security:def:5121	P	Security update for the Linux Kernel (Important)	2021-09-23
oval:org.opensuse.security:def:5119	P	Security update for MozillaFirefox (Important)	2021-09-22
oval:org.opensuse.security:def:5110	P	Security update for openssl-1_0_0 (Low)	2021-09-09
oval:org.opensuse.security:def:10692	P	Security update for ffmpeg (Important)	2021-09-02
oval:org.opensuse.security:def:5101	P	Security update for openexr (Important)	2021-09-02
oval:org.opensuse.security:def:67543	P	Security update for openssl-1_0_0 (Important)	2021-08-24
oval:org.opensuse.security:def:55937	P	Security update for java-1_8_0-openjdk (Important)	2021-08-20
oval:org.opensuse.security:def:5792	P	Security update for apache-commons-compress (Important)	2021-08-05
oval:org.opensuse.security:def:5075	P	Security update for the Linux Kernel (Important)	2021-07-14
oval:org.opensuse.security:def:5770	P	Security update for sqlite3 (Important)	2021-07-14
oval:org.opensuse.security:def:5068	P	Security update for libgcrypt (Important)	2021-06-24
oval:org.opensuse.security:def:17001	P	flash-player-11.2.202.406-1.3 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11465	P	sysvinit-tools-2.88+-94.13 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48670	P	flash-player-11.2.202.406-1.3 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:10644	P	Security update for the Linux Kernel (Important)	2021-06-08
oval:org.opensuse.security:def:11487	P	zoo-2.10-1020.62 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17049	P	flash-player-11.2.202.548-111.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:70896	P	elfutils-0.168-2.164 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11513	P	cups-pk-helper-0.2.5-3.75 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:48718	P	flash-player-11.2.202.548-111.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11300	P	flash-player-11.2.202.406-1.3 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11535	P	freerdp-1.0.2-7.9 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:76596	P	flash-player-11.2.202.406-1.3 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11534	P	flash-player-11.2.202.548-111.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:76830	P	flash-player-11.2.202.548-111.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:5053	P	Security update for gstreamer-plugins-bad (Important)	2021-06-07
oval:org.opensuse.security:def:10677	P	Security update for MozillaThunderbird (Moderate)	2021-06-04
oval:org.opensuse.security:def:70783	P	Security update for libwebp (Critical)	2021-06-04
oval:org.opensuse.security:def:51896	P	Security update for djvulibre (Important)	2021-05-31
oval:org.opensuse.security:def:5045	P	Security update for postgresql10 (Moderate)	2021-05-27
oval:org.opensuse.security:def:5043	P	Security update for curl (Moderate)	2021-05-26
oval:org.opensuse.security:def:38122	P	Security update for djvulibre (Important)	2021-05-19
oval:org.opensuse.security:def:38103	P	Security update for clamav (Important)	2021-04-14
oval:org.opensuse.security:def:5202	P	Security update for openssl-1_1 (Important)	2021-03-25
oval:org.opensuse.security:def:5183	P	Security update for ImageMagick (Moderate)	2021-02-19
oval:org.opensuse.security:def:51723	P	Security update for the Linux Kernel (Live Patch 31 for SLE 12 SP3) (Important)	2021-02-10
oval:org.opensuse.security:def:51485	P	Security update for cyrus-sasl (Important)	2020-12-28
oval:org.opensuse.security:def:4968	P	Security update for PackageKit (Low)	2020-12-22
oval:org.opensuse.security:def:51089	P	Security update for the Linux Kernel (Live Patch 38 for SLE 12 SP2) (Important)	2020-12-07
oval:org.opensuse.security:def:51088	P	Security update for the Linux Kernel (Live Patch 37 for SLE 12 SP2) (Important)	2020-12-07
oval:org.opensuse.security:def:10584	P	Security update for MozillaThunderbird (Important)	2020-12-07
oval:org.opensuse.security:def:55771	P	Security update for python-cryptography (Moderate)	2020-12-04
oval:org.opensuse.security:def:96505	P	ruby2.5-rubygem-actionpack-5_1-5.1.4-3.3.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:103195	P	ruby2.5-rubygem-actionpack-5_1-5.1.4-3.3.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:89540	P	ruby2.5-rubygem-actionpack-5_1-5.1.4-3.3.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:4811	P	Security update for apache2 (Moderate)	2020-12-02
oval:org.opensuse.security:def:4841	P	Security update for 389-ds (Important)	2020-12-02
oval:org.opensuse.security:def:4934	P	Security update for libvirt (Important)	2020-12-02
oval:org.opensuse.security:def:4819	P	Security update for apache2 (Important)	2020-12-02
oval:org.opensuse.security:def:4887	P	Security update for xen (Important)	2020-12-02
oval:org.opensuse.security:def:4949	P	Security update for spice-gtk (Moderate)	2020-12-02
oval:org.opensuse.security:def:37356	P	xdg-utils on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:56222	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:64196	P	ruby2.5-rubygem-actionpack-5_1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:51322	P	Security update for jasper (Low)	2020-12-01
oval:org.opensuse.security:def:56496	P	Security update for binutils (Moderate)	2020-12-01
oval:org.opensuse.security:def:37451	P	grub2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:54122	P	squashfs on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:56615	P	Security update for postgresql10 (Moderate)	2020-12-01
oval:org.opensuse.security:def:10514	P	libksba-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37688	P	sysvinit-tools on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10811	P	libxcb-composite0 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52453	P	Security update for tiff (Moderate)	2020-12-01
oval:org.opensuse.security:def:10862	P	xfig on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:54196	P	flash-player on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10582	P	pam-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37835	P	krb5-appl-clients on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52727	P	Security update for the Linux Kernel (Live Patch 9 for SLE 15) (Important)	2020-12-01
