CVE-2010-2168

Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code via a PDF file with crafted Flash content, involving the newfunction 0x44 operator and an "invalid pointer vulnerability" that triggers memory corruption, a different...

CVE-2010-2168

CVE-2010-2168 affects Adobe Reader/Acrobat 9.x prior to 9.3.3 and 8.x prior to 8.2.3 on Windows and macOS. The vulnerability arises when parsing a PDF containing crafted Flash content, specifically involving the newfunction (0x44) operator, leading to an invalid pointer and memory corruption that...

Critical: Red Hat Security Advisory: acroread security update

Updated acroread packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 Extras and Red Hat Enterprise Linux 5 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS...

PDF Files Containing Embedded Adobe Flash Movies (CVE-2010-1297; CVE-2010-2168; CVE-2010-2201)

Multiple vulnerabilities have been reported in Adobe Reader and Acrobat when handling PDF files that contain embedded Adobe Flash movies. A remote attacker could trigger these flaws via a specially crafted PDF file. Successful exploitation will create a denial of service condition, causing the...

Adobe Reader < 9.3.3 / 8.2.3 Multiple Vulnerabilities (APSB10-15)

The version of Adobe Reader installed on the remote host is earlier than 9.3.3 / 8.2.3. Such versions are reportedly affected by multiple vulnerabilities : - A social engineering attack could lead to code execution. CVE-2010-1240 - Handling of an invalid pointer could lead to code execution...

HP-UX Update for Apache Web Server Suite HPSBUX02431

Check for the Version of Apache Web Server Suite OpenVAS Vulnerability Test HP-UX Update for Apache Web Server Suite HPSBUX02431 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

CVE-2009-2168

cpanel/login.php in EgyPlus 7ammel aka 7ml 1.0.1 and earlier sends a redirect to the web browser but does not exit when the supplied credentials are incorrect, which allows remote attackers to bypass authentication by providing arbitrary username and password parameters...

CVE-2009-2168

cpanel/login.php in EgyPlus 7ammel aka 7ml 1.0.1 and earlier sends a redirect to the web browser but does not exit when the supplied credentials are incorrect, which allows remote attackers to bypass authentication by providing arbitrary username and password parameters...

CVE-2009-2168

Summary: CVE-2009-2168 affects EgyPlus 7ammel (aka 7ml) 1.0.1 and earlier. The vuln arises in cpanel/login.php where, after invalid credentials, a redirect is sent but the script does not exit, allowing remote attackers to bypass authentication by supplying arbitrary username and password paramet...

CVE-2009-2168

creationtimestamp| type| source ---|---|--- 2009-06-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8865 2024-02-13 21:16:50+00:00| seen| https://t.me/ctinow/184199...

CVE-2008-2168

Cross-site scripting XSS vulnerability in Apache 2.2.6 and earlier allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded URLs that are not properly handled when displaying the 403 Forbidden error page...

CVE-2008-2168

CVE-2008-2168 : The linked SUSE/NVD entries describe a cross-site scripting (XSS) vulnerability in Apache HTTP Server up to version 2.2.6 and earlier, exploitable via UTF-7 encoded URLs that are mishandled when rendering the 403 Forbidden error page. Attacker-provided URL input can inject arbitra...

CVE-2008-2168

Cross-site scripting XSS vulnerability in Apache 2.2.6 and earlier allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded URLs that are not properly handled when displaying the 403 Forbidden error page...

CVE-2008-2168

creationtimestamp| type| source ---|---|--- 2008-05-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31759...

CVE-2007-2168

CVE-2007-2168 affects AimStats 3.2 and earlier. A static code injection in process.php allows remote attackers to inject PHP code into config.php via the databasehost parameter, enabling potential config tampering and partial system compromise. No remediation details are provided in the linked do...

CVE-2006-2168

CVE-2006-2168 affects FileProtection Express 1.0.1 and earlier. The vulnerability allows remote attackers to bypass authentication by presenting a cookie with an Admin value of 1. The available connected records confirm the affected product/version and the root cause (cookie-based admin flag bypa...

CVE-2004-2168

BaSoMail 1.24 is affected by CVE-2004-2168: remote attackers can cause a denial of service by opening multiple connections to TCP port 25 (SMTP) or 110 (POP3), leading to CPU consumption. The available sources confirm the vulnerability details and affected product/version, with no exploitation sp...

CVE-2005-2168

Plague News System 0.6 and earlier is affected. The delete.php file allows remote unauthenticated attackers to delete news, comments, and shoutbox posts by modifying the id parameter, due to an insufficient authorization/authentication check in delete.php. Impact is unauthorized content deletion....

CVE-2004-2168

BaSoMail 1.24 allows remote attackers to cause a denial of service CPU consumption via multiple connections to TCP port 1 25 SMTP or 2 110 POP3...