CVE-2012-2109

The CVE-2012-2109 entry relates to a SQL injection in the BuddyPress WordPress plugin (1.5.x before 1.5.5) triggered via the page parameter in an activity_widget_filter action. Affected component is BuddyPress plugin for WordPress; root cause is unsafely constructed SQL from user-controllable inp...

CVE-2012-2109

creationtimestamp| type| source ---|---|--- 2012-03-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18690...

ZDI-11-217: Adobe Shockwave Font Structure Parsing Remote Code Execution Vulnerability

ZDI-11-217: Adobe Shockwave Font Structure Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-217 June 14, 2011 -- CVE ID: CVE-2011-2109 -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P -- Affected Vendors: Adobe -- Affected Products: Adobe Shockwave Player --...

CVE-2011-2109

Adobe Shockwave Player contains multiple memory corruption and integer overflow vulnerabilities in Dirapi.dll that can lead to arbitrary code execution. CVE-2011-2109 is tied to multiple integer overflows in Dirapi.dll, with root cause in size/length handling during parsing (rcsL/Director file fo...

CVE-2011-2109

Multiple integer overflows in Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allow attackers to execute arbitrary code via unspecified vectors...

CVE-2010-2109

CVE-2010-2109 refers to an unspecified vulnerability in Google Chrome before 5.0.375.55 that allows user-assisted remote attackers to cause a denial of service (memory error) or possibly other impact via vectors related to the drag + drop functionality. Affected software is Google Chrome pre-5.0....

CVE-2009-2109

CVE-2009-2109 affects FretsWeb 1.2. Multiple directory traversal vulnerabilities allow remote attackers to read arbitrary files via the language parameter to charts.php and the fretsweb_language cookie parameter to unspecified vectors, possibly related to admin/common.php. Root cause: improper ha...

CVE-2009-2109

creationtimestamp| type| source ---|---|--- 2009-06-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8979...

Fedora Update for libid3tag FEDORA-2008-3757

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for libid3tag FEDORA-2008-3874

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for libid3tag FEDORA-2008-3976

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

FreeBSD Ports: wordpress

The remote host is missing an update to the system as announced in the referenced advisory. VID dca0a345-ed81-11d9-8310-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

GLSA-200805-15 : libid3tag: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200805-15 libid3tag: Denial of Service Kentaro Oda reported an infinite loop in the file field.c when parsing an MP3 file with an ID3FIELDTYPESTRINGLIST field that ends in '\0'. Impact : A remote attacker could entice a user to op...

CVE-2008-2109

CVE-2008-2109 affects libid3tag 0.15.0b’s ID3_FIELD_TYPE_STRINGLIST handling, where a field ending in '\0' can cause an infinite loop and DoS. Connected advisories confirm this CVE alongside other libid3tag issues and indicate that fixes were released in subsequently updated libid3tag packages (e...

CVE-2007-2109

Multiple unspecified vulnerabilities in Oracle Database 10.2.0.3 have unknown impact and remote authenticated attack vectors related to 1 Rules Manager and Expression Filter components DB02 and 2 Oracle Streams DB06. Note: as of 20070424, Oracle has not disputed reliable claims that DB02 is for a...

CVE-2007-2109

CVE-2007-2109 affects Oracle Database 10.2.0.3 with reported issues in two components: (1) Rules Manager and Expression Filter (DB02) due to a race condition in the RLMGR_TRUNCATE_MAINT trigger that can change AUTHID from DEFINER to CURRENT_USER after TRUNCATE, and (2) Oracle Streams (DB06) due t...

CVE-2006-2109

Cross-site scripting XSS vulnerability in the parsequerystr function in include/print.php in JSBoard 2.0.10 and 2.0.11, and possibly other versions before 2.0.12, allows remote attackers to inject arbitrary web script or HTML via parameters that are set as global variables within the program, as...

CVE-2006-2109

CVE-2006-2109 is a documented XSS flaw in JSBoard. The vulnerability exists in parse_query_str() within include/print.php, where CGI query variables are indiscriminately exported as global variables, enabling remote attackers to inject script via parameters (demonstrated with the login.php?table=...

CVE-2002-2109

Matt Wright FormMail 1.9 and earlier allows remote attackers to bypass the HTTPREFERER check and conduct unauthorized activities via 1 a blank referer, 2 a spoofed referer with a trusted domain/URL after the beginning of the referer, or 3 a spoofed referer with a trusted domain/URL in the beginni...

CVE-2005-2109

This CVE (CVE-2005-2109) affects WordPress 1.5.1.2 and earlier. The vulnerability arises in wp-login.php where the forgotten-password email content can be altered by remote attackers due to an uninitialized message variable. The impact is that an attacker could modify the email message sent durin...