CVE-2015-6326

CVE-2015-6326 affects Cisco ASA hardware/software: the DNS code misparses crafted DNS responses, enabling unauthenticated remote attackers to trigger a denial of service (device reload). Affected software includes ASA 7.2, 8.2–8.2(5.58), 8.3–8.4(7.29), 8.5–8.7(1.17), 9.0(4.37), 9.1(6.6), 9.2(4), ...

CVE-2014-6326

Technical details for CVE-2014-6326 are not publicly available in the provided documents. Monitor for updates and avoid inferring product/version specifics or exploit info.

KLA10611 Multiple vulnerabilities in Microsoft Exchange Server

Multiple serious vulnerabilities have been found in Microsoft Exchange Server. Malicious users can exploit these vulnerabilities to gain privileges or spoof user interface. Below is a complete list of vulnerabilities 1. An improper tokens validation can be exploited remotely via an unspecified...

Microsoft Exchange Server Outlook Web Access Cross-Site Scripting (MS14-075; CVE-2014-6326)

An elevation of privilege vulnerability exists in Microsoft Exchange Server. The vulnerability is due to an error in Microsoft Exchange input validation. A remote attacker can exploit this issue by enticing a victim to open a specially crafted email with Microsoft Outlook Web Access OWA...

MS14-075: Vulnerabilities in Microsoft Exchange Server Could Allow Elevation of Privilege (3009712)

The version of Microsoft Exchange installed on the remote host is affected by multiple vulnerabilities : - A token spoofing vulnerability exists due to Microsoft Outlook Web App OWA not properly validating request tokens. A remote attacker can exploit this vulnerability by convincing a user to...

CVE-2012-6326

CVE-2012-6326 affects VMware vCenter Server 4.1 before Update 3 and 5.0 before Update 2, and vCenter Server Appliance/vCSA 5.0 before Update 2, enabling unauthenticated remote users to trigger abnormally large log entries and cause a denial of service (disk consumption). Connected advisories conf...

Mozilla Thunderbird 10.x < 10.0.1 Memory Corruption

Binary data 6326.prm...

SuSE 10 Security Update : libpng (ZYPP Patch Number 6326)

This update of libpng improves the parsing of 1-bit interlaced images. This bug could be abused to use 'out-of-bounds pixels' to read memory. CVE-2009-2042 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

CVE-2008-6326

Summary (CVE-2008-6326): A SQL injection flaw exists in login.php of the Simple Customer software, allowing remote attackers to inject arbitrary SQL via the email parameter. This is the root cause: unsanitized user input in a login routine leading to command execution against the database. Impact...

CVE-2008-6326

creationtimestamp| type| source ---|---|--- 2008-11-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7146...

CVE-2008-7053

creationtimestamp| type| source ---|---|--- 2008-08-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6326...

CVE-2007-6326

The CVE-2007-6326 entry affects Sergey Lyubka Simple HTTPD (shttpd) 1.3 on Windows. The vulnerability allows remote denial of service when a request includes an MS-DOS device name, as demonstrated by the /aux URI. The issue is triggered by processing a device-name in the request, leading to a par...

CVE-2007-6326

Sergey Lyubka Simple HTTPD shttpd 1.3 on Windows allows remote attackers to cause a denial of service via a request that includes an MS-DOS device name, as demonstrated by the /aux URI...