CVE-2015-6138

CVE-2015-6138 affects Microsoft Internet Explorer 8–11, where improper handling of HTML attributes in HTTP responses allows remote attackers to bypass the XSS filter. The issue is addressed by the MS15-124 update (December 8, 2015), which patches multiple IE vulnerabilities including this one. Pu...

CVE-2014-6138

CVE-2014-6138 affects IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4. Remote authenticated users can bypass intended grid-data access restrictions via unspecified vectors. The documents do not disclose the root cause or a confirmed exploit path. Affected product/versions are specif...

CVE-2012-6138

CVE-2012-6138 is rejected and not used; refer to duplicate CVEs (e.g., CVE-2012-6536..6549).

CVE-2012-6138

...

SuSE 11.1 Security Update : Acrobat Reader (SAT Patch Number 6138)

Specially crafted PDF files could have caused a denial of service or have lead to the execution of arbitrary code in the context of the user running acroread : - crafted fonts inside PDFs could allow attackers to cause an integer overflow, resulting in the possibility of arbitrary code execution...

CVE-2008-6138

creationtimestamp| type| source ---|---|--- 2008-10-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6703...

CVE-2007-6138

SQL injection vulnerability in redir.asp in VU Mass Mailer allows remote attackers to execute arbitrary SQL commands via the password parameter to Default.asp aka the Login Page. NOTE: some of these details are obtained from third party information...

CVE-2007-6138

CVE-2007-6138 affects VU Mass Mailer via the login flow: the redir.asp path is vulnerable to SQL injection in the password parameter to Default.asp (Login Page). The underlying cause is unsafely concatenated SQL in the login logic, enabling remote attackers to execute arbitrary SQL commands. Docu...

CVE-2006-6138

CVE-2006-6138 describes a directory traversal vulnerability in the download.php of Sisfo Kampus 0.8, allowing remote attackers to list arbitrary directories via an absolute pathname supplied in the dir parameter. The CVSS metrics indicate a Network attack vector, low attack complexity , no authen...