CVE-2014-2606

CVE-2014-2606 affects HP StoreVirtual 4000 Storage and StoreVirtual VSA, versions 9.5.x–11.0. The issue is a remote escalation of privileges by an authenticated remote user via unknown vectors, per the CVE description. The related HP security bulletin HPSBST03039 rev.1 documents remote disclosure...

Debian DSA-2606-1 : proftpd-dfsg - symlink race

It has been discovered that in ProFTPd, an FTP server, an attacker on the same physical host as the server may be able to perform a symlink attack allowing to elevate privileges in some configurations. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

CVE-2012-2606

Bradford Network Sentry before 5.3.3 contains an authentication flaw in the agent listening on UDP port 4567. The lack of authentication allows a remote attacker to trigger the display of arbitrary text on a workstation via a crafted UDP packet, demonstrated by a replay attack. Affected product i...

CVE-2011-2606

IBM Rational Team Concert (RTC) 3.0 Web UI is affected by CVE-2011-2606, a Cross-site Scripting (XSS) flaw in the Web UI exploitable via an unspecified parameter (Work Item 165511). Root cause: unsafe handling of input in the affected page. Impact: remote attacker can inject arbitrary web script ...

Heap overflow

Heap-based buffer overflow in awstmxn.exe in the Admin Agent service in the server in EMC Documentum ApplicationXtender Workflow, possibly 5.40 SP1 and earlier, allows remote attackers to execute arbitrary code via crafted packet data to TCP port 2606...

Directory traversal

Directory traversal vulnerability in awstmxn.exe in the Admin Agent service in the server in EMC Documentum ApplicationXtender Workflow, possibly 5.40 SP1 and earlier, allows remote attackers to upload arbitrary files, and execute arbitrary code, via directory traversal sequences in requests to T...

CVE-2008-3685

Directory traversal vulnerability in awstmxn.exe in the Admin Agent service in the server in EMC Documentum ApplicationXtender Workflow, possibly 5.40 SP1 and earlier, allows remote attackers to upload arbitrary files, and execute arbitrary code, via directory traversal sequences in requests to T...

CVE-2008-3685: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in awstmxn.exe in the Admin Agent service in the server in EMC Documentum ApplicationXtender Workflow, possibly 5.40 SP1 and earlier, allows remote attackers to upload arbitrary files, and execute arbitrary code, via directory traversal sequences in requests to T...

CVE-2008-3684: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in awstmxn.exe in the Admin Agent service in the server in EMC Documentum ApplicationXtender Workflow, possibly 5.40 SP1 and earlier, allows remote attackers to execute arbitrary code via crafted packet data to TCP port 2606...

CVE-2009-2606

The CVE-2009-2606 entry concerns ASP Football Pool 2.3 where sensitive data is stored under the web root with insufficient access control, enabling remote retrieval of the NFL.mdb database file via a direct request. The core issue is improper access control on the web root, leading to exposure of...

CVE-2009-2606

ASP Football Pool 2.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for NFL.mdb...

CVE-2009-2606

creationtimestamp| type| source ---|---|--- 2009-06-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8852...

EMC ApplicationXtender Workflow Server Admin Agent Heap Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of EMC ApplicationXtender Workflow Server. Authentication is not required to exploit this vulnerability. The specific flaw exists in the Admin Agent service awstmxn.exe which listens by...

CVE-2008-2606

CVE-2008-2606 affects Oracle E-Business Suite 12.0.4 components with the Oracle Application Object Library over HTTP. In the Oracle E-Business Suite risk matrix, this vulnerability is listed under CVE-2008-2606 with a base score around 4.0 (Network) and requires a valid session for exploitation, ...

CVE-2008-2606: Undefined Security Weakness

Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.4 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2586...

CVE-2007-2606

Firebird 2.1 contains multiple buffer overflows in input handling (config\ConfigFile.cpp and msgs\check_msgs.epp) that can lead to memory corruption and unspecified impact. Affected product is Firebird; root cause is buffer overflows in the two code paths cited in CVE-2007-2606. Public details ac...

CVE-2006-2606

Cross-site scripting XSS vulnerability in Chatty, possibly 1.0.2 and other versions, allows remote attackers to inject arbitrary web script or HTML via the username...

CVE-2006-2606

The CVE-2006-2606 entry describes a Cross-site Scripting (XSS) vulnerability in the Chatty application, possibly affecting version 1.0.2 and other versions. The flaw enables remote attackers to inject arbitrary web script or HTML by manipulating the username field in the login or input workflow. ...

CVE-2006-2606

Cross-site scripting XSS vulnerability in Chatty, possibly 1.0.2 and other versions, allows remote attackers to inject arbitrary web script or HTML via the username...

CVE-2005-2606

Technical details about CVE-2005-2606 are not publicly available in the provided documents. No concrete affected products, root causes, or remediation are specified here. Monitor for updates.