CVE-2010-2246

feh before 1.8, when the --wget-timestamp option is enabled, might allow remote attackers to execute arbitrary commands via shell metacharacters in a URL...

Fedora 13 : feh-1.10.1-1.fc13 (2011-0074)

New upstream update, fixes security issue Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVE...

Fedora 14 : feh-1.10.1-1.fc14 (2011-0111)

New upstream update, fixes security issue Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVE...

CVE-2010-2246

creationtimestamp| type| source ---|---|--- 2010-06-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34201...

CVE-2008-2246

The CVE-2008-2246 issue is an information-disclosure vulnerability in IPsec policy processing when importing a Windows Server 2003 IPsec policy into Windows Server 2008 domains. Affected products include Windows Vista (SP1) and Windows Server 2008 (and variants listed by OpenVAS/Nessus entries). ...

CVE-2007-2246

Technical details about CVE-2007-2246 are not publicly available in the provided documents. Monitor for updates.

CVE-2006-2246

The CVE-2006-2246 entry documents a cross-site scripting (XSS) vulnerability in UBlog 1.6 Access Edition. The flaw allows remote attackers to inject arbitrary web script or HTML via text fields when adding a blog entry. Affected product: UBlog 1.6 Access Edition. Root cause: unsanitized input in ...

CVE-2004-2246

CVE-2004-2246 involves a cross-site scripting (XSS) vulnerability in Goollery prior to 0.04b. The issue is exploitable via the conversation_id parameter to viewpic.php, allowing remote attackers to inject arbitrary HTML or script into a user’s browser session. The available connected sources conf...

CVE-2005-2246

CVE-2005-2246 (iPhotoAlbum 1.1) is affected by multiple PHP remote file inclusion vulnerabilities. The issues enable remote attackers to execute arbitrary code by supplying crafted input to (1) doc_path in getpage.php or (2) set_menu in lib/static/header.php. Root cause: insecure handling of user...

CVE-2002-2246

Cross-site scripting XSS vulnerability in VisNetic Website before 3.5.15 allows remote attackers to inject arbitrary web script or HTML via the HTTP referer header HTTPREFERER to a non-existent page, which is injected into the resulting 404 error page...