97 matches found
RHEL 6 : flash-plugin (RHSA-2011:1144)
The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2011:1144 advisory. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes multiple...
CVE-2011-2134
Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different...
Buffer overflow
Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different...
Buffer overflow
Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different...
CVE-2011-2130
Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different...
Critical: Red Hat Security Advisory: flash-plugin security update
An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which...
Flash Player < 10.3.183.5 Multiple Vulnerabilities (APSB11-21)
Binary data 6001.prm...
Debian DSA-2130-1 : bind9 - several vulnerabilities
Several remote vulnerabilities have been discovered in BIND, an implementation of the DNS protocol suite. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-3762 When DNSSEC validation is enabled, BIND does not properly handle certain bad signatures if...
CVE-2010-2130
CVE-2010-2130 describes a Cross-site scripting (XSS) vulnerability in the ARISg 5.0 product, specifically in the wflogin.jsp page, exploitable via the errmsg parameter to inject arbitrary script/HTML. The connected documents confirm the vulnerable component (wflogin.jsp) and parameter but do not ...
CVE-2010-2130
creationtimestamp| type| source ---|---|--- 2010-02-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33678...
CVE-2009-2130
Elvin 1.2.0 is affected by CVE-2009-2130, where remote attackers can read PHP source files (inc/login.ei, inc/jump_bug.ei, inc/create_account.ei) via direct requests. The underlying issue is a file disclosure vulnerability in Elvin 1.2.0 leading to partial confidentiality impact. Public reference...
CVE-2009-2130
creationtimestamp| type| source ---|---|--- 2009-06-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8953...
CVE-2008-2130
Affected software: iGaming CMS 1.5. The vulnerability is a SQL injection in poll_vote.php reachable via the id parameter, causing arbitrary SQL execution as described in CVE-2008-2130. The available documents confirm the flaw’s existence and impact but do not provide exploit code, specific exploi...
CVE-2007-2239
Stack-based buffer overflow in the SaveBMP method in the AXIS Camera Control aka CamImage ActiveX control before 2.40.0.0 in AxisCamControl.ocx in AXIS 2100, 2110, 2120, 2130 PTZ, 2420, 2420-IR, 2400, 2400+, 2401, 2401+, 2411, and Panorama PTZ allows remote attackers to cause a denial of service...
CVE-2007-2130
CVE-2007-2130 describes an unspecified vulnerability in Oracle’s Workflow Cartridge affecting Oracle Database Server (9.2.0.1, 10.1.0.2, 10.2.0.1), Application Server (9.0.4.3, 10.1.2.0.2), Collaboration Suite (10.1.2), and E-Business Suite. The description indicates unknown impact and remote aut...
CVE-2006-2130
The CVE-2006-2130 entry concerns a SQL injection vulnerability in Advanced Poll 2.0.4, exploitable through the User-Agent HTTP header in include/class_poll.php. The connected documents confirm affected software and the root cause is improper handling of User-Agent data, enabling remote attackers ...
CVE-2002-2130
publishxpdocs.php in Gallery 1.3.2 allows remote attackers to execute arbitrary PHP code by modifying the GALLERYBASEDIR parameter to reference a URL on a remote web server that contains the code...