Adobe AIR < 2.0.2.12610 Multiple Vulnerabilities (APSB10-14)

The remote Windows host contains a version of Adobe AIR that is earlier than 2.0.2.12610. Such versions are affected by multiple vulnerabilities, such as memory corruption, buffer overflows, and memory exhaustion, that could be exploited to cause an application crash or even allow execution of...

CVE-2009-2170

Summary of CVE-2009-2170 (Mahara XSS) : Multiple cross-site scripting vulnerabilities affect Mahara 1.0 before 1.0.12 and 1.1 before 1.1.5, enabling remote attackers to inject arbitrary script/HTML via unknown vectors. The NVD entry lists a base CVSSv2 score of 4.3 (Medium), with network attack v...

CVE-2008-2170

Unspecified vulnerability in Century routers allows remote attackers to cause a denial of service dropped session via crafted BGP UPDATE messages, leading to route flapping, possibly a related issue to CVE-2007-6372...

CVE-2008-2170

CVE-2008-2170 describes an unspecified vulnerability in Century routers where remote attackers can cause a denial of service (dropped session) by sending crafted BGP UPDATE messages, resulting in route flapping. The description notes a potential relation to CVE-2007-6372. Connected documents larg...

CVE-2007-2170

CVE-2007-2170 affects Oracle E-Business Suite via the APPLSYS.FND_DM_NODES package. The vulnerability arises from missing session validation, allowing remote attackers to delete arbitrary nodes. The NVD notes an unauthenticated network attack with high impact (integrity and availability), CVSS v2...

CVE-2006-2170

CVE-2006-2170 affects ArgoSoft FTP Server 1.4.3.6. A buffer overflow is triggered by Unicode in the RNTO command, allowing remote attackers to execute arbitrary code. Exploitation was demonstrated by the Infigo FTPStress Fuzzer. The CVSS base score is 6.4 (Medium) with network access, low attack ...

CVE-2002-2170

The CVE affects BadBlue Enterprise Edition versions 1.7–1.74. The root cause is insufficient authentication when attempts to restrict administrator actions to localhost IP, allowing a remote attacker to trigger arbitrary code execution via an HTTP POST to the dir.hts page on localhost, which can ...

CVE-2005-2170

CVE-2005-2170 affects the LCF component (lcfd) in IBM Tivoli Management Framework Endpoint. A remote attacker can trigger a denial of service by connecting to LCF and closing the connection without sending data, causing process exit and connection loss. Exploitation details, affected versions, an...