CVE-2020-6240

SAP NetWeaver AS ABAP Web Dynpro ABAP, versions SAPUI 750, 752, 753, 754 and SAPBASIS 700, 710, 730, 731, 804 allows an unauthenticated attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service leading to Denial of Service...

[SECURITY] [DLA 1923-1] ansible security update

Package : ansible Version : 1.7.2+dfsg-2+deb8u2 CVE ID : CVE-2015-3908 CVE-2015-6240 CVE-2018-10875 CVE-2019-10156 Debian Bug : 930065 Several vulnerabilities were discovered in Ansible, a configuration management, deployment, and task execution system. CVE-2015-3908 A potential man-in-the-middle...

CVE-2018-6240

CVE-2018-6240 affects NVIDIA Tegra BootRom. A local attacker with kernel privileges can write an arbitrary value to an arbitrary physical address, enabling escalation of privileges. Connected NVIDIA advisories confirm this vulnerability and map fixes to specific Jetson/Linux-for-Tegra releases: T...

CVE-2019-6240

An issue was discovered in GitLab Community and Enterprise Edition before 11.4. It allows Directory Traversal...

CVE-2019-6240

CVE-2019-6240 affects GitLab Community and Enterprise Edition prior to 11.4 and is a Directory Traversal vulnerability. Multiple connected sources corroborate: GitLab before 11.4 allows traversal to read files/reports, enabling an attacker to read arbitrary reports (CNVD-2019-08323); OpenVAS also...

FreeBSD : Gitlab -- Arbitrary repo read in Gitlab project import (ff50192c-19eb-11e9-8573-001b217b3468)

Gitlab reports : Arbitrary repo read in Gitlab project import C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2020 Jacques Vidrine and contributors Redistribution and use in source VuXML and...

CVE-2015-6240

The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environment via a symlink attack...

CVE-2015-6240

CVE-2015-6240 concerns Ansible, where the chroot, jail, and zone connection plugins allow a local attacker to escape a restricted environment via a symlink attack. Affected software is Ansible versions older than 1.9.2, as described in multiple sources (including GHSA and Debian/Ubuntu advisories...

CVE-2015-6240

The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environment via a symlink attack...

CVE-2012-6240

...

CVE-2012-6240

The CVE-2012-6240 entry is rejected/not used and does not represent an active vulnerability.

CVE-2016-6240

Integer truncation error in the amapalloc function in OpenBSD 5.8 and 5.9 allows local users to execute arbitrary code with kernel privileges via a large size value...

CVE-2016-6240

Integer truncation error in the amapalloc function in OpenBSD 5.8 and 5.9 allows local users to execute arbitrary code with kernel privileges via a large size value...

CVE-2016-6240

CVE-2016-6240 describes an integer truncation in OpenBSD 5.8/5.9’s amap_alloc kernel function, enabling local privilege escalation to kernel level via a large size value. The vulnerability affects the kernel space and is documented in NVD and OpenBSD errata pages; exploitation details are not pro...

CVE-2014-6240

Cross-site scripting XSS vulnerability in the Google Sitemap weeaargooglesitemap extension 0.4.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-6240

CVE-2014-6240 is an XSS vulnerability in the TYPO3 extension Google Sitemap (weeaar_googlesitemap) 0.4.3 and earlier. The connected TYPO3 bulletin confirms the affected extension and versions, and states that vulnerable extensions will no longer be available for download, but it does not provide ...

SuSE 10 Security Update : quagga (ZYPP Patch Number 6240)

This update fixes a remote denial of service bug in quagga that can be triggered via an AS path containing ASN elements whose string representation is longer than expected. CVE-2009-1572 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

CVE-2008-6240

OpenEdit Digital Asset Management (DAM) contains a Cross-site Scripting (XSS) vulnerability in data/views/index.html, exploitable via the catalogid parameter. Affected software is OpenEdit DAM prior to version 5.2014. The vulnerability allows remote attackers to inject arbitrary web script or HTM...

CVE-2008-4321

creationtimestamp| type| source ---|---|--- 2008-08-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6240 2008-08-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6248 2008-08-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6256 2026-06-28...

CVE-2007-6240

CVE-2007-6240 concerns a SQL injection in Snitz Forums 2000 (build 3.4.06) via the BuildTime parameter in active.asp, allowing remote attackers to execute arbitrary SQL commands. Affected software: Snitz Forums 2000 3.4.06. Root cause: unparameterized SQL handling in the active.asp path. Impact: ...