41 matches found
CVE-2020-6264
SAP Commerce (versions 6.7, 1808, 1811, 1905) is affected by an information-disclosure vulnerability. The available connected sources indicate an attacker could access information that should be restricted under certain conditions. The exact root cause, vulnerable component/file, exploit details,...
Joomla! < 3.9.2 Multiple Vulnerabilities
Joomla! is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla"; ifdescription...
CVE-2019-6264
Joomla! prior to 3.9.2 is affected by a stored XSS in mod_banners due to inadequate escaping (also reflected in related Nessus/OpenVAS findings for Joomla! components). The issue allows injection of script/HTML via the affected banner component and is described across multiple sources as a stored...
Privilege escalation
An elevation of privilege vulnerability exists in the NVIDIA GPU driver gm20bclkthrotsetcdevstate, where an out of bound memory read is used as a function pointer could lead to code execution in the kernel.This issue is rated as high because it could allow a local malicious application to execute...
CVE-2017-6264
CVE-2017-6264 is an elevation-of-privilege vulnerability in the NVIDIA GPU driver used on Android, specifically within the gm20b_clk_throt_set_cdev_state path. An out-of-bounds memory read can be used as a function pointer, potentially allowing a local attacker to execute arbitrary code in kernel...
CVE-2013-6264
CVE-2013-6264 entry is rejected/not used and does not represent an active vulnerability.
CVE-2012-6264
CVE-2012-6264 is rejected/not used and does not represent an active vulnerability entry.
DEBIAN-CVE-2016-6264
Integer signedness error in libc/string/arm/memset.S in uClibc and uClibc-ng before 1.0.16 allows context-dependent attackers to cause a denial of service crash via a negative length value to the memset function...
CVE-2016-6264
Integer signedness error in libc/string/arm/memset.S in uClibc and uClibc-ng before 1.0.16 allows context-dependent attackers to cause a denial of service crash via a negative length value to the memset function...
CVE-2016-6264
CVE-2016-6264 is a memory-safety issue in uClibc and uClibc-ng prior to 1.0.16. The bug is an integer signedness error in libc/string/arm/memset.S that allows context-dependent attackers to crash the process (denial of service) via a negative length value passed to memset. Affected products are u...
Fedora 25 : uClibc (2016-417ceefc85)
Update Power64 macro ---- Security fix for CVE-2016-6264 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...
Fedora 24 : uClibc (2016-53cc023dd6)
Security fix for CVE-2016-6264 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...
Debian DLA-561-1 : uclibc security update
Several vulnerabilities have been discovered in uClibc, an implementation of the standard C library that is much smaller than glibc, which makes it useful for embedded systems. CVE-2016-2224 Fix possible denial of service via a specially crafted DNS reply that could cause an infinite loop...
[SECURITY] [DLA 561-1] uclibc security update
Package : uclibc Version : 0.9.32-1+deb7u1 CVE ID : CVE-2016-2224 CVE-2016-2225 CVE-2016-6264 Several vulnerabilities have been discovered in uClibc, an implementation of the standard C library that is much smaller than glibc, which makes it useful for embedded systems. CVE-2016-2224 Fix possible...
Oracle MySQL Server 5.1 < 5.1.61 / 5.5 < 5.5.20 Multiple Unspecified Vulnerabilities
Binary data 6264.prm...
SuSE 10 Security Update : acroread_ja (ZYPP Patch Number 6264)
This update of acroread fixes two vulnerabilities in the JavaScript API that allow attackers to execute arbitrary code with a malformed PDF file. CVE-2009-1492 / CVE-2009-1493 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...
CVE-2008-6264
creationtimestamp| type| source ---|---|--- 2009-12-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10832...
CVE-2008-6264
CVE-2008-6264 : Affected product is E-topbiz Slide Popups 1.0; vulnerability in the admin.php script (password parameter) enables SQL injection, allowing remote attackers to execute arbitrary SQL commands. Root cause appears to be insufficient input validation/sanitization in the affected code pa...