Ubuntu: Security Advisory (USN-3060-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 3619-1] libgd2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3619-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 15, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3619-1] libgd2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3619-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 15, 2016 https://www.debian.org/security/faq -...

CVE-2016-6214

gdtga.c in the GD Graphics Library aka libgd before 2.2.3 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA file...

CVE-2016-6214

gdtga.c in the GD Graphics Library aka libgd before 2.2.3 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA file...

IBM WebSphere Portal 8.0.0.x < 8.0.0.1 CF15 / 8.5.0.0 < 8.5.0.0 CF05 Multiple XSRF / XSS (PI34987, PI33329, PI35228)

The version of IBM WebSphere Portal installed on the remote host is 8.0.0.x prior to 8.0.0.1 Cumulative Fix 15 / 8.5.0.0 prior to 8.5.0.0 Cumulative Fix 05. It is, therefore, affected by multiple vulnerabilities : - An unspecified XSRF vulnerability exists due to improper validation of...

[security bulletin] HPSBMU02988 rev.1 - HP Universal Configuration Management Database, Disclosure of Information

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04220407 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04220407 Version: 1 HPSBMU02988 rev....

HP Universal Configuration Management Database远程代码执行漏洞

Bugtraq ID:66962 CVE ID:CVE-2013-6214 HP Universal Configuration Management Database是惠普公司的统一配置管理数据库应用。 HP Universal Configuration Management Database存在一个未明安全漏洞，允许远程攻击者利用漏洞获取敏感信息。 0 HP Universal Configuration Management Database Integration Service v9.05 HP Universal Configuration Management...

CVE-2013-6214

HP Universal Configuration Management Database (UCMDB) Integration Service (v9.05, v10.01, v10.10) contains an unspecified vulnerability that could allow remote authenticated users to disclose information via unknown vectors (ZDI-CAN-2042). The HP security bulletin (HPSBMU02988 rev.1, 2014-04-17)...

FTP Attack - Hidden Directory Created

Binary data 6214.prm...

CVE-2008-6214

CVE-2008-6214 describes an SQL injection in poll_results.php of Harlandscripts Pro Traffic One, where the vulnerable parameter is id. The connected documents confirm the vulnerability type (SQL injection), affected component/file (poll_results.php), and the input vector (id parameter) that enable...

CVE-2008-6214

creationtimestamp| type| source ---|---|--- 2008-10-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6877...

Unfixed XSS vulnerability at www.kvasir.no

Security researcher Tr0jAn, has submitted on 29/10/2008 a cross-site-scripting XSS vulnerability affecting www.kvasir.no, which at the time of submission ranked 6214 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/11/2008. It is currently...

CVE-2008-3554

creationtimestamp| type| source ---|---|--- 2008-08-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6214...

CVE-2007-6214

CVE-2007-6214 relates to a directory traversal vulnerability in LearnLoop 2.0 beta7. The flaw is in the include/file_download.php component, where an attacker can supply a".." sequence via the sFilePath parameter to read arbitrary files on the server. The vulnerability’s impact is described as re...

CVE-2007-6214

Directory traversal vulnerability in include/filedownload.php in LearnLoop 2.0 beta7 allows remote attackers to read arbitrary files via a .. dot dot in the sFilePath parameter. NOTE: exploitation requires that the product is configured, but has zero files in the database...

CVE-2006-6214

CVE-2006-6214: SQL injection in Wallpaper Website (Wallpaper Complete Website) 1.0.09, via wallpaperid parameter in wallpaper.php. Remote attackers can execute arbitrary SQL commands. Affected software is the Wallpaper Website product as listed; CVSS v2 base score 7.5 (HIGH) with partial impact o...