CVE-2018-2163

CVE-2018-2163 entry is rejected/not used; it does not represent an active vulnerability.

CVE-2017-2163

Directory traversal vulnerability in SOY CMS Ver.1.8.1 to Ver.1.8.12 allows authenticated attackers to read arbitrary files via shopid...

CVE-2017-2163

CVE-2017-2163 affects SOY CMS versions 1.8.1–1.8.12. A directory traversal flaw arises from flawed processing of the shop_id parameter, allowing authenticated attackers to read arbitrary files on the server and potentially execute arbitrary PHP code. Remediation is to update to the latest SOY CMS...

Apache OpenMeetings Event Description Cross-Site Scripting (CVE-2016-2163)

A cross-site scripting vulnerability has been reported in the event handling component of Apache OpenMeetings. The vulnerability is due to insufficient validation of input for event descriptions. A remote, authenticated attacker could exploit this vulnerability by scheduling an event with a craft...

CVE-2016-2163

CVE-2016-2163 affects Apache OpenMeetings prior to 3.1.1. The issue is a Cross-Site Scripting (XSS) in the event creation flow where the event description can be crafted to inject script/HTML. Root cause is insufficient validation of input in the event description field. Impact is remote, unauthe...

CVE-2013-2163

CVE-2013-2163 affects Monkey HTTP Daemon (monkeyd) prior to version 1.2.2. The issue allows a remote attacker to cause a denial of service (infinite loop) by sending a crafted Range header with an offset equal to the file size. Public docs consistently describe the vector as a Range-header-based ...

GLSA-201309-17 : Monkey HTTP Daemon: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201309-17 Monkey HTTP Daemon: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Monkey HTTP Daemon. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could send a...

CVE-2011-2163

Unspecified vulnerability in Virtualization Manager 1.2.2 in IBM Systems Director 1.2.2 has unknown impact and attack vectors...

CVE-2011-2163

Technical details about CVE-2011-2163 are not publicly available in the provided documents. Monitor for updates from official advisories.

Debian Security Advisory DSA 2163-2 (dajaxice)

The remote host is missing an update to dajaxice announced via advisory DSA 2163-2. OpenVAS Vulnerability Test $Id: deb21632.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2163-2 dajaxice Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Debian: Security Advisory (DSA-2163-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 2163-1 (python-django)

The remote host is missing an update to python-django announced via advisory DSA 2163-1. OpenVAS Vulnerability Test $Id: deb21631.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2163-1 python-django Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft...

Debian DSA-2163-1 : python-django - multiple vulnerabilities

Several vulnerabilities were discovered in the Django web development framework : - CVE-2011-0696 For several reasons the internal CSRF protection was not used to validate AJAX requests in the past. However, it was discovered that this exception can be exploited with a combination of browser...

CVE-2010-2163

CVE-2010-2163 affects Adobe Flash Player prior to 9.0.277.0 and Flash Player 10.x prior to 10.1.53.64, as well as Adobe AIR prior to 2.0.2.12610. The initial entry states multiple unspecified vulnerabilities could allow attackers to execute arbitrary code via unknown vectors. Connected documents ...

openSUSE Security Update : flash-player (openSUSE-SU-2010:0321-1)

This Flash Player update fixes multiple critical security vulnerabilities which allow an attacker to remotely execute arbitrary code or to cause a denial of service. The following CVE numbers have been assigned : CVE-2008-4546, CVE-2009-3793, CVE-2010-1297, CVE-2010-2160, CVE-2010-2161,...

openSUSE Security Update : flash-player (openSUSE-SU-2010:0321-1)

This Flash Player update fixes multiple critical security vulnerabilities which allow an attacker to remotely execute arbitrary code or to cause a denial of service. The following CVE numbers have been assigned : CVE-2008-4546, CVE-2009-3793, CVE-2010-1297, CVE-2010-2160, CVE-2010-2161,...

Adobe AIR < 2.0.2.12610 Multiple Vulnerabilities (APSB10-14)

The remote Windows host contains a version of Adobe AIR that is earlier than 2.0.2.12610. Such versions are affected by multiple vulnerabilities, such as memory corruption, buffer overflows, and memory exhaustion, that could be exploited to cause an application crash or even allow execution of...

CVE-2009-2163

CVE-2009-2163 affects Sitecore CMS prior to version 6.0.2 Update-1 (090507), specifically the login/default.aspx path where the sc_error parameter can be exploited for cross-site scripting (XSS). The vulnerability allows remote attackers to inject arbitrary HTML/script into a user’s browser withi...

CVE-2009-2163

creationtimestamp| type| source ---|---|--- 2009-06-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34930...

CVE-2008-2163

IBM Lotus Quickr 8.1 is affected by CVE-2008-2163: an XSS vulnerability in the WYSIWYG editors that allows remote attackers to inject arbitrary web script or HTML via unknown vectors. The issue affects Quickr 8.1 before Hotfix 5 on Windows and AIX, and before Hotfix 3 on i5/OS. Remediation is to ...