39 matches found
macOS : Apple Safari < 12.0.3 Multiple Vulnerabilities
The version of Apple Safari installed on the remote macOS or Mac OS X host is prior to 12.0.3. It is, therefore, affected by the following vulnerabilities : - Input-validation errors exist that allow memory corruption leading to arbitrary code execution. CVE-2019-6212, CVE-2019-6215, CVE-2019-621...
KLA11408 Multiple vulnerabilities in Apple iTunes
Multiple vulnerabilities were found in Apple iTunes. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges, execute arbitrary code, perform cross-site scripting attack. Below is a complete list of vulnerabilities: 1. A memory corruption vulnerability i...
About the security content of iCloud for Windows 7.10
About the security content of iCloud for Windows 7.10 This document describes the security content of iCloud for Windows 7.10. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...
CVE-2018-6234
An Out-of-Bounds Read Information Disclosure vulnerability in Trend Micro Maximum Security Consumer 2018 could allow a local attacker to disclose sensitive information on vulnerable installations due to a flaw within processing of IOCTL 0x222814 by the tmnciesc.sys driver. An attacker must first...
CVE-2018-6234
CVE-2018-6234 affects Trend Micro Maximum Security (Consumer) 2018. It describes an Out-of-Bounds Read Information Disclosure in the tmnciesc.sys driver, arising from improper handling of IOCTL 0x222814. A local attacker who can run low-privilege code can disclose sensitive information on the tar...
CVE-2018-6234
An Out-of-Bounds Read Information Disclosure vulnerability in Trend Micro Maximum Security Consumer 2018 could allow a local attacker to disclose sensitive information on vulnerable installations due to a flaw within processing of IOCTL 0x222814 by the tmnciesc.sys driver. An attacker must first...
CVE-2015-6234
This CVE-2015-6234 entry is rejected and does not represent an active vulnerability.
CVE-2012-6234
CVE-2012-6234 is rejected/not used according to the initial description.
CVE-2016-6234
CVE-2016-6234 targets Dropbox Lepton 1.0. The issue is in the process_file function (lepton/jpgcoder.cc) and can be triggered by a crafted JPEG to cause a denial of service (crash). The vulnerability is documented across multiple sources (NVD, SUSE, Ubuntu, OSV, CVE list, CNVD) and described as a...
CVE-2014-6234
CVE-2014-6234 is a Cross-Site Scripting (XSS) vulnerability in the TYPO3 Open Graph protocol extension (jh_opengraphprotocol) prior to version 1.0.2. The exploit vectors are not specified in the provided documents, but the issue allows remote attackers to inject arbitrary web script or HTML. The ...
[CVE-2013-6234] XSS File Upload in SpagoBI v4.0
Advisory Information Title: XSS File Upload Date published: 2014-03-01 Date of last update: 2014-03-01 Vendors contacted: Engineering Group Discovered by: Christian Catalano Severity: Medium 02. Vulnerability Information CVE reference: CVE-2013-6234 CVSS v2 Base Score: 4 CVSS v2 Vector:...
SpagoBI 4.0 - Arbitrary Cross-Site Scripting / Arbitrary File Upload
Advisory Information Title: XSS File Upload Date published: 2014-03-01 Date of last update: 2014-03-01 Vendors contacted: Engineering Group Discovered by: Christian Catalano Severity: Medium 02. Vulnerability Information CVE reference: CVE-2013-6234 CVSS v2 Base Score: 4 CVSS v2 Vector:...
SpagoBI 4.0 - Arbitrary Cross-Site Scripting Arbitrary File Upload
SpagoBI 4.0 - Arbitrary Cross-Site Scripting Arbitrary File Upload 01. Advisory Information Title: XSS File Upload Date published: 2014-03-01 Date of last update: 2014-03-01 Vendors contacted: Engineering Group Discovered by: Christian Catalano Severity: Medium 02. Vulnerability Information CVE...
SpagoBI 4.0 Cross Site Scripting / Shell Upload
Advisory Information Title: XSS File Upload Date published: 2014-03-01 Date of last update: 2014-03-01 Vendors contacted: Engineering Group Discovered by: Christian Catalano Severity: Medium 02. Vulnerability Information CVE reference: CVE-2013-6234 CVSS v2 Base Score: 4 CVSS v2 Vector:...
CVE-2008-6234
CVE-2008-6234 is a confirmed SQL injection in the com_musica module of Joomla! and Mambo, exploitable through the id parameter to index.php. The vulnerability allows remote attackers to execute arbitrary SQL commands, impacting databases associated with affected installations. Affected products a...
CVE-2008-6234
creationtimestamp| type| source ---|---|--- 2008-03-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5207...
CVE-2007-6234
CVE-2007-6234 : The vulnerability in FTP Admin 0.1.0 allows remote attackers to bypass authentication and gain administrative access by supplying a loggedin=true parameter, demonstrated by adding a user account. The issue affects the login/authentication check in index.php and has a high impact (...
CVE-2006-6234
Multiple SQL injection vulnerabilities in the Content module in PHP-Nuke 6.0, and possibly other versions, allow remote attackers to execute arbitrary SQL commands via 1 the cid parameter in a listpagescategories action or 2 the pid parameter in a showpage action...