CVE-2011-2104

Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows and Mac OS X allow attackers to cause a denial of service memory corruption via unspecified vectors...

CVE-2011-2104

CVE-2011-2104 affects Adobe Reader and Acrobat on Windows and OS X: the 8.x line (before 8.3), 9.x (before 9.4.5), and 10.x (before 10.1) are vulnerable to memory corruption leading to denial of service via unspecified vectors. Connected advisories indicate vendor patches: Red Hat RHSA-2011:1434 ...

Debian DSA-2104-1 : quagga - several vulnerabilities

Several remote vulnerabilities have been discovered in the BGP implementation of Quagga, a routing daemon. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-2948 When processing a crafted Route Refresh message received from a configured, authenticated...

CVE-2010-2104

CVE-2010-2104 concerns Orbit Downloader versions 3.0.0.4 and 3.0.0.5 . The vulnerability is a directory traversal in a metalink file’s name attribute of a file element, enabling a user‑assisted remote attacker to write arbitrary files. The NVD description specifies the impact as write access with...

CVE-2009-2104

Cross-site scripting XSS vulnerability in the Modern Guestbook / Commenting System veguestbook extension 2.7.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-2104

The CVE-2009-2104 entry describes a Cross-site scripting (XSS) vulnerability in the Modern Guestbook / Commenting System (ve_guestbook) extension for TYPO3, affecting version 2.7.1 and earlier. The vulnerability allows remote attackers to inject arbitrary web script or HTML via unspecified vector...

CVE-2007-2104

CVE-2007-2104 affects iXon CMS 0.30. The vulnerability is a directory traversal in the theme_url parameter that allows remote attackers to include and execute arbitrary local files via a .. traversal in (1) index.php, (2) page.php, (3) search.php, (4) single.php, and (5) archives.php. Impact is d...

CentOS 3 / 4 : sysreport (CESA-2005:598)

An updated sysreport package that fixes an insecure temporary file flaw is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Sysreport is a utility that gathers information about a system's hardware and configuration. The information ca...

CVE-2006-2104

The CVE covers multiple reflected cross-site scripting (XSS) flaws in Kamgaing Email System (kmail) version 2.3 and earlier. The vulnerabilities allow remote attackers to inject arbitrary web script or HTML by manipulating specific parameters: d and (1) main.php, ordner and (2) main.php, (3) webd...

CVE-2005-2104

CVE-2005-2104 affects sysreport before 1.3.7, enabling local attackers to obtain sensitive information via a symlink attack on a temporary directory. Connected advisories document a fix: Red Hat RHSA-2005:598 (and CentOS/CESA-2005:598) update the sysreport package to resolve an insecure temporary...

RHEL 2.1 / 3 / 4 : sysreport (RHSA-2005:598)

An updated sysreport package that fixes an insecure temporary file flaw is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Sysreport is a utility that gathers information about a system's hardware and configuration. The information ca...

sysreport security update

CentOS Errata and Security Advisory CESA-2005:598 An updated sysreport package that fixes an insecure temporary file flaw is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Sysreport is a utility that gathers information about a...

CVE-2002-2104

The CVE-2002-2104 entry concerns graph.php in Ganglia PHP RRD Web Client 1.0.2, where the command parameter is passed to passthru, enabling remote command execution. Affected software is Ganglia PHP RRD Web Client 1.0.2; the underlying issue is unsafely handling the command parameter in passthru,...

CVE-2004-2104

Technical details for CVE-2004-2104 are not provided in the connected documents; public specifics (affected products, exploit details) are not available here. Monitor for updates.

CVE-2002-2104

graph.php in Ganglia PHP RRD Web Client 1.0.2 allows remote attackers to execute arbitrary commands via the command parameter, which is provided to the passthru function...