CVE-2008-2188

CVE-2008-2188 affects EJ3 BlackBook 1.0 with multiple XSS flaws that allow remote attackers to inject arbitrary script/HTML via parameters to header.php and footer.php (bookName, bookMetaTags, estiloCSS, and bookCopyright/ver). The issue is described in NVD/NVD-linked records as cross-site script...

openSUSE 10 Security Update : qt (qt-2188)

Multiple integer overflows have been found in image processing functions within the QT library. These could potentially lead to heap overflows and code execution. CVE-2006-4811 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extract...

CVE-2007-2188

eXtremail 2.1.1 and earlier does not verify the ID field aka transaction id in DNS responses, which makes it easier for remote attackers to conduct DNS spoofing...

CVE-2007-2188

The CVE-2007-2188 entry concerns eXtremail 2.1.1 and earlier, where the application does not verify the DNS response ID (transaction ID). Root cause: lack of verification in DNS responses, enabling remote attackers to perform DNS spoofing. Impact is described as complete confidentiality, integrit...

CVE-2006-2188

CVE-2006-2188 affects CMScout 1.10 and earlier. The vulnerability is multiple cross-site scripting (XSS) that allows a remote attacker to inject arbitrary web script or HTML via (1) the Body field of a private message, (2) BBCode, or (3) a forum post. Documented impact includes partial confidenti...

CVE-2002-2188

OpenBSD before 3.2 is affected by a local denial-of-service in the kernel caused by getrlimit(2) with invalid arguments, likely due to an integer signedness error. The impact is a kernel crash. Mitigation provided in the references includes patches such as 018_kernresource.patch (OpenBSD 3.1 comm...

CVE-2004-2188

CVE-2004-2188 is an XSS vulnerability in DMXReady Site Chassis Manager. The available sources (NVD/Red Hat/CVE listing) confirm remote attackers can inject arbitrary web script or HTML via unknown vectors. The exact vulnerable component/file, affected versions, and root cause are not explicitly e...