CVE-2014-6268

The CVE-2014-6268 issue concerns the Xen hypervisor (notably Xen 4.4.x) where evtchn_fifo_set_pending can trigger a denial-of-service host crash due to an uninitialized FIFO-based event channel control block when binding or moving an event to another VCPU. Public sources describe the vulnerabilit...

Fedora 21 : xen-4.4.1-2.fc21 (2014-10531)

Mishandling of uninitialised FIFO-based event channel control blocks XSA-107, CVE-2014-6268 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2008-6268. Reason: This candidate is a duplicate of CVE-2008-6268. Notes: All CVE users should reference CVE-2008-6268 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2008-6628

CVE-2008-6628 is a duplicate of CVE-2008-6268 (noted as a rejected candidate in the CVE record). Connected records confirm a SQL injection vulnerability in WEBBDOMAIN Multi Languages WebShop Online 1.02, exposed via the id parameter in detail.php, allowing remote attackers to execute arbitrary SQ...

CVE-2008-6268

CVE-2008-6268 is a SQL injection vulnerability in WEBBDOMAIN Multi Languages WebShop Online 1.02, reachable via the id parameter in detail.php. The root cause is an unsafely constructed SQL query that allows remote attackers to execute arbitrary SQL commands. Public references exist (e.g., Exploi...

CVE-2008-6268

creationtimestamp| type| source ---|---|--- 2008-11-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6974...

CVE-2006-6268

CVE-2006-6268 is a SQL injection vulnerability affecting Neocrome Land Down Under (LDU) 8.x and earlier. The flaw resides in system/core/profile/profile.inc.php, where a url-encoded id parameter to users.php that begins with a valid filename can be exploited by remote authenticated users to injec...

CVE-2006-6268

SQL injection vulnerability in system/core/profile/profile.inc.php in Neocrome Land Down Under LDU 8.x and earlier allows remote authenticated users to execute arbitrary SQL commands via a url-encoded id parameter to users.php that begins with a valid filename, as demonstrated by "default.gif"...