CVE-2018-6330

Laravel 5.4.15 is vulnerable to Error based SQL injection in save.php via dhxuser and dhxversion parameters...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.1.0.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2018-14310

CVE-2018-14310 affects Foxit Reader (and related Foxit products) with a use-after-free in event handling that fails to validate the existence of an object before operating on it. Exploitation can allow remote code execution with user interaction required (visiting a malicious page or opening a ma...

CVE-2018-14310

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.1.0.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2017-6330

Symantec Encryption Desktop before SED 10.4.1MP2 can allow remote attackers to cause a denial of service resource consumption via crafted web requests."...

CVE-2017-6330

CVE-2017-6330 affects Symantec Encryption Desktop (SED) prior to version 10.4.1 MP2. The DoS vulnerability allows remote attackers to cause resource consumption to the affected system by sending crafted web requests. The issue is documented across multiple sources in the connected documents, all ...

Symantec Encryption Desktop DoS

SUMMARY Symantec has released an update to address an issue in the Symantec Encryption Desktop product. AFFECTED PRODUCTS Symantec Encryption Desktop SED --- CVE | Affected Versions | Remediation CVE-2017-6330 | Prior to 10.4.1MP2 | Upgrade to 10.4.1MP2 ISSUES CVE-2017-6330 --- Severity/CVSSv3: |...

Foswiki 1.0.x < 1.0.11 / 1.1.x < 1.1.7 DoS Vulnerability

Foswiki is prone to a denial of service DoS vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; yo...

CVE-2016-6330

The server in Red Hat JBoss Operations Network JON, when SSL authentication is not configured for JON server / agent communication, allows remote attackers to execute arbitrary code via a crafted HTTP request, related to message deserialization. NOTE: this vulnerability exists because of an...

CVE-2016-6330

CVE-2016-6330 affects Red Hat JBoss Operations Network (JON). The issue allows remote code execution via a crafted HTTP request when SSL authentication is not configured for JON server/agent communication, linked to message deserialization. Affected versions are before 3.3.6; the root cause relat...

IBM WebSphere Application Server Information Disclosure Vulnerability (swg21661323)

IBM WebSphere Application Server is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2015-6330

Cross-site request forgery CSRF vulnerability in Cisco Prime Collaboration Assurance 10.51 and 10.6 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus62712...

CVE-2015-6330

Cisco Prime Collaboration Assurance (versions 10.5(1) and 10.6) is affected by a CSRF vulnerability in its web interface due to insufficient CSRF protections. This could allow a remote, unauthenticated attacker to hijack the authentication of arbitrary users by enticing them to visit a crafted li...

CVE-2014-6330

CVE-2014-6330 affects Microsoft Internet Explorer 9 and is a memory-corruption vulnerability that can allow remote code execution via a crafted web page. The issue is due to IE processing certain web content leading to memory corruption. Affected product: Internet Explorer 9 (and IE versions unde...

MS14-080: Cumulative Security Update for Internet Explorer (3008923)

The version of Internet Explorer installed on the remote host is missing Cumulative Security Update 3008923. It is, therefore, affected by multiple vulnerabilities, the majority of which are remote code execution vulnerabilities. An attacker can exploit these by convincing a user to visit a...

Microsoft Internet Explorer Memory Corruption (MS14-080: CVE-2014-6330)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

CVE-2013-6330

CVE-2013-6330 affects IBM WebSphere Application Server 7.x prior to 7.0.0.31 where simpleFileServlet static file caching is enabled. The vulnerability could let remote authenticated users obtain sensitive information via unspecified vectors. IBM’s accompanying bulletin indicates remediation via a...

CVE-2012-6330

The localization functionality in TWiki before 5.1.3, and Foswiki 1.0.x through 1.0.10 and 1.1.x through 1.1.6, allows remote attackers to cause a denial of service memory consumption via a large integer in a %MAKETEXT% macro...

CVE-2012-6330

CVE-2012-6330 affects TWiki

CVE-2012-6330

creationtimestamp| type| source ---|---|--- 2012-12-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/23580 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/foswikimaketext.rb 2025-02-06 03:13:41+00:00| seen|...