CVE-2011-2432

Adobe Reader/Acrobat is affected by a buffer overflow in the U3D TIFF Resource that can allow arbitrary code execution. Affected product ranges include Acrobat/Reader 8.x prior to 8.3.1, 9.x prior to 9.4.6, and 10.x prior to 10.1.1. Mitigations in public advisories indicate upgrading to versions ...

Adobe Reader < 10.1.1 / 9.4.6 / 8.3.1 Multiple Vulnerabilities (APSB11-21, APSB11-24, APSB11-26) (Mac OS X)

The version of Adobe Reader installed on the remote Mac OS X host is prior to 10.1.1, 9.4.6, or 8.3.1. It is, therefore, affected by the following vulnerabilities : - An unspecified error exists that allows an attacker to bypass security restrictions, resulting in code execution. CVE-2011-2431 -...

Debian Security Advisory DSA 2176-1 (cups)

The remote host is missing an update to cups announced via advisory DSA 2176-1. OpenVAS Vulnerability Test $Id: deb21761.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2176-1 cups Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

DSA-2176-1 cups - several

Bulletin has no description...

CVE-2010-2432

CVE-2010-2432 affects the CUPS client as part of CUPS before 1.4.4. The cupsDoAuthentication function in auth.c fails to properly handle an authorization demand when HAVE_GSSAPI is omitted, enabling remote CUPS servers to trigger a denial of service (infinite loop) via HTTP_UNAUTHORIZED responses...

CUPS < 1.4.4 Multiple DoS and Privilege Escalation Vulnerabilities

CUPS Common UNIX Printing System service is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2002-2432

CVE-2002-2432 describes an unspecified vulnerability in NWFTPD.nlm prior to 5.03b of the Novell NetWare FTP server, allowing remote attackers to cause a denial of service (abend) via a crafted username. The available connected documents corroborate this description across multiple sources (NVD, R...

WordPress / WordPress MU Multiple Vulnerabilities (Jul 2009)

WordPress / WordPress MU is prone to multiple vulnerabilities SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-2432

WordPress and WordPress MU before 2.8.1 allow remote attackers to obtain sensitive information via a direct request to wp-settings.php, which reveals the installation path in an error message...

CVE-2009-2432

CVE-2009-2432 affects WordPress and WordPress MU prior to 2.8.1. The flaw allows remote attackers to disclose the installation path via a direct request to wp-settings.php, resulting in exposure of server filesystem information. This is an information-disclosure vulnerability with no documented e...

CVE-2008-2432

Insecure method vulnerability in the GetFileList method in an unspecified ActiveX control in Novell iPrint Client before 5.06 allows remote attackers to list the image files in an arbitrary directory via a directory name in the argument...

CVE-2008-2432

CVE-2008-2432 affects Novell iPrint Client before 5.06 through an insecure GetFileList method in an unspecified ActiveX control, allowing remote attackers to enumerate image files in arbitrary directories. Remediation: update to version 5.06 (per Secunia Secura advisory). Other sources corroborat...

CVE-2007-2432

CVE-2007-2432 is an XSS vulnerability in nukedit 4.9.7b affecting the utilities/search.asp endpoint, exploitable via the terms parameter to inject arbitrary web script/HTML. The provided documents consistently describe a client-side/script injection risk without detailing exploitation status or p...

CVE-2007-2432

Cross-site scripting XSS vulnerability in utilities/search.asp in nukedit 4.9.7b allows remote attackers to inject arbitrary web script or HTML via the terms parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-2432

CVE-2006-2432 affects IBM WebSphere Application Server 5.0.2 (and earlier cumulative fixes) and 5.1.1 (and earlier cumulative fixes); on Solaris, a crafted LTPA token enables EJB access. The NVD entry assigns a CVSSv2 base score of 7.5 (HIGH) with network attack vector, low attack complexity, and...

CVE-2004-2432

WinAgents TFTP Server 3.0 is affected. The vulnerability arises when handling a request for a file with a long file name, likely caused by an off-by-one buffer overflow, leading to denial of service (server crash). The available sources describe the impact as a crash/DDoS-like availability issue ...

CVE-2005-2432

PHPList is affected by an SQL injection in the admin area through the id parameter (e.g., admin or members pages). The underlying issue is manipulating SQL statements via the id argument, enabling potential unauthorized data access or modification as described in the CVE entry. Exploitation statu...

CVE-2004-2432

WinAgents TFTP Server 3.0 allows remote attackers to cause a denial of service crash via a request for a file with a long file name, possibly due to an off-by-one buffer overflow...