CVE-2016-6291

The exifprocessIFDinMAKERNOTE function in ext/exif/exif.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service out-of-bounds array access and memory corruption, obtain sensitive information from process memory, or possibly have...

CVE-2015-6291

Cisco AsyncOS before 8.5.7-043, 9.x before 9.1.1-023, and 9.5.x and 9.6.x before 9.6.0-046 on Email Security Appliance ESA devices mishandles malformed fields during body-contains, attachment-contains, every-attachment-contains, attachment-binary-contains, dictionary-match, and...

CVE-2015-6291

CVE-2015-6291 affects Cisco AsyncOS on Email Security Appliance (ESA) devices. Root cause: improper input validation when filtering attachments (body-contains, attachment-contains, every-attachment-contains, attachment-binary-contains, dictionary-match, and attachment-dictionary-match), which can...

CVE-2014-6291

CWE-like summary: The CVE-2014-6291 entry corresponds to a Cross-Site Scripting vulnerability in the TYPO3 third-party extension Alphabetic Sitemap (alpha_sitemap) versions 0.0.3 and earlier. The XSS is described with unspecified vectors and the affected component is the alpha_sitemap extension i...

CVE-2014-6291

Cross-site scripting XSS vulnerability in the Alphabetic Sitemap alphasitemap extension 0.0.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-6291

CVE-2008-6291 affects Acc PHP eMail 1.1, where a remote attacker can bypass authentication and gain administrative access by setting the NEWSLETTERLOGIN cookie to "admin". The vulnerability stems from insufficient server-side validation of the login cookie, enabling privilege escalation without v...

CVE-2007-6291

CVE-2007-6291 affects Xigla Absolute Banner Manager .NET 4.0. The vulnerability is a SQL injection in abm.aspx accessible via the z parameter, enabling remote attackers to execute arbitrary SQL commands. The entry is rated CVSS v2 base score 7.5 (HIGH) with network access and low complexity. Expl...

CVE-2006-6291

Stack overflow in the IMAP module MEIMAPS.EXE in MailEnable Professional 1.6 through 1.83 and 2.0 through 2.33, and MailEnable Enterprise 1.1 through 1.40 and 2.0 through 2.33, allows remote authenticated users to cause a denial of service crash via a long argument containing asterisk and ?...

CVE-2006-6291

Stack overflow in the IMAP module MEIMAPS.EXE in MailEnable Professional 1.6 through 1.83 and 2.0 through 2.33, and MailEnable Enterprise 1.1 through 1.40 and 2.0 through 2.33, allows remote authenticated users to cause a denial of service crash via a long argument containing asterisk and ?...

CVE-2006-6291

CVE-2006-6291 describes a stack overflow in MailEnable’s IMAP module (MEIMAPS.EXE) affecting MailEnable Professional 1.6–1.83 and 2.0–2.33, and MailEnable Enterprise 1.1–1.40 and 2.0–2.33. An authenticated remote user could crash the service by sending a long argument containing * and ? character...