CVE-2014-6071

CVE-2014-6071 affects jQuery 1.4.2, where the vulnerability is an xss in the web page generation path caused by improper handling of the text() method inside after. The connected documents confirm the affected product/component and the root cause (XSS via text() in after) and reference explicit m...

CVE-2014-6071

jQuery 1.4.2 allows remote attackers to conduct cross-site scripting XSS attacks via vectors related to use of the text method inside after...

CVE-2017-6071

CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to conduct information-disclosure attacks via exportxml...

CVE-2017-6071

The CVE-2017-6071 entry applies to CMS Made Simple Form Builder (CMSMS Form Builder) in CMS Made Simple v1.x prior to 0.8.1.6. The vulnerability is an information-disclosure flaw exploitable via exportxml, allowing remote attackers to access sensitive information. The available documents describe...

CVE-2015-6071

Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6066, CVE-2015-6070, CVE-2015-6074,...

CVE-2015-6071

Microsoft Internet Explorer (versions 7–11) is affected by a memory corruption vulnerability (CVE-2015-6071) that can be triggered by visiting a crafted web page. The issue allows remote code execution or a denial of service and is described across multiple sources as a memory corruption vulnerab...

Microsoft Internet Explorer Memory Corruption (MS15-112: CVE-2015-6071)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory that has been deleted. A remote attacker can exploit this issue by enticing a target victim to open a specially...

Microsoft Internet Explorer CVE-2015-6071 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

MS15-112: Cumulative Security Update for Internet Explorer (3104517)

The version of Internet Explorer installed on the remote host is missing Cumulative Security Update 3104517. It is, therefore, affected by multiple vulnerabilities, the majority of which are remote code execution vulnerabilities. An unauthenticated, remote attacker can exploit these issues by...

[SECURITY] [DSA 1903-1] New graphicsmagick packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1903 [email protected] http://www.debian.org/security/ Giuseppe Iuculano October 07, 2009 http://www.debian.org/security/faq -...

openSUSE 10 Security Update : libopensc2 (libopensc2-6071)

Private data objects on smartcards initialized with OpenSC could be accessed without authentication CVE-2009-0368. Only blank cards initialized with OpenSC are affected by this problem. Affected cards need to be manually fixed, updating the opensc package alone is not sufficient! Please carefully...

GraphicsMagick Multiple Vulnerabilities - Windows

GraphicsMagick graphics tool is prone to multiple buffer overflow/underflow vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CP...

CVE-2008-6071

CVE-2008-6071 affects GraphicsMagick: a heap-based buffer overflow in the DecodeImage function (coders/pict.c) can be triggered by a crafted PICT image, leading to denial of service or possible arbitrary code execution. Affected versions are GraphicsMagick before 1.1.14 and 1.2.x before 1.2.3. De...

TWiki失败登录信息泄露漏洞

TWiki是一款流行的基于WEB的百科全书程序。 TWiki处理失败登录存在问题，远程攻击者可以利用漏洞访问受限制的标题。 当站点设置为如下： 1，如果ErrorDocument 401设置指向TWikiRegistration标题或者任意TWiki标题并且 2，使用TWiki-4.0的ApacheLogin和会话起用，或者使用SessionPlugin的早期TWiki版本，并且 3，运行了Apache 1.3。 那么可使用如下方法进行测试： 1，在左边栏点'Login'连接 2，输入合法用户名，但错误的密码 3，点"ok" 4，如果Apache重提示，再输入相同用户名和密码...

CVE-2006-6071

The vulnerability CVE-2006-6071 affects TWiki 4.0.5 and earlier when run under Apache 1.3 with ApacheLogin, sessions, and ErrorDocument 401 redirects to a valid wiki topic. The root cause is improper handling of failed login attempts, allowing remote attackers to read arbitrary content by cancell...

CVE-2006-5143

Multiple buffer overflows in CA BrightStor ARCserve Backup r11.5 SP1 and earlier, r11.1, and 9.01; BrightStor ARCserve Backup for Windows r11; BrightStor Enterprise Backup 10.5; Server Protection Suite r2; and Business Protection Suite r2 allow remote attackers to execute arbitrary code via craft...