MS14-075: Vulnerabilities in Microsoft Exchange Server Could Allow Elevation of Privilege (3009712)

The version of Microsoft Exchange installed on the remote host is affected by multiple vulnerabilities : - A token spoofing vulnerability exists due to Microsoft Outlook Web App OWA not properly validating request tokens. A remote attacker can exploit this vulnerability by convincing a user to...

CVE-2013-6325

IBM WebSphere Application Server 7.x before 7.0.0.31, 8.0.x before 8.0.0.8, and 8.5.x before 8.5.5.2 allows remote attackers to cause a denial of service resource consumption via a crafted request to a web services endpoint...

CVE-2013-6325

CVE-2013-6325 affects IBM WebSphere Application Server (versions 7.x, 8.0.x, 8.5.x). It allows remote attackers to cause a denial of service by sending a crafted request to a web services endpoint. IBM bulletins describe fixes per product family: for WebSphere Application Server Full/Liberty prof...

VMSA-2012-0018 VMware security updates for vCSA and ESXi

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 VMware Security Advisory Advisory ID: VMSA-2012-0018 Synopsis: VMware security updates for vCSA and ESXi Issue date: 2012-12-20 Updated on: 2012-12-20 initial advisory CVE numbers: ------------- vCSA --------------- CVE-2012-6324, CVE-2012-6325...

CVE-2012-6325

CVE-2012-6325 affects VMware vCenter Server Appliance (vCSA) 5.0 prior to Update 2, due to an XML parsing vulnerability that allows an authenticated remote user to read arbitrary files. The issue is documented in the VMware advisory VMSA-2012-0018 and is addressed by upgrading to vCSA 5.0 Update ...

Mozilla Firefox 10.x < 10.0.2 'png_decompress_chunk' Integer Overflow

Binary data 6325.prm...

CVE-2008-6325

Multiple cross-site scripting XSS vulnerabilities in Softbiz Classifieds Script allow remote attackers to inject arbitrary web script or HTML via the 1 radio parameter to showcategory.php, 2 msg parameter to advertisers/signinform.php, 3 radio parameter to gallery.php, 4 msg parameter to...

CVE-2008-6325

CVE-2008-6325 concerns Softbiz Classifieds Script. The connected documents confirm multiple XSS vulnerabilities affecting the product, including vectors in showcategory.php (radio parameter), advertisers/signinform.php (msg parameter), gallery.php (radio), lostpassword.php (msg), and admin pages ...

CVE-2007-6325

CVE-2007-6325 affects Fastpublish CMS 1.9999; vulnerability in adminbereich/designconfig.php allows remote PHP code execution via a URL in config[fsBase]. This is a different vector from CVE-2006-2726. No remediation details are provided in the documents.