Adobe Flex SDK 跨站脚本执行漏洞(CVE-2011-2461)

No description provided by source...

CVE-2011-2461

Cross-site scripting XSS vulnerability in the Adobe Flex SDK 3.x and 4.x before 4.6 allows remote attackers to inject arbitrary web script or HTML via vectors related to the loading of modules from different domains...

CVE-2011-2461

CVE-2011-2461 affects the Adobe Flex SDK (3.x and 4.x before 4.6). An XSS vulnerability arises when loading modules from different domains, allowing remote attackers to inject script/HTML. Impact is XSS; CVSSv2 base score 4.3 (medium). Remediation: update to Flex SDK 4.6 or later as referenced by...

[SECURITY] Fedora 14 Update: radvd-1.8.2-2.fc14

radvd is the router advertisement daemon for IPv6. It listens to router solicitations and sends router advertisements as described in "Neighbor Discovery for IP Version 6 IPv6" RFC 2461. With these advertisements hosts can automatically configure their addresses and some other parameters. They al...

CVE-2010-2461

SQL injection vulnerability in storecat.php in JCE-Tech Overstock 1 allows remote attackers to execute arbitrary SQL commands via the store parameter...

CVE-2010-2461

CVE-2010-2461 describes a SQL injection vulnerability in the storecat.php script of JCE-Tech Overstock 1 , exploitable by supplying a crafted value to the store parameter to execute arbitrary SQL. The NVD entry assigns a CVSS v2 base score 7.5 (HIGH) , with network access, no authentication, and ...

CVE-2010-2461

creationtimestamp| type| source ---|---|--- 2010-06-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/13946...

CVE-2009-2461

mathtex.cgi in mathTeX, when downloaded before 20090713, does not securely create temporary files, which has unspecified impact and local attack vectors...

CVE-2009-2461

The CVE-2009-2461 entry concerns mathtex.cgi in mathTeX, where, for downloads prior to 20090713, temporary file creation is not done securely. Multiple connected sources (NVD, OSV, Veracode, OSV Debian, Ubuntu, CVE list) corroborate the issue as a local-attack–vector vulnerability with unspecifie...

CVE-2008-2461

CVE-2008-2461 : SQL injection in Netious CMS 0.4 (index.php) via the pageid parameter, a vector different from CVE-2006-4047. The vulnerability allows remote execution of arbitrary SQL commands as described in the NVD entry; no remediation details are provided in the supplied documents.

SuSE 10 Security Update : IBM Java (ZYPP Patch Number 2461)

This update brings IBM Java 1.4.2 to Service Release 7. It contains several undisclosed security fixes, including the fix for the RSA attack similar to Mitre CVE ID CVE-2006-4790. It also contains timezone updates : - US daylightsaving time update starting 2007. - Western Australia daylight savin...

Code injection

SSL libraries in BEA WebLogic Server 6.1 Gold through SP7, 7.0 Gold through SP7, and 8.1 Gold through SP5 might allow remote attackers to obtain plaintext from an SSL stream via a man-in-the-middle attack that injects crafted data and measures the elapsed time before an error response, a differen...

CVE-2007-2461

The CVE affects Cisco ASA and PIX devices running ASA/PIX software 7.2(1)–7.2(2.14). The vulnerability is triggered by certain DHCP packets in a multi-DHCP-server environment, causing the DHCP relay agent to leak memory and the device to drop traffic (DoS). Cisco has confirmed the issue and relea...

CVE-2005-2461

CVE-2005-2461 concerns Kayako LiveResponse 2.x, where the calendar feature exposes multiple SQL injection flaws exploitable via the (1) year or (2) date parameters. The NVD entry notes remote, unauthenticated access with network vector and low attack complexity, leading to potentially partial con...

CVE-2006-2461

BEA WebLogic Server before 8.1 Service Pack 4 does not properly set the Quality of Service in certain circumstances, which prevents some transmissions from being encrypted via SSL, and allows remote attackers to more easily read potentially sensitive network traffic...

CVE-2006-2461

BEA WebLogic Server prior to 8.1 SP4 has a QoS handling flaw that can prevent SSL-encrypted transmissions, risking exposure of sensitive network traffic. The available documents state the issue and affected version, but do not provide explicit exploit details or a remediation path; no additional ...

CVE-2004-2461

Buffer overflow in pop3.c in gnubiff before 2.0.0 allows attackers to cause a denial of service crash and possibly execute arbitrary code...

CVE-2004-2461

The vulnerability is in gnubiff’s POP3 handling: a buffer overflow in pop3.c affects gnubiff before 2.0.0. The issue can cause a denial of service (crash) and may allow arbitrary code execution. Connected sources identify the affected component (pop3.c) and the version constraint (before 2.0.0), ...