CVE-2011-2131

Adobe Photoshop CS5/CS5.1 is affected by CVE-2011-2131 due to memory corruption caused by insufficient boundary checking when handling crafted GIF files. The vulnerability enables remote code execution (or memory corruption leading to DoS) when a user opens a malicious GIF. Evidence from multiple...

CVE-2010-2131

CVE-2010-2131 affects the TYPO3 Calendar Base (cal) extension prior to 1.3.2. The vulnerability allows remote attackers to execute arbitrary SQL commands via iCalendar data, due to an SQL injection in the cal extension. In public records (NVD) the issue is rated HIGH (CVSS v2: 7.5) with network a...

openSUSE Security Update : libpulse-browse0 (libpulse-browse0-2131)

Due to a race condition in pulseaudio a local attacker could make pulseaudio change ownership and permissions of arbitrary files. The problem is only security relevant if pulseaudio is run in 'system mode' which is not the case by default CVE-2009-1299. This update also improves some latency...

CVE-2009-2131

Cross-site scripting XSS vulnerability in 4images 1.7.7 and earlier allows remote authenticated users to inject arbitrary web script or HTML by providing a crafted userhomepage parameter to member.php, and then posting a comment associated with a picture...

CVE-2009-2131

creationtimestamp| type| source ---|---|--- 2009-06-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8936...

Fedora Core 10 FEDORA-2009-2131 (mingw32-libpng)

The remote host is missing an update to mingw32-libpng announced via advisory FEDORA-2009-2131. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright ...

CVE-2008-2131

CVE-2008-2131 is an XSS vulnerability in mvnForum 1.1 GA. The issue allows remote authenticated users to inject arbitrary script/HTML via the topic field, which is echoed in user/viewthread.jsp when using the quick reply button. The vulnerability is documented across multiple sources (NVD and CVE...

CVE-2007-2131

Technical details for CVE-2007-2131 are not publicly available in the provided documents. Monitor for updates and additional vendor advisories.

CVE-2006-2131

The CVE-2006-2131 entry concerns Advanced Poll 2.0.4, where include/class_poll.php uses the HTTP_X_FORWARDED_FOR header to identify the client IP. The root cause is relying on X-Forwarded-For for IP checks, which allows remote attackers to spoof the source IP and bypass voting restrictions. The a...

CVE-2002-2131

CVE-2002-2131 : Perl-HTTPd before 1.0.2 has a directory traversal flaw that lets remote attackers view arbitrary files via a .. in an unknown argument. The NVD entry assigns a CVSSv2 base score of 5.0 (Medium) with network access and low complexity; confidentiality impact is partial. Red Hat’s en...

CVE-2004-2131

CVE-2004-2131 affects IBM Informix Dynamic Server (IDS) 9.40.xC3 and earlier. The flaw is a stack-based buffer overflow in ontape triggered by a long ONCONFIG environment variable, allowing local users with DSA privileges to execute arbitrary code. Affected component is ontape; root cause is unch...

CVE-2004-2131

Stack-based buffer overflow in ontape for IBM Informix Dynamic Server IDS 9.40.xC3 and earlier allows local users, with DSA privileges, to execute arbitrary code via a long ONCONFIG environment variable...