48 matches found
CVE-2015-6005
Multiple cross-site scripting XSS vulnerabilities in IPSwitch WhatsUp Gold before 16.4 allow remote attackers to inject arbitrary web script or HTML via 1 an SNMP OID object, 2 an SNMP trap message, 3 the View Names field, 4 the Group Names field, 5 the Flow Monitor Credentials field, 6 the Flow...
CVE-2014-6005
The CVE-2014-6005 entry affects the Survey.com Mobile app (com.survey.android) for Android, version 3.2.16, which does not verify X.509 certificates from SSL servers, enabling MITM attacks with crafted certificates. CVSSv2 base score is 5.4 (Medium) with adjacent network attack vector, no authent...
CVE-2013-6005
Cross-site scripting XSS vulnerability in Cybozu Dezie before 8.1.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to the Cancel button...
Stack overflow
Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0 and 11.0 allow remote attackers to execute arbitrary code via 1 a long type parameter in an input tag, which is not properly handled by the EndOfXmlAttributeValue function; 2 an "HTML GI" in a start tag, which is not properly...
CVE-2008-6005
CVE-2008-6005 affects the W3C Amaya Web Browser (notably versions 10.0.1 and possibly 11.0.1). The vulnerability is in the CheckUniqueName function, where multiple buffer overflows could allow remote attackers to execute arbitrary code via crafted inputs in the duplicated attribute value. The Ope...
CVE-2008-6005
Multiple buffer overflows in the CheckUniqueName function in W3C Amaya Web Browser 10.0.1, and possibly other versions including 11.0.1, might allow remote attackers to execute arbitrary code via "duplicated" attribute value inputs...
CVE-2007-6005
CVE-2007-6005 affects WebEx via the GpcContainer.1 ActiveX control and can cause denial of service through a memory access violation triggered by an invalid InitParam argument or an unspecified vector in SetParam. Exploitation and affected versions are not specified in the provided documents; no ...
MS03-010: Microsoft Windows RPC Endpoint Manager Malformed Packet DoS (331953) (intrusive check)
MS Windows RPC service RPCSS crashes trying to dereference a NULL pointer when it receives a certain malformed request. All MS RPC-based services i.e. a large part of MS Windows 2000+ running on the target machine are rendered inoperable. %NASLMINLEVEL 70300 Test "Spike 2.7" MS RPC Services NULL...