171 matches found
openSUSE Security Update : flash-player (openSUSE-SU-2010:0321-1)
This Flash Player update fixes multiple critical security vulnerabilities which allow an attacker to remotely execute arbitrary code or to cause a denial of service. The following CVE numbers have been assigned : CVE-2008-4546, CVE-2009-3793, CVE-2010-1297, CVE-2010-2160, CVE-2010-2161,...
Adobe AIR < 2.0.2.12610 Multiple Vulnerabilities (APSB10-14)
The remote Windows host contains a version of Adobe AIR that is earlier than 2.0.2.12610. Such versions are affected by multiple vulnerabilities, such as memory corruption, buffer overflows, and memory exhaustion, that could be exploited to cause an application crash or even allow execution of...
CVE-2009-2176
Multiple directory traversal vulnerabilities in fuzzylime cms 3.03a and earlier, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 list parameter to code/confirm.php and the 2 template parameter to...
CVE-2009-2176
creationtimestamp| type| source ---|---|--- 2009-06-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8978...
CVE-2008-2176
CVE-2008-2176 describes a cross-site scripting (XSS) vulnerability in the Zomplog web app. The affected component is the admin/category.php script in Zomplog 3.8.2, where an attacker can supply input via the catname parameter to inject arbitrary web script or HTML. The available records confirm t...
CVE-2007-2176
Unspecified vulnerability in Mozilla Firefox allows remote attackers to execute arbitrary code via unspecified vectors involving Javascript errors. NOTE: this might be the same issue as CVE-2007-2175...
CVE-2007-2176
CVE-2007-2176 affects Mozilla Firefox with an unspecified vulnerability involving Javascript errors that allows remote code execution. The NVD entry reports a CVSS v2 base score of 10.0 (High) with network attack vector and near-total impact (Confidentiality, Integrity, Availability). The descrip...
CVE-2006-2176
CVE-2006-2176 concerns multiple cross-site scripting (XSS) vulnerabilities in the PHP Linkliste 1.0b application. The issue arises in links.php, where the parameters (1) new_input, (2) new_url, and (3) new_name can be exploited to inject arbitrary web script or HTML. Affected component: PHP Linkl...
CVE-2002-2176
The CVE-2002-2176 entry concerns Gender MOD 1.1.3, where a SQL injection vulnerability in the User Profile page (via the user_level parameter) allows remote attackers to gain administrative access. The vulnerability stems from improper handling of user_level input in the profile interface, enabli...
CVE-2005-2176
Novell NetMail is vulnerable to an issue where HTML in an attachment is processed automatically without prompting the user to save or open it, enabling potential web-based attacks and cookie theft. The provided sources (NVD/CVE record) confirm the description but do not specify affected versions,...