CVE-2016-6342

elog 3.1.1 allows remote attackers to post data as any username in the logbook...

CVE-2016-6342

elog 3.1.1 allows remote attackers to post data as any username in the logbook...

CVE-2016-6342

elog 3.1.1 allows remote attackers to post data as any username in the logbook...

CVE-2016-6342

Summary: CVE-2016-6342 affects the Erlang logging library elog version 3.1.1, enabling remote attackers to publish data in the logbook under any username. This is documented across multiple sources, including NVD/NIST, CNVD, OSV, and vendor advisories. Impact: Allows a remote attacker to post dat...

CVE-2016-6342

Removed by vendor...

CVE-2015-6342

...

CVE-2015-6342

CVE-2015-6342 is rejected and does not represent an active vulnerability entry.

CVE-2017-6342

Affected software/hardware: Dahua DHI-HCVR7216A-S3 devices (NVR firmware 3.210.0001.10, camera firmware 2.400.0000.28.R, SmartPSS 1.16.1). Vulnerability summary: When SmartPSS is launched and on the login screen, the background process logs in as admin, enabling sniffing of sensitive information ...

CVE-2017-6342

An issue was discovered on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and SmartPSS Software 1.16.1 2017-01-19. When SmartPSS Software is launched, while on the login screen, the software in the background automatically lo...

Fedora 23 : elog (2016-820a4795a9)

Security fix for CVE-2016-6342 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...

Fedora 24 : elog (2016-508767e6b7)

Security fix for CVE-2016-6342 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...

Fedora Update for elog FEDORA-2016-508767e6b7

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Internet Explorer Multiple Vulnerabilities (3003057)

This host is missing a critical security update according to Microsoft Bulletin MS14-065. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2014-6342

The CVE-2014-6342 entry concerns Microsoft Internet Explorer 9 . The vulnerability involves a memory corruption flaw triggered by visiting a crafted web site, enabling remote code execution or, per the description, a denial of service. The issue is linked to the IE memory corruption family and is...

Microsoft Internet Explorer Memory Corruption (MS14-065: CVE-2014-6342)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

CVE-2012-6342

CVE-2012-6342 affects Atlassian Confluence 3.4.6 and related versions. A CSRF flaw in logout.action may allow remote attackers to hijack an administrator’s session by triggering a logout for the user via a comment. The connected sources confirm the component (logout.action) and the impact (admin ...

Cross-Site Scripting (XSS) in Tweet Blender Wordpress Plugin

Advisory ID: HTB23180 Product: Tweet Blender Wordpress Plugin Vendor: kirilln Vulnerable Versions: 4.0.1 and probably prior Tested Version: 4.0.1 Advisory Publication: October 25, 2013 without technical details Vendor Notification: October 25, 2013 Vendor Patch: November 13, 2013 Public Disclosur...

CVE-2013-6342

CVE-2013-6342 concerns a Cross-Site Scripting (XSS) in the WordPress Tweet Blender plugin prior to 4.0.2. The issue arises from insufficient sanitization of the tb_tab_index parameter submitted to /wp-admin/options-general.php, allowing a remote attacker to inject arbitrary script or HTML in the ...

WordPress Tweet Blender 4.0.1 Cross Site Scripting Vulnerability

WordPress Tweet Blender plugin version 4.0.1 suffers from a cross site scripting vulnerability. Product: Tweet Blender Wordpress Plugin Vendor: kirilln Vulnerable Versions: 4.0.1 and probably prior Tested Version: 4.0.1 Advisory Publication: October 25, 2013 without technical details Vendor...

WordPress Tweet Blender 4.0.1 Cross Site Scripting

Advisory ID: HTB23180 Product: Tweet Blender Wordpress Plugin Vendor: kirilln Vulnerable Versions: 4.0.1 and probably prior Tested Version: 4.0.1 Advisory Publication: October 25, 2013 without technical details Vendor Notification: October 25, 2013 Vendor Patch: November 13, 2013 Public Disclosur...