Memory corruption

IML32.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2011-2111 and CVE-2011-2115...

CVE-2011-2115

IML32.dll in Adobe Shockwave Player before 11.6.0.626 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted tSAC chunk, which triggers a heap-based buffer overflow, a different vulnerability than CVE-2011-2111 and CVE-2011-2116...

CVE-2011-2111

IML32.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2011-2115 and CVE-2011-2116...

CVE-2011-2115

CVE-2011-2115 affects Adobe Shockwave Player; the IML32.dll memory corruption vulnerability is triggered by crafted tSAC chunks, causing a heap-based buffer overflow that can lead to arbitrary code execution or a denial of service. Affected products are Adobe Shockwave Player versions older than ...

CVE-2011-2116

IML32.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2011-2111 and CVE-2011-2115...

CVE-2011-2116

CVE-2011-2116 affects Adobe Shockwave Player; the vulnerability arises from parsing the Lnam chunk in Shockwave’s RIFF-based Director files, causing memory corruption in IML32.dll and enabling remote code execution. Affected product: Adobe Shockwave Player (IML32.dll). Impact: remote arbitrary co...

SolarWinds TFTP Server 10.4.0.10 Denial of Service

The SolarWinds TFTP server can be shut down by sending a 'netascii' read request with a specially crafted file name. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SolarWinds TFTP Server...

CVE-2010-2115

creationtimestamp| type| source ---|---|--- 2010-05-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12683 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/windows/tftp/solarwinds.rb 2025-02-06 03:13:39+00:00| seen|...

CVE-2009-2115

Affected software : SkyBlueCanvas 1.1 r237. Vulnerability : admin.php exposes an information disclosure vulnerability where a remote authenticated administrator can trigger an error message via an invalid id parameter that reveals the installation path. Root cause : improper handling of the id pa...

CVE-2008-2115

CVE-2008-2115 concerns multiple cross-site scripting (XSS) vulnerabilities in editor.php of ScriptsEZ.net Power Editor 2.0. The flaws allow remote attackers to inject arbitrary web script or HTML via the te and dir parameters in a tempedit action. NVD records a base score of 4.3 (MEDIUM) with net...

CVE-2007-2115

CVE-2007-2115 affects Oracle Database CDC (Change Data Capture) in versions 9.2.0.7, 10.1.0.5, and 10.2.0.2. The connected documents indicate multiple SQL injection vulnerabilities in DBMS_CDC_PUBLISH, triggered by remote authenticated vectors involving the CDC.jar Java classes. The impact is des...

CVE-2006-2115

CVE-2006-2115 concerns the SWS web Server 0.1.7, where a format-string vulnerability in a syslog-related path allows remote attackers to potentially execute arbitrary code. The connected sources confirm the affected product and version and describe the root cause as improper handling of format st...

CVE-2006-2115

Format string vulnerability in SWS web Server 0.1.7 allows remote attackers to execute arbitrary code via unspecified vectors that are not properly handled in a syslog function call...

CVE-2005-2115

Soldier of Fortune II 1.02x and 1.03 allows remote attackers to cause a denial of service server crash via a large ID value in the ignore command, which is used as an array index and causes an out-of-bounds operation...

CVE-2005-2115

Soldier of Fortune II, versions 1.02x and 1.03, is affected by CVE-2005-2115. A remote attacker can cause a denial-of-service (server crash) by sending a large ID value to the ignore command, which is used as an array index and triggers an out-of-bounds operation. The provided documents do not in...

CVE-2004-2115

Multiple cross-site scripting XSS vulnerabilities in Oracle HTTP Server 1.3.22, based on Apache, allow remote attackers to execute arbitrary script as other users via the 1 action, 2 username, or 3 password parameters in an isqlplus request...

CVE-2002-2115

Cross-site scripting XSS vulnerability in Hyper NIKKI System HNS Lite before 0.9 and HNS before 2.10-pl2 allows remote attackers to inject arbitrary web script or HTML...