CVE-2016-2646

CVE-2016-2646 is rejected/not used and does not represent an active vulnerability entry.

CVE-2017-2646

It was found that when Keycloak before 2.5.5 receives a Logout request with a Extensions in the middle of the request, the SAMLSloRequestParser.parse method ends in a infinite loop. An attacker could use this flaw to conduct denial of service attacks...

CVE-2015-2646

Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform: 11.1.0.1; EM Plugin for DB: 12.1.0.5, 12.1.0.6, 12.1.0.7; EM DB Control: 11.1.0.7, 11.2.0.3, and 11.2.0.4 allows remote attackers to affect integrity via...

CVE-2015-2646

CVE-2015-2646 affects Oracle Enterprise Manager Grid Control Content Management. The vulnerability lies in the Content Management component and can impact integrity; affected products include EM Base Platform 11.1.0.1, EM Plugin for DB 12.1.0.5–12.1.0.7, and EM DB Control 11.1.0.7, 11.2.0.3, 11.2...

Ubuntu 14.10 : linux regression (USN-2646-2)

The Fix for CVE-2015-1328 introduced a regression into the Linux kernel's overlayfs file system. The removal of a directory that only exists on the lower layer results in a kernel panic. We apologize for the inconvenience. Philip Pettersson discovered a privilege escalation when using overlayfs...

Ubuntu: Security Advisory (USN-2646-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-2646

Technical details about CVE-2014-2646 are not publicly available in the provided documents. Monitor for updates.

Debian DSA-2646-1 : typo3-src - several vulnerabilities

TYPO3, a PHP-based content management system, was found vulnerable to several vulnerabilities. - CVE-2013-1842 Helmut Hummel and Markus Opahle discovered that the Extbase database layer was not correctly sanitizing user input when using the Query object model. This can lead to SQL injection by a...

Debian: Security Advisory (DSA-2646-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-2646

The Sleipnir Mobile application before 2.1.0 and Sleipnir Mobile Black Edition application before 2.1.0 for Android do not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application...

CVE-2012-2646

SLEIPNIR Mobility for Android (Sleipnir Mobile and Sleipnir Mobile Black Edition) prior to version 2.1.0 contains a WebView implementation issue that allows remote attackers to obtain sensitive information via a crafted Android application. The root cause is improper handling of the WebView class...

CVE-2011-2646

Kiwi prior to 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, is affected by CVE-2011-2646. The flaw allows remote attackers to execute arbitrary code by supplying a crafted filename within the list of testdrive modified files. The SUSE advisory confirms the vulnerable component (Kiwi) and affec...

Google Chrome multiple vulnerabilities - July 10

The host is running Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnjul10.nasl 5306 2017-02-16 09:00:16Z teissa $ Google Chrome multiple vulnerabilities - July 10 Authors: Madhuri D Copyright: Copyright c 2010 Greenbone Networks GmbH,...

CVE-2010-2646

CVE-2010-2646 affects Google Chrome up to version 5.0.375.99, where sandboxing of IFRAME elements was not properly isolated. This memory-corruption/remote-vector issue has high severity (CVSS 9.3) with unspecified impact described in the entry. The available connected documents indicate a vendor ...

UBUNTU-CVE-2010-2646

Google Chrome before 5.0.375.99 does not properly isolate sandboxed IFRAME elements, which has unspecified impact and remote attack vectors...

CVE-2009-2646

The set of connected documents confirms a vulnerability in the PDF distiller used by Research In Motion (RIM) BlackBerry Enterprise Server (BES) and BlackBerry Professional Software. Affects BES versions 4.1.3 through 4.1.6 (and in some entries 4.1.7+, 5.0.0 in later Red Hat/EUVD references) and ...

CVE-2008-2646

CVE-2008-2646 affects meBiblio 0.4.7 and involves multiple cross-site scripting (XSS) vulnerabilities. The issue arises in the application when handling user-supplied input passed to specific parameters: (1) sql parameter to dbadd.inc.php, (2) InsertJournal parameter to add_journal_mask.inc.php, ...

CVE-2008-2646

creationtimestamp| type| source ---|---|--- 2008-06-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5716...

CVE-2007-2646

Heap-based buffer overflow in yEnc32 1.0.7.207 allows user-assisted remote attackers to execute arbitrary code via a long filename in an NTX file...

CVE-2007-2646

The CVE-2007-2646 issue affects yEnc32 1.0.7.207, with a heap-based buffer overflow triggered by a long filename inside an NTX file. The vulnerability allows user-assisted remote attackers to execute arbitrary code on the affected system, via a specially crafted NTX, and is described as a buffer ...