56 matches found
CVE-2019-6235
creationtimestamp| type| source ---|---|--- 2019-01-28 15:10:00+00:00| seen| MISP/5c4f1a2e-1300-4391-87cf-19c50a021402...
KLA11408 Multiple vulnerabilities in Apple iTunes
Multiple vulnerabilities were found in Apple iTunes. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges, execute arbitrary code, perform cross-site scripting attack. Below is a complete list of vulnerabilities: 1. A memory corruption vulnerability i...
CVE-2018-6235
Trend Micro Maximum Security (Consumer) 2018 is affected by an Out-of-Bounds write privilege escalation in the tmnciesc.sys driver, caused by improper handling of IOCTL 0x222814. An attacker who can run low-privilege code locally can exploit this to escalate privileges on the target system. Affec...
CVE-2016-6235
The setupimginfojpg function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause a denial of service segmentation fault via a crafted jpeg file...
Oracle: Security Advisory (ELSA-2008-0580)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
TYPO3 Extension ke DomPDF - Remote Code Execution
TYPO3 Extension ke DomPDF - Remote Code Execution Advisory: Remote Code Execution in TYPO3 Extension kedompdf During a penetration test RedTeam Pentesting discovered a remote code execution vulnerability in the TYPO3 extension kedompdf, which allows attackers to execute arbitrary PHP commands in...
TYPO3 Extension ke DomPDF - Remote Code Execution
Advisory: Remote Code Execution in TYPO3 Extension kedompdf During a penetration test RedTeam Pentesting discovered a remote code execution vulnerability in the TYPO3 extension kedompdf, which allows attackers to execute arbitrary PHP commands in the context of the webserver. Details =======...
[RT-SA-2014-007] Remote Code Execution in TYPO3 Extension ke_dompdf
Advisory: Remote Code Execution in TYPO3 Extension kedompdf During a penetration test RedTeam Pentesting discovered a remote code execution vulnerability in the TYPO3 extension kedompdf, which allows attackers to execute arbitrary PHP commands in the context of the webserver. Details =======...
CVE-2014-6235
Unspecified vulnerability in the ke DomPDF extension before 0.0.5 for TYPO3 allows remote attackers to execute arbitrary code via unknown vectors...
CVE-2014-6235
The CVE-2014-6235 entry concerns the TYPO3 extension ke_dompdf. Affected Versions: 0.0.3 and earlier. Root cause: the extension ships an old dompdf library and includes an unprotected examples directory, enabling arbitrary PHP code execution on the server. Impact: remote code execution with high ...
CVE-2014-6235
Unspecified vulnerability in the ke DomPDF extension before 0.0.5 for TYPO3 allows remote attackers to execute arbitrary code via unknown vectors...
CVE-2013-6235
Multiple cross-site scripting XSS vulnerabilities in JAMon Java Application Monitor 2.7 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 listenertype or 2 currentlistener parameter to mondetail.jsp or ArraySQL parameter to 3 mondetail.jsp, 4 jamonadmin.jsp, 5...
CVE-2013-6235
CVE-2013-6235 refers to multiple reflected XSS vulnerabilities in JAMon (Java Application Monitor) v2.7 and earlier. The flaw allows remote attackers to inject arbitrary script/HTML via unsanitized input in parameters such as listenertype and currentlistener (in mondetail.jsp) and ArraySQL (in mo...
JAMon 2.7 Cross Site Scripting
Advisory Information Title: Multiple Reflected XSS vulnerabilities in JAMon Date published: 2013-01-23 Date of last update: 2013-01-23 Vendors contacted: JAMon v 2.7 Discovered by: Christian Catalano Severity: Low 02. Vulnerability Information CVE reference: CVE-2013-6235 CVSS v2 Base Score:...
Slackware: Security Advisory (SSA:2006-340-01b)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Slackware: Security Advisory (SSA:2006-340-01)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SLES9: Security update for gpg
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: gpg For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5017544 within the SuSE...
openSUSE Security Update : gvim (gvim-561)
The VI Improved editor vim was updated to version 7.2.108 to fix various security problems and other bugs. CVE-2008-4677: The netrw plugin sent credentials to all servers. CVE-2009-0316: The python support used a search path including the current directory, allowing code injection when python cod...