CVE-2018-14262

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the getU...

Type confusion

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the getU...

CVE-2018-14262

CVE-2018-14262 affects Foxit Reader (example affected build: 9.0.1.1049). The root cause is a type confusion in the getURL method that can be triggered through JavaScript actions, allowing remote code execution with the attacker’s code running in the current process context. User interaction is r...

CVE-2017-6025

CVE-2017-6025 affects 3S-Smart Software Solutions GmbH CODESYS Web Server (WebVisu) versions 2.3 and prior. Root cause: stack-based buffer overflow when processing XML due to unverified string sizes during memory copy, allowing a malicious user to crash the application or potentially execute arbi...

CVE-2017-6025

A Stack Buffer Overflow issue was discovered in 3S-Smart Software Solutions GmbH CODESYS Web Server. The following versions of CODESYS Web Server, part of the CODESYS WebVisu web browser visualization software, are affected: CODESYS Web Server Versions 2.3 and prior. A malicious user could overfl...

3S-Smart Software Solutions GmbH CODESYS Web Server

CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: 3S-Smart Software Solutions GmbH Equipment: CODESYS Web Server Vulnerabilities: Arbitrary File Upload, Stack Buffer Overflow AFFECTED PRODUCTS The following versions of CODESYS Web Server, part of the CODESYS WebVisu...

CVE-2016-6025

CVE-2016-6025 affects IBM Sterling Secure Proxy (SSP) Configuration Manager. The issue occurs in SSP versions 3.4.2 before iFix 8 and 3.4.3 before iFix 1, where a post-logoff session-reuse attack via a modified URL could allow remote attackers to obtain access. The vulnerability is tied to the Co...

CVE-2013-6025

creationtimestamp| type| source ---|---|--- 2015-11-25 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38805...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-6025. Reason: This candidate is a reservation duplicate of CVE-2014-6025. Notes: All CVE users should reference CVE-2014-6025 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2014-5522

The CVE-2014-6025 entry documents a vulnerability in the Chartboost library for Android: versions before 2.0.2 do not verify X.509 certificates from SSL servers, allowing man‑in‑the‑middle attackers to spoof servers and obtain sensitive information. CVE-2014-5522 is a reserved duplicate of CVE-20...

CVE-2014-6025

The CVE-2014-6025 entry concerns the Chartboost library for Android prior to version 2.0.2, which does not verify X.509 certificates from SSL servers. This behavior enables man-in-the-middle attackers to spoof a server and access sensitive information via a crafted certificate. The vulnerability ...

SAP Sybase Adaptive Server Enterprise Information Disclosure (SAP Note 1887341)

Information in protected files on machines running SAP Sybase ASE may be disclosed to an attacker. This information may be used by the attacker to further target specialized attacks on the system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70973;...

CVE-2013-6025

CVE-2013-6025 concerns XMLExternalEntity (XXE) processing in SAP Sybase Adaptive Server Enterprise (ASE) 15.7 ESD 2. The XMLParse procedure lets remote authenticated users read arbitrary files via a crafted XML document containing an external entity declaration. Affected product/version: SAP ASE ...

SuSE 10 Security Update : vim (ZYPP Patch Number 6025)

The VI Improved editor vim received bugfixes for some code execution problems. - Arbitrary code execution in vim helper plugins filetype.vim, zipplugin, xpm.vim, gzipvim, and netrw were fix ed. CVE-2008-4101: Arbitrary code execution when pressing K, ctrl- or g depending on the text under the...

CVE-2008-6025

Directory traversal vulnerability in scr/form.php in openElec 3.01 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the obj parameter...

CVE-2008-6025

CVE-2008-6025 describes a directory traversal in scr/form.php for openElec

CVE-2008-6025

Directory traversal vulnerability in scr/form.php in openElec 3.01 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the obj parameter...

CVE-2008-6025

creationtimestamp| type| source ---|---|--- 2008-09-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6530...

CVE-2007-6025

The CVE-2007-6025 entry is substantiated by multiple connected records describing a stack-based buffer overflow in driver_wext.c of wpa_supplicant 0.6.0 and earlier, exploitable by remote attackers via crafted TSF data to cause a denial of service (crash). Affected software is wpa_supplicant up t...

CVE-2006-6025

CVE-2006-6025 affects QUALCOMM Eudora WorldMail 4.0. The vulnerability is described as a remote denial-of-service, demonstrated by a module in the VulnDisco Pack. The initial disclosure notes unknown provenance and that as of 2006-11-18 there is no actionable information. Connected records (PT-20...