CVE-2018-14264

CVE-2018-14264 is a type confusion remote-code-execution vulnerability in Foxit Reader (importAnFDF method). Exploitation requires user interaction (visiting a malicious page or opening a malicious file) and can execute code in the current process. Affected products include Foxit Reader versions ...

CVE-2014-6027

CVE-2014-6027 affects TorrentFlux 2.4 with multiple cross-site scripting (XSS) vulnerabilities. An attacker can craft torrent content or links to torrent details to inject arbitrary script/HTML in a victim’s browser. Descriptions across multiple sources (NVD/CNVD/Ubuntu CVE page) confirm two vect...

CVE-2017-6027

CVE-2017-6027 affects CODESYS Web Server (WebVisu) versions 2.3 and earlier. A specially crafted request can upload arbitrary files of dangerous types to the server without authorization, potentially enabling remote code execution. The issue is documented in multiple sources (NVD/NVD-related entr...

3S-Smart Software Solutions GmbH CODESYS Web Server

CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: 3S-Smart Software Solutions GmbH Equipment: CODESYS Web Server Vulnerabilities: Arbitrary File Upload, Stack Buffer Overflow AFFECTED PRODUCTS The following versions of CODESYS Web Server, part of the CODESYS WebVisu...

CVE-2016-6027

CVE-2016-6027 affects IBM Sterling Secure Proxy Configuration Manager (SSP CM). The issue is that HSTS protection was not enabled in SSP Configuration Manager, making it possible for an attacker to obtain sensitive information or modify data by exploiting HTTP instead of HTTPS. Affected versions ...

CVE-2006-6027

Adobe Reader Adobe Acrobat Reader 7.0 through 7.0.8 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long argument string to the LoadFile method in an AcroPDF ActiveX control...

CVE-2013-6027

CVE-2013-6027 concerns a stack-based buffer overflow in the RuntimeDiagnosticPing function on D-Link DIR-100 routers (/bin/webs). The vulnerability allows remote authenticated administrators to execute arbitrary commands by sending a long set/runtime/diagnostic/pingIp parameter to Tools/tools_mis...

CVE-2013-6027

creationtimestamp| type| source ---|---|--- 2013-10-14 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38810...

VulnCheck KEV: CVE-2006-6027

Adobe Reader Adobe Acrobat Reader 7.0 through 7.0.8 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long argument string to the LoadFile method in an AcroPDF ActiveX control...

SuSE 10 Security Update : NetworkManager (ZYPP Patch Number 6027)

The NetworkManager configuration was too permissive and allowed any user to read secrets CVE-2009-0365 or manipulate the configuration of other users. CVE-2009-0578 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

CVE-2008-6027

CVE-2008-6027 concerns multiple XSS vulnerabilities in index.php of BLUEPAGE CMS (version 2.5 and earlier). The weaknesses enable remote attackers to inject arbitrary web script or HTML via the whl, var_1, and search parameters, as described in the NVD entry. Connected records consistently refere...

CVE-2008-3125

creationtimestamp| type| source ---|---|--- 2008-07-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6027...

CVE-2007-6027

PHP remote file inclusion vulnerability in admin.jjgallery.php in the Carousel Flash Image Gallery comjjgallery component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2007-6027

CVE-2007-6027 affects the Carousel Flash Image Gallery (com_jjgallery) component for Joomla!, where admin.jjgallery.php is vulnerable to a PHP remote file inclusion via the mosConfig_absolute_path parameter. This allows an attacker to execute arbitrary PHP code on the affected Joomla! site. The v...

CVE-2006-6027

Adobe Reader Adobe Acrobat Reader 7.0 through 7.0.8 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long argument string to the LoadFile method in an AcroPDF ActiveX control...