Fedora 24 : pcre (2017-a8dc348834)

This release fixes pcregrep multi-line matching with --only-matching option, a crash when JIT-compiling some patterns CVE-2017-6004 and a possible buffer overflow when formatting a pcregrep error message. Note that Tenable Network Security has extracted the preceding description block directly fr...

CVE-2017-6004

The compilebracketmatchingpath function in pcrejitcompile.c in PCRE through 8.x before revision 1680 e.g., the PHP 7.1.1 bundled version allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted regular expression...

BELL-CVE-2017-6004 CVE-2017-6004 does not affect BellSoft software

Bulletin has no description...

CVE-2017-6004

The compilebracketmatchingpath function in pcrejitcompile.c in PCRE through 8.x before revision 1680 e.g., the PHP 7.1.1 bundled version allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted regular expression...

Ipswitch WhatsUp < 16.4 Multiple Vulnerabilities

Ipswitch WhatsUp Gold is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:progress:whatsupgold"...

Ipswitch WhatsUp Gold < 16.4 Multiple Vulnerabilities

The remote host has a version of Ipswitch WhatsUp Gold installed that is prior to 16.4.0. It is, therefore, affected by the following vulnerabilities : - Multiple SQL injection vulnerabilities exist due to improper sanitization of user-supplied input to the 'sUniqueID' parameter and the 'find...

CVE-2015-6004

Ipswitch WhatsUp Gold prior to 16.4 is affected by CVE-2015-6004 (SQL injection) via the sUniqueID/Find Device inputs in the Reports component, enabling an authenticated remote attacker to manipulate or disclose data in the backend database. The issue is complemented by CVE-2015-6005 (stored XSS)...

CVE-2014-6004

The CVE-2014-6004 entry concerns the Pocket Cam Photo Editor (mobi.pocketcam.editor) app, version 3 for Android. The vulnerability is that the application does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information vi...

Edimax AR-6004 ADSL Router Management Interface Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9374/info Edimax AR-6004 ADSL Routers are prone to cross-site scripting attacks via the web management interface of affected devices. An attacker could exploit this issue by enticing a victim user to follow a malicious li...

CVE-2013-6004

Summary: CVE-2013-6004 describes a session fixation vulnerability in Cybozu Garoon version before 3.7.2. An unauthenticated remote attacker could impersonate a registered user and hijack web sessions via unspecified vectors. Affected software: Cybozu Garoon 3.7 (and earlier) as indicated by JVN/N...

Oracle Database Unsupported Version Detection

Binary data 6004.prm...

CVE-2008-6004

Cross-site scripting XSS vulnerability in search.php in AJ Auction Pro Platinum 2 allows remote attackers to inject arbitrary web script or HTML via the product parameter...

CVE-2008-6004

CVE-2008-6004 is a Cross-site scripting (XSS) vulnerability affecting AJ Auction Pro Platinum 2, specifically in search.php via the product parameter. The NVD entry describes an attacker injecting arbitrary script/HTML, with a CVSSv2 base score of 4.3 (Medium) and vector: AV:N/AC:M/Au:N/C:N/I:P/A...

CVE-2008-3156

creationtimestamp| type| source ---|---|--- 2008-07-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6004...

CVE-2007-6004

CVE-2007-6004 affects Toko Instan 7.6. Multiple SQL injection weaknesses exist in index.php, exploitable via (1) id parameter in an artikel action and (2) katid parameter in a produk action, enabling remote arbitrary SQL execution. No remediation details are provided in the supplied documents.

CVE-2007-6004

Multiple SQL injection vulnerabilities in index.php in Toko Instan 7.6 allow remote attackers to execute arbitrary SQL commands via 1 the id parameter in an artikel action or 2 the katid parameter in a produk action...

CVE-2004-1791

CVE-2004-1791 concerns Edimax AR-6004 ADSL Routers where the web management interface uses a default administrator name and password that also appear as the default login text. Multiple connected sources corroborate that this enables remote access to the device (attack surface is network-enabled)...

CVE-2004-1791

The web management interface in Edimax AR-6004 ADSL Routers uses a default administrator name and password, which also appear as the default login text for the management interface, which allows remote attackers to gain access...

CVE-2004-1790

This CVE affects Edimax AR-6004 ADSL Routers. The issue is a Cross-site scripting (XSS) vulnerability in the web management interface, allowing remote attackers to inject arbitrary web script or HTML through the URL. The provided documents do not specify affected firmware versions, exact vulnerab...

CVE-2004-1790

Cross-site scripting XSS vulnerability in the web management interface in Edimax AR-6004 ADSL Routers allows remote attackers to inject arbitrary web script or HTML via the URL...