42 matches found
CVE-2019-6203
A logic issue was addressed with improved state management. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2. An attacker in a privileged network position may be able to intercept network traffic...
CVE-2019-6203
CVE-2019-6203 affects Apple devices via the 802.1X component, where a logic/state-management issue could allow a privileged network-position attacker to intercept traffic. Apple’s security pages tie this to iOS 12.2, macOS Mojave 10.14.4, and tvOS 12.2, with fixes in those releases. The CVE is do...
CVE-2020-6203
CVE-2020-6203 concerns SAP NetWeaver UDDI Server (Services Registry) versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50. The vulnerability arises from insufficient validation of path information provided by users, allowing path traversal characters to reach file APIs and potentially access restric...
About the security content of tvOS 12.2
About the security content of tvOS 12.2 This document describes the security content of tvOS 12.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
CVE-2018-6203
In CVE-2018-6203, the issue affects eScan Antivirus 14.0.1400.2029 due to the driver file econceal.sys not validating input values from IOCTL 0x8300210C. This allows a local attacker to cause a denial of service (BSOD) or other unspecified impact. The vulnerability is tied to the kernel/user boun...
CVE-2015-6203
CVE-2015-6203 is rejected/not used and does not represent an active vulnerability entry.
CVE-2012-6203
This CVE-2012-6203 entry is rejected and does not represent an active vulnerability.
[security bulletin] HPSBMU02971 rev.1 - HP Application Information Optimizer, Remote Execution of Code, Information Disclosure
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04140965 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04140965 Version: 1 HPSBMU02971 rev....
HP Application Information Optimizer任意代码执行漏洞
Bugtraq ID:65766 CVE ID:CVE-2013-6203 HP Application Information Optimizer数据库软件可用智能数据管理和存储将结构化数据占用空间降至最低,并实现应用信息价值最大化。 HP Application Information Optimizer WEB控制台组件存在未明漏洞,允许远程攻击者利用漏洞执行任意代码。 0 HP Application Information Optimizer 7.1 HP Application Information Optimizer 7.0 HP Application...
CVE-2013-6203
The CVE-2013-6203 issue affects HP Application Information Optimizer Web Console (HP AI Optimizer, formerly HP Database Archiving) versions 6.2, 6.3, 6.4, 7.0, and 7.1. The vulnerability allows remote code execution or information disclosure via unspecified vectors, and is exploitable without aut...
SLES9: Security update for Apache 2
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: apache2 apache2-worker apache2-prefork libapr0 apache2-doc apache2-devel apache2-example-pages For more information, please visit the referenced security...
CVE-2008-6203
The CVE-2008-6203 entry concerns CoBaLT 2.0, specifically the adminler.asp component. The vulnerability is a SQL injection in the id parameter that enables remote attackers to execute arbitrary SQL commands. Root cause: unsafely interpolated input in the id parameter leads to database command exe...
CVE-2008-6203
SQL injection vulnerability in adminler.asp in CoBaLT 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Gentoo Security Advisory GLSA 200803-19 (apache)
The remote host is missing updates announced in advisory GLSA 200803-19. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
SuSE 10 Security Update : Apache 2 (ZYPP Patch Number 5128)
This update fixes multiple bugs in apache : - cross-site scripting problem in modimap. CVE-2007-5000 - cross-site scripting problem in modstatus. CVE-2007-6388 - cross-site scripting problem in the ftp proxy module. CVE-2008-0005 - cross-site scripting problem in the error page for status code 41...
openSUSE 10 Security Update : apache2 (apache2-5127)
This update fixes multiple bugs in apache : - cross site scripting problem in modimap CVE-2007-5000 - cross site scripting problem in modstatus CVE-2007-6388 - cross site scripting problem in the error page for status code 413 CVE-2007-6203 - cross site scripting problem in modproxybalancer...
Apache 2.2.x < 2.2.8 Multiple Vulnerabilities (XSS, DoS)
According to its banner, the version of Apache 2.2.x running on the remote host is prior to 2.2.8. It is, therefore, affected by the following vulnerabilities : - A cross-site scripting issue involving modimagemap CVE-2007-5000. - A cross-site scripting issue involving 413 error pages via a...
CVE-2007-6203
Apache HTTP Server 2.0.x and 2.2.x does not sanitize the HTTP Method specifier header from an HTTP request when it is reflected back in a "413 Request Entity Too Large" error message, which might allow cross-site scripting XSS style attacks using web client components that can send arbitrary...
CVE-2007-6203
Apache HTTP Server 2.0.x and 2.2.x are affected by CVE-2007-6203, where the HTTP Method header is not sanitized when reflected in a 413 Response, enabling cross-site scripting-like attacks via headers sent by the client. The root cause is lack of sanitization of the Method specifier header in suc...