CVE-2013-2428

Technical details for CVE-2013-2428 are not publicly provided in the supplied documents; monitor for updates.

CVE-2012-2428

CVE-2012-2428 affects xArrow server prior to version 3.4.1. The vulnerability is an integer overflow that enables an out-of-bounds read via a crafted packet, allowing remote code execution. Public sources consistently describe the issue as part of multiple related memory-safety flaws in xArrow (s...

Debian DSA-2428-1 : freetype - several vulnerabilities

Mateusz Jurczyk from the Google Security Team discovered several vulnerabilities in Freetype's parsing of BDF, Type1 and TrueType fonts, which could result in the execution of arbitrary code if a malformed font file is processed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptiv...

Gentoo Security Advisory GLSA 201110-11 (Adobe Flash Player)

The remote host is missing updates announced in advisory GLSA 201110-11. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

RHEL 6 : acroread (RHSA-2011:1434)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1434 advisory. Adobe Reader allows users to view and print documents in Portable Document Format PDF. This update fixes multiple security flaws in Adobe...

Critical: Red Hat Security Advisory: acroread security update

Updated acroread packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 Extras and Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System...

FreeBSD Ports: linux-flashplugin

The remote host is missing an update to the system as announced in the referenced advisory. VID 53e531a7-e559-11e0-b481-001b2134ef46 OpenVAS Vulnerability Test $ Description: Auto generated from VID 53e531a7-e559-11e0-b481-001b2134ef46 Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Adobe Flash Player逻辑错误远程代码执行漏洞

BUGTRAQ ID: 49716 CVE ID: CVE-2011-2428 Adobe Flash Player是一个集成的多媒体播放器。 Adobe Flash Player在实现上存在逻辑错误，远程攻击者可利用此漏洞执行任意代码 Adobe Flash Player 9.x Adobe Flash Player 10.x 厂商补丁： Adobe ----- Adobe已经为此发布了一个安全公告（APSB11-26）以及相应补丁: APSB11-26：Security update available for Adobe Flash Player...

CVE-2011-2428

Adobe Flash Player before 10.3.183.10 on Windows/macOS/Linux/Solaris and before 10.3.186.7 on Android is affected by a logic‑error issue that can cause a browser crash and may lead to arbitrary code execution. The CVE‑2011‑2428 entry is referenced in multiple advisories (e.g., RHSA‑2011:1333, RHS...

Flash Player for Mac <= 10.3.183.7 Multiple Vulnerabilities (APSB11-26)

According to its version, the instance of Flash Player installed on the remote Mac OS X host is 10.3.183.7 or earlier. It is therefore reportedly affected by several critical vulnerabilities : - Multiple AVM stack overflow vulnerabilities could lead to code execution. CVE-2011-2426, CVE-2011-2427...

CVE-2010-2428

CVE-2010-2428 affects Wing FTP Server for Windows 3.5.0 and earlier; the admin_loginok.html page is vulnerable to cross-site scripting via a crafted POST, allowing an authenticated remote attacker to inject arbitrary script/HTML in the user’s browser. Several sources (NVD, OpenVAS, Nessus) corrob...

CVE-2010-2428

Cross-site scripting XSS vulnerability in adminloginok.html in the Administrator web interface in Wing FTP Server for Windows 3.5.0 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted POST request...

Wing FTP Server 'admin_loginok.html' HTML Injection Vulnerability

Wing FTP Server is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie- based authentication credentials an...

Wing FTP Server <= 3.5.0 'admin_loginok.html' HTML Injection Vulnerability

Wing FTP Server is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2009-2428

The CVE-2009-2428 entry concerns the Tausch Ticket Script 3 with multiple SQL injection vulnerabilities. The documented vectors include the (1) userid parameter to suchauftraege_user.php and the (2) descr parameter to vote.php, plus other unspecified vectors. Attack potential is remote, enabling ...

CVE-2009-2428

creationtimestamp| type| source ---|---|--- 2009-07-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34809 2009-07-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34810...

CVE-2002-2428

CVE-2002-2428 affects the GoAhead WebServer (webs.c) prior to version 2.1.4. A remote attacker can trigger a NULL pointer dereference and daemon crash by sending an HTTP POST with a Content-Length header but no body data, resulting in a denial of service. Affected product: GoAhead WebServer; vuln...

Secunia Research: TorrentTrader Multiple SQL Injection Vulnerabilities

====================================================================== Secunia Research 18/06/2008 - TorrentTrader Multiple SQL Injection Vulnerabilities - ====================================================================== Table of Contents Affected...

Design/Logic Flaw

IBM Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores HTTPPassword hashes from names.nsf in a manner accessible through Readviewentries and OpenDocument requests to the defaultview view, a different vector than CVE-2005-2428...

CVE-2006-2428

add.asp in DUware DUbanner 3.1 allows remote attackers to execute arbitrary code by uploading files with arbitrary extensions, such as ASP files, probably due to client-side enforcement that can be bypassed. NOTE: some of these details are obtained from third party information, since the raw sour...