oval:org.opensuse.security:def:67443	P	Security update for SUSE Manager Proxy 4.1 (Moderate)	2020-12-01
oval:org.opensuse.security:def:51251	P	Security update for djvulibre (Moderate)	2020-12-01
oval:org.opensuse.security:def:37319	P	radvd on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38054	P	rrdtool on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52846	P	Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP1) (Important)	2020-12-01
oval:org.opensuse.security:def:55092	P	dia on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38170	P	dovecot22 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37307	P	ppc64-diag on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37539	P	libjbig2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10738	P	libgnutls-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10805	P	libunrar-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38804	P	sudo on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37697	P	update-alternatives on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52419	P	Security update for libqt5-qtbase (Moderate)	2020-12-01
oval:org.opensuse.security:def:10562	P	libwmf-0_2-7 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:55665	P	Security update for libpng16 (Moderate)	2020-12-01
oval:org.opensuse.security:def:52327	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:10827	P	ocaml on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:51323	P	Security update for vim (Moderate)	2020-12-01
oval:org.opensuse.security:def:37947	P	libpulse-mainloop-glib0-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52531	P	Security update for munge (Moderate)	2020-12-01
oval:org.opensuse.security:def:38846	P	flash-player on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10630	P	Security update for xorg-x11-server (Important)	2020-12-01
oval:org.opensuse.security:def:38094	P	wpa_supplicant on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:56422	P	Security update for poppler (Moderate)	2020-12-01
oval:org.opensuse.security:def:37367	P	yast2-core on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:56330	P	Security update for gd (Moderate)	2020-12-01
oval:org.opensuse.security:def:38166	P	dbus-1-glib on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:56534	P	Security update for libvpx (Moderate)	2020-12-01
oval:org.opensuse.security:def:37355	P	xalan-j2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37587	P	libspice-server1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10786	P	librsvg-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10506	P	libidn-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52168	P	Security update for java-11-openjdk (Important)	2020-12-01
oval:org.opensuse.security:def:10853	P	systemtap-sdt-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38852	P	gnome-shell-calendar on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10536	P	libraptor-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37745	P	busybox on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52653	P	Security update for the Linux Kernel (Live Patch 2 for SLE 15) (Important)	2020-12-01
oval:org.opensuse.security:def:51111	P	Security update for wireshark (Moderate)	2020-12-01
oval:org.opensuse.security:def:52561	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:10875	P	aaa_base-malloccheck on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37308	P	ppp on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10629	P	augeas-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37995	P	libz1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52765	P	Security update for the Linux Kernel (Live Patch 15 for SLE 15) (Important)	2020-12-01
oval:org.opensuse.security:def:38894	P	flash-player on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:51489	P	Security update for python3 (Important)	2020-12-01
oval:org.opensuse.security:def:38142	P	bubblewrap on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37403	P	cracklib on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:53888	P	Security update for LibreOffice (Moderate)	2020-12-01
oval:org.opensuse.security:def:55114	P	gdk-pixbuf-lang on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:38214	P	gv on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37640	P	perl-Config-IniFiles on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10763	P	libneon-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:55091	P	dhcp on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:55492	P	Security update for libksba (Moderate)	2020-12-01
oval:org.opensuse.security:def:52219	P	Security update for ImageMagick (Moderate)	2020-12-01
oval:org.opensuse.security:def:10814	P	libxslt-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:53962	P	flash-player on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:10554	P	libtiff-devel on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:37787	P	ft2demos on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52493	P	Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP2) (Important)	2020-12-01
oval:org.opensuse.security:def:64109	P	Security update for bluez (Important)	2020-12-01
oval:org.opensuse.security:def:38055	P	rsync on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:51345	P	Security update for freetype2 (Important)	2020-12-01
oval:org.opensuse.security:def:38006	P	mozilla-nspr-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:52612	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.mitre.oval:def:25191	V	Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows, Adobe AIR SDK before 14.0.0.137, and Adobe AIR SDK and Compiler before 14.0.0.137 allow attackers to bypass intended access restrictions via unspecified vectors	2015-08-03
oval:org.mitre.oval:def:26233	P	SUSE-SU-2014:0897-1 -- Security update for flash-player	2014-09-15
oval:org.mitre.oval:def:25210	P	RHSA-2014:0860: flash-plugin security update (Critical)	2014-09-08
oval:com.redhat.rhsa:def:20140860	P	RHSA-2014:0860: flash-plugin security update (Critical)	2014-07-09
oval:com.ubuntu.precise:def:20144671000	V	CVE-2014-4671 on Ubuntu 12.04 LTS (precise) - medium.	2014-07-09
oval:com.ubuntu.trusty:def:20144671000	V	CVE-2014-4671 on Ubuntu 14.04 LTS (trusty) - medium.	2014-07-09

BACK