CVE-2015-6031

CVE-2015-6031 : A buffer overflow exists in MiniUPnP Client (MiniUPnPc) in the IGDstartelt function within igd_desc_parse.c. Versions before 1.9.20150917 are affected, allowing remote UPNP servers to crash the application and potentially execute arbitrary code via an oversized XML element name. S...

Updated miniupnpc package fixes security vulnerability

An exploitable buffer overflow vulnerability exists in the XML parser functionality of the MiniUPnP library. A specially crafted XML response can lead to a buffer overflow on the stack resulting in remote code execution. An attacker can set up a server on the local network to trigger this...

CVE-2012-6031

The dotmemget function in the Transcendent Memory TMEM in Xen 4.0, 4.1, and 4.2 allow local guest OS users to cause a denial of service CPU hang and host crash via unspecified vectors related to a spinlock being held in the "badcopy error path." NOTE: this issue was originally published as part o...

[SECURITY] [DSA 3379-1] miniupnpc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3379-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 25, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3379-1] miniupnpc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3379-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 25, 2015 https://www.debian.org/security/faq -...

UBUNTU-CVE-2015-6031

Buffer overflow in the IGDstartelt function in igddescparse.c in the MiniUPnP client aka MiniUPnPc before 1.9.20150917 allows remote UPNP servers to cause a denial of service application crash and possibly execute arbitrary code via an "oversized" XML element name...

Huawei Datacard Information Disclosure Vulnerability

This module exploits an unauthenticated information disclosure vulnerability in Huawei SOHO routers. The module will gather information by accessing the /api pages where authentication is not required, allowing configuration changes as well as information disclosure, including any stored SMS. Thi...

CVE-2013-6031

CVE-2013-6031 affects Huawei E355 datacard/SOHO router with firmware 21.157.37.01.910. The issue is unauthenticated access to API endpoints (api/wlan/security-settings, api/device/information, api/wlan/basic-settings, api/wlan/mac-filter, api/monitoring/status, api/dhcp/settings) allowing remote ...

CVE-2012-6031

The dotmemget function in the Transcendent Memory TMEM in Xen 4.0, 4.1, and 4.2 allow local guest OS users to cause a denial of service CPU hang and host crash via unspecified vectors related to a spinlock being held in the "badcopy error path." NOTE: this issue was originally published as part o...

CVE-2012-6031

The dotmemget function in the Transcendent Memory TMEM in Xen 4.0, 4.1, and 4.2 allow local guest OS users to cause a denial of service CPU hang and host crash via unspecified vectors related to a spinlock being held in the "badcopy error path." NOTE: this issue was originally published as part o...

CVE-2012-6031

The dotmemget function in the Transcendent Memory TMEM in Xen 4.0, 4.1, and 4.2 allow local guest OS users to cause a denial of service CPU hang and host crash via unspecified vectors related to a spinlock being held in the "badcopy error path." NOTE: this issue was originally published as part o...

CVE-2012-6031

Technical details about CVE-2012-6031 are not publicly available in the provided Connected documents. The Xen TMEM denial-of-service issue, including affected versions and exact vectors, cannot be confirmed here. Monitor for updates and new disclosures.

CVE-2008-6031

The CVE-2008-6031 entry describes a SQL injection vulnerability in vote.php of WSN Links versions 2.22, 2.23, and note that 2.34 is also vulnerable. The vulnerability originates from handling the id parameter, allowing remote attackers to execute arbitrary SQL commands. Connected documents corrob...

CVE-2008-6031

creationtimestamp| type| source ---|---|--- 2008-09-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6524...

CVE-2007-6031

CVE-2007-6031 affects VanDyke VShell 3.0.1. The vulnerability allows remote denial of service via unspecified vectors. The description notes the information is based on a vague advisory not coordinated with vendors and includes no concrete exploit details, vectors, or remediation in the provided ...

CVE-2006-6031

CVE-2006-6031 affects Greater Cincinnati Internet Solutions (GCIS) ASPCart, where multiple SQL injection flaws exist in the web storefront. The exposed vectors include parameters in prodetails.asp (prodid), display.asp (page), addcart.asp (custid, item, price, custom, department, start, quantity,...