79 matches found
CVE-2016-6175
Eval injection vulnerability in php-gettext 1.0.12 and earlier allows remote attackers to execute arbitrary PHP code via a crafted plural forms header...
PHP gettext 1.0.12 Code Execution
CVE-2016-6175 gettext.php | @kmkzsecurity Project Homepage: https://launchpad.net/php-gettext/ Download: https://launchpad.net/php-gettext/trunk/1.0.12/+download/php-gettext-1.0.12.tar.gz Version: 1.0.12 latest release Tested on: Linux Debian, PHP 5.6.19-2+b1 CVSS: 7.1 OVE ID: OVE-20160705-0004 C...
PHP gettext 1.0.12 - (gettext.php) Unauthenticated Code Execution
Exploit for php platform in category web applications CVE-2016-6175 gettext.php | @kmkzsecurity Project Homepage: https://launchpad.net/php-gettext/ Download: https://launchpad.net/php-gettext/trunk/1.0.12/+download/php-gettext-1.0.12.tar.gz Version: 1.0.12 latest release Tested on: Linux Debian,...
PHP gettext 1.0.12 - 'gettext.php' Code Execution
CVE-2016-6175 gettext.php | @kmkzsecurity Project Homepage: https://launchpad.net/php-gettext/ Download: https://launchpad.net/php-gettext/trunk/1.0.12/+download/php-gettext-1.0.12.tar.gz Version: 1.0.12 latest release Tested on: Linux Debian, PHP 5.6.19-2+b1 CVSS: 7.1 OVE ID: OVE-20160705-0004 C...
CVE-2016-6175
creationtimestamp| type| source ---|---|--- 2016-07-25 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40154...
CVE-2015-6175
CVE-2015-6175 is a Windows kernel local privilege escalation vulnerability. The initial description identifies a memory-elevation flaw in the Windows kernel that allows a crafted application running with local access to gain elevated privileges. Connected documents corroborate that this family in...
VulnCheck KEV: CVE-2015-6175
The kernel in Microsoft Windows contains a vulnerability that allows local users to gain privileges via a crafted application...
CVE-2014-6175
Cross-site scripting XSS vulnerability in IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x before 9.0.0.4.1, 9.1.0.x before 9.1.0.5, and 9.1.1.x before 9.1.1.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-6175
CVE-2014-6175 affects IBM Marketing Operations (IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2; 8.6.x before 8.6.0.8; 9.0.x before 9.0.0.4.1; 9.1.0.x before 9.1.0.5; 9.1.1.x before 9.1.1.2). It is a cross-site scripting (XSS) vulnerability that allows remote authenticated users to inject a...
ESA-2013-078: EMC Document Sciences xPression Multiple Vulnerabilities
ESA-2013-078.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-078: EMC Document Sciences xPression Multiple Vulnerabilities EMC Identifier: ESA-2013-078 CVE Identifier: CVE-2013-6173, CVE-2013-6174, CVE-2013-6175, CVE-2013-6176, CVE-2013-6177 Severity Rating: CVSS v2 Base Score: See bel...
CVE-2013-6175
EMC Document Sciences xPression CVE-2013-6175 describes multiple XSS flaws in xAdmin and xDashboard that could allow an authenticated user to inject script/HTML via input. Affected versions include 4.1 SP1 prior to Patch 47, 4.2 prior to Patch 26, and 4.5 prior to Patch 05. The issues are part of...
Successful Shell Attack Detected - Unix 'tethereal' Tool
Binary data 6175.prm...
CVE-2008-6175
SilverSHielD 1.0.2.34 is affected by CVE-2008-6175. The vulnerability allows a remote attacker to cause an application crash (DoS) by sending a crafted argument to the opendir SFTP command. The NVD entry lists a CVSSv2 base score of 5.0 (Medium) with network attack vector and minimal authenticati...
Gentoo Security Advisory GLSA 200701-11 (horde-kronolith)
The remote host is missing updates announced in advisory GLSA 200701-11. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
CVE-2007-6175
CVE-2007-6175 affects Lhaplus 1.55 and earlier. A buffer overflow in LZH archive handling could allow remote attackers to execute arbitrary code when decompressing a crafted LZH file. Connected documents corroborate a vulnerable Lhaplus prior to 1.55 and note this is a separate issue from CVE-200...
CVE-2007-6175
Buffer overflow in Lhaplus 1.55 and earlier allows remote attackers to execute arbitrary code via a crafted LZH archive, a different vector than CVE-2007-5048...
CVE-2006-6175
CVE-2006-6175 affects Horde Kronolith (lib/FBView.php) where a raw unfiltered string enables directory traversal with a .. sequence in the view parameter, allowing an authenticated or remote attacker to include arbitrary files and execute PHP code. Affected: Kronolith H3 < 2.0.7 and Kronolith ...