CVE-2016-6254

CVE-2016-6254 is a heap-based buffer overflow in the parse_packet function of network.c in collectd, exploitable via crafted network packets. Affected versions are collectd before 5.4.3 and 5.x before 5.5.2, enabling remote denial of service (daemon crash) and potentially arbitrary code execution...

FreeBSD : collectd -- Network plugin heap overflow (6da45e38-5b55-11e6-8859-000c292ee6b8)

The collectd Project reports : Emilien Gaspar has identified a heap overflow in collectd's network plugin which can be triggered remotely and is potentially exploitable. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

Fedora 24 : collectd (2016-e16a14ffc5)

Upstream released new version https://collectd.org/news.shtmlnews98 - Contains fix for CVE-2016-6254 - Drop a few patches applied upstream Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to...

Fedora 23 : collectd (2016-23f0d552e8)

Upstream released new version https://collectd.org/news.shtmlnews98 - Contains fix for CVE-2016-6254 - Drop a few patches applied upstream Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to...

[SECURITY] [DSA 3636-1] collectd security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3636-1 [email protected] https://www.debian.org/security/ Sebastien Delafond July 30, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3636-1] collectd security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3636-1 [email protected] https://www.debian.org/security/ Sebastien Delafond July 30, 2016 https://www.debian.org/security/faq -...

CVE-2015-6254

The CVE-2015-6254 entry involves PicketLink (SP/IdP) prior to version 2.7.0 where the Destination attribute in a SAML Response is not validated against the message origin, enabling remote attackers to leverage unspecified vectors. Publicly documented references (NVD/NVD-derived CNVD) confirm the ...

CVE-2014-6254

CVE-2014-6254 refers to multiple cross-site scripting (XSS) vulnerabilities in Zenoss Core up to 5 Beta 3. The NVD description states that remote attackers could inject arbitrary web script or HTML via an attribute in a device name, device detail, report name, report detail, portlet name, or via ...

CVE-2008-6254

CVE-2008-6254 is a SQL injection vulnerability in the Jadu Galaxies web application, specifically in scripts/documents.php. An attacker can modify the categoryID parameter to execute arbitrary SQL commands on the backend database. This aligns with the NVD entry showing a CVSSv2 base score of 7.5 ...

CVE-2008-6254

creationtimestamp| type| source ---|---|--- 2008-11-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7144...

CVE-2007-6254

CVE-2007-6254 involves a stack-based buffer overflow in the SAP BusinessObjects RptViewerAX ActiveX control (RptViewerAX.dll) for BusinessObjects 6.5, prior to CHF74. The overflow in the RptViewerAX ActiveX control can allow a remote attacker to execute arbitrary code, with exploitation described...

CVE-2006-6254

CVE-2006-6254 affects Cahier de texte 2.0, specifically the file administration/telecharger.php. The vulnerability allows remote attackers to read unparsed file content by supplying a chemin parameter, with evidence of directory traversal used to retrieve sensitive data (e.g., MySQL credentials f...