Caucho Resin Professional 3.1.5 - 'resin-admin/digest.php' Multiple Cross-Site Scripting Vulnerabili

CVE-2010-2032Caucho Resin Professional is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of...

Adobe Shockwave Player <= 11.6.4.634 Multiple Memory Corruption Vulnerabilities (APSB12-13) (Mac OS X)

The remote Mac OS X host contains a version of Adobe Shockwave Player that is 11.6.4.634 or earlier. It is, therefore, affected by multiple unspecified memory corruption vulnerabilities. A remote attacker can exploit these issues by tricking a user into viewing a malicious Shockwave file, resulti...

Ubuntu Update for thunderbird USN-2032-1

Check for the Version of thunderbird OpenVAS Vulnerability Test $Id: gbubuntuUSN20321.nasl 8650 2018-02-03 12:16:59Z teissa $ Ubuntu Update for thunderbird USN-2032-1 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Ubuntu 12.04 LTS / 12.10 / 13.04 / 13.10 : thunderbird vulnerabilities (USN-2032-1)

Multiple security issues were discovered in Thunderbird. If a user were tricked into connecting to a malicious server, an attacker could possibly exploit these to cause a denial of service via application crash, potentially execute arbitrary code, or lead to information disclosure. CVE-2013-1741,...

CVE-2013-2032

MediaWiki prior to 1.19.6 and prior to 1.20.5 is vulnerable to bypassing extension-enforced password-change restrictions. The issue arises because the system does not require both Special:PasswordReset and Special:ChangePassword blocks when an extension implements only one, allowing remote attack...

Fedora Update for mediawiki FEDORA-2013-7714

Check for the Version of mediawiki OpenVAS Vulnerability Test Fedora Update for mediawiki FEDORA-2013-7714 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Fedora Update for mediawiki FEDORA-2013-7714

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Memory corruption

Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2012-2029, CVE-2012-2030, CVE-2012-2031, and CVE-2012-2032...

Memory corruption

Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2012-2029, CVE-2012-2030, CVE-2012-2032, and CVE-2012-2033...

CVE-2012-2032

Adobe Shockwave Player is affected by multiple memory-corruption/remote code-execution vulnerabilities tracked as CVE-2012-2030 to CVE-2012-2033. The connected advisories attribute the issue to a parsing error in the DIR/DCR RIFF-like data within Shockwave files (rcsL chunk), which can be trigger...

CVE-2012-2032

Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2012-2029, CVE-2012-2030, CVE-2012-2031, and CVE-2012-2033...

CVE-2010-2032

Multiple cross-site scripting XSS vulnerabilities in resin-admin/digest.php in Caucho Technology Resin Professional 3.1.5, 3.1.10, 4.0.6, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via the 1 digestrealm or 2 digestusername parameters. NOTE: some of...

CVE-2010-2032

CVE-2010-2032 concerns multiple XSS flaws in Caucho Resin’s resin-admin/digest.php. Affected products include Resin Professional 3.1.5, 3.1.10, 4.0.6 (and potentially other versions). The vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the digest_realm or digest_...

CVE-2010-2032

Multiple cross-site scripting XSS vulnerabilities in resin-admin/digest.php in Caucho Technology Resin Professional 3.1.5, 3.1.10, 4.0.6, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via the 1 digestrealm or 2 digestusername parameters. NOTE: some of...

Debian DSA-2032-1 : libpng - several vulnerabilities

Several vulnerabilities have been discovered in libpng, a library for reading and writing PNG files. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-2042 libpng does not properly parse 1-bit interlaced images with width values that are not divisible...

CVE-2008-2032

creationtimestamp| type| source ---|---|--- 2008-09-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6481 2009-03-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8283 2024-01-11 13:56:48+00:00| seen| https://t.me/ctinow/166519...

CVE-2008-2032

The CVE concerns Femitter FTP Server 1.03 by Acritum. The vulnerability is a remote denial-of-service in the FTP service caused by handling crafted RETR requests, which can crash the server. Zeroscience/PoC materials describe inputs such as extremely long strings (e.g., AAAA:AAAA) or repeated As ...

CVE-2006-2032

The CVE-2006-2032 entry documents multiple SQL injection vulnerabilities in Core CoreNews 2.0.1 and earlier. The vulnerable surface is in preview.php, where attacker-supplied parameters icon_id and userid can be exploited to execute arbitrary SQL commands. The issue allows remote attackers to inf...

CVE-2002-2032

The CVE-2002-2032 issue affects PHP-Nuke 5.4 and earlier, where sql_layer.php’s debugging feature is not restricted. This enables remote attackers to disclose SQL query information by setting sql_debug (e.g., in index.php or modules.php). Impact is information disclosure of all SQL queries, not r...

CVE-2005-2032

CVE-2005-2032 concerns an unknown vulnerability in lpadmin on Sun Solaris 7/8/9 that allows local users to overwrite arbitrary files. Connected sources document affected products as Solaris with lp patches to remediate (e.g., 107115-20 for Solaris 7 SPARC, 107116-20 for Solaris 7 x86, 109320-22 a...