53 matches found
CVE-2016-6159
CVE-2016-6159 affects Huawei WS331a routers; prior to WS331a-10 V100R001C01B112, the management interface could be bypassed via sending specially crafted packages to the LAN interface, allowing remote attackers to gain administrative access. The issue is tied to improper handling during authentic...
Security Advisory - Two Vulnerabilities in Huawei WS331a
Huawei WS331a is a Mini Wireless route. There is a Cross-site request forgery CSRF vulnerability in the management interface of WS331a products, an unauthenticated attacker could exploit this vulnerability to perform a CSRF attack. Successful exploit could allow the attacker to submit special...
IBM DB2 10.1 < Fix Pack 5 Multiple Vulnerabilities (Bar Mitzvah)
Binary data 9197.prm...
CVE-2015-6159
Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6140, CVE-2015-6142,...
CVE-2015-6159
CVE-2015-6159 is described in connected CNVD entries as a memory-corruption vulnerability affecting Microsoft Internet Explorer 11 and Microsoft Edge, exploitable via a crafted web site and capable of remote code execution or denial of service. The CNVD entries label it under the umbrella of memo...
Microsoft Internet Explorer Memory Corruption (MS15-124: CVE-2015-6159)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...
CVE-2013-6159
CVE-2013-6159 is rejected and not used as a vulnerability entry.
CVE-2014-6159
The CVE-2014-6159 issue affects IBM DB2 LUW: DB2 9.7 (before FP10), 9.8 (through FP5), 10.1 (through FP4), and 10.5 (through FP4) on Linux/UNIX/Windows when AUTO_REVAL is set to IMMEDIATE. A remote authenticated user can exploit a crafted ALTER TABLE statement to cause a DB2 server denial of serv...
CVE-2008-6159
Content Management Made Easy CMME 1.19 allows remote attackers to obtain system information via a direct request to info.php, which invokes the phpinfo function...
CVE-2008-6159
Content Management Made Easy (CMME) 1.19 is affected by an information disclosure vulnerability where a direct request to info.php invokes phpinfo, allowing remote attackers to obtain system information. The flaw is triggered by accessing the info.php entry point, and the underlying cause is the ...
CVE-2007-6159
The CVE-2007-6159 entry describes an SQL injection in index.php of Tilde CMS 4.x and earlier, exploitable via the aarstal parameter in the yeardetail action. This allows remote attackers to execute arbitrary SQL commands and is noted as a vector different from CVE-2006-1500.