CVE-2018-6357

The acxasmwsaveordercallback function in function.php in the acurax-social-media-widget plugin before 3.2.6 for WordPress has CSRF via the recordsArray parameter to wp