171 matches found
Adobe AIR < 2.0.2.12610 Multiple Vulnerabilities (APSB10-14)
The remote Windows host contains a version of Adobe AIR that is earlier than 2.0.2.12610. Such versions are affected by multiple vulnerabilities, such as memory corruption, buffer overflows, and memory exhaustion, that could be exploited to cause an application crash or even allow execution of...
CVE-2009-2182
CVE-2009-2182 affects Campsite 3.3.0 RC1, with multiple PHP remote file inclusion vulnerabilities. The issue allows remote attackers to execute arbitrary PHP code by supplying a URL via the GLOBALS[g_campsiteDir] parameter to a set of PHP scripts across admin-files and articles directories, inclu...
CVE-2009-2182
creationtimestamp| type| source ---|---|--- 2009-06-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8995...
CVE-2008-2182
Cross-site scripting XSS vulnerability in the powermail extension before 1.1.10 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2008-2182
CVE-2008-2182 is a cross-site scripting (XSS) vulnerability in the powermail TYPO3 extension, affecting versions prior to 1.1.10. The underlying issue is an input handling/vector exposure that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The publicly doc...
CVE-2008-2182
Cross-site scripting XSS vulnerability in the powermail extension before 1.1.10 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2007-2182
The CVE concerns an unrestricted file upload vulnerability in Maran PHP Forum’s forum_write.php. The issue arises from allowing a trailing %00 in a filename in the page parameter, enabling remote attackers to upload and execute arbitrary PHP files. The documented impact is partial confidentiality...
CVE-2004-2182
CVE-2004-2182 (Macromedia JRun 4.0) describes a session fixation vulnerability where remote attackers can hijack user sessions by pre-setting the session ID information used by the session server. Public sources in the provided documents consistently identify JRun 4.0 as affected and cite the vul...
CVE-2005-2182
The affected product is Grandstream BudgeTone BT100 VoIP phones. The vulnerability arises from improper validation of Call-ID, branch, and tag values in NOTIFY messages used to verify subscriptions, enabling remote spoofing of messages such as the “Messages waiting” indicator. Root cause: inadequ...