McAfee Agent Code Issue Vulnerability

McAfee Agent MA is a set of client components from McAfee, Inc. that provides secure communications between ePolicy Orchestrator antivirus management platform and managed products. A security vulnerability exists in McAfee MA versions prior to 5.6.4. A local attacker could exploit the vulnerabili...

PT-2019-10431 · WordPress · Rsvpmaker

Name of the Vulnerable Software and Affected Versions: rsvpmaker plugin versions prior to 5.6.4 Description: The issue is related to SQL injection in the rsvpmaker plugin for WordPress. Recommendations: For versions prior to 5.6.4, update to version 5.6.4 or later to resolve the issue...

CVE-2019-14349

EspoCRM version 5.6.4 is vulnerable to stored XSS due to lack of filtration of user-supplied data in the api/v1/Document functionality for storing documents in the account tab. An attacker can upload a crafted file that contains JavaScript code in its name. This code will be executed when a user...

CVE-2019-14350

EspoCRM 5.6.4 is vulnerable to stored XSS due to lack of filtration of user-supplied data in the Knowledge base. A malicious attacker can inject JavaScript code in the body parameter during api/v1/KnowledgeBaseArticle knowledge-base record creation...

CVE-2019-14349

CVE-2019-14349 affects EspoCRM 5.6.4. The vulnerability is a stored XSS in the api/v1/Document functionality used for storing documents in the account tab, caused by lack of filtration of user-supplied data. An attacker can upload a crafted file whose name contains JavaScript, and the code execut...

REDAXO Cross-Site Scripting Vulnerability

REDAXO is an open source Web portal content management system . The system supports custom modules , plug-in extensions , project backup and so on. A cross-site scripting vulnerability exists in Mediamanager in versions prior to REDAXO 5.6.4. A remote attacker can exploit this vulnerability to...

CVE-2018-18200

There is a SQL injection in Benutzerverwaltung in REDAXO before 5.6.4...

CVE-2017-11480

Packetbeat versions prior to 5.6.4 are affected by a denial of service flaw in the PostgreSQL protocol handler. If Packetbeat is listening for PostgreSQL traffic and a user is able to send arbitrary network traffic to the monitored port, the attacker could prevent Packetbeat from properly logging...

Crypto++ Denial of Service Vulnerability

Crypto++ aka cryptopp is a free C++ library. A denial of service vulnerability exists in Crypto++ version 5.6.4. An attacker can exploit this vulnerability to cause the application to crash, resulting in a denial of service...

Crypto++ Information Disclosure Vulnerability

Crypto++ aka cryptopp is a free C++ library. A security vulnerability exists in Crypto++ 5.6.4 and earlier versions, which can be exploited by an attacker to obtain sensitive information by accessing process memory...

PHP 5.4.x < 5.4.36, 5.5.x < 5.5.20, 5.6.x < 5.6.4 Use After Free Vulnerability (Jan 2015)

PHP is prone to an use after free vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; ifdescription...

PHP Out of Bounds Read Vulnerability (Jan 2015)

PHP is prone to an out of bounds read vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; ifdescription...

CVE-2014-9426

The apprenticeload function in libmagic/apprentice.c in the Fileinfo component in PHP through 5.6.4 attempts to perform a free operation on a stack-based character array, which allows remote attackers to cause a denial of service memory corruption or application crash or possibly have unspecified...

PT-2014-2042 · Php · Php

Name of the Vulnerable Software and Affected Versions: PHP versions through 5.6.4 Description: The issue is related to errors in the code of the apprentice load function in the Fileinfo component. Exploitation of this issue may allow a remote attacker to cause a denial of service, such as memory...

DEBIAN-CVE-2010-2540

mapserv.c in mapserv in MapServer before 4.10.6 and 5.x before 5.6.4 does not properly restrict the use of CGI command-line arguments that were intended for debugging, which allows remote attackers to have an unspecified impact via crafted arguments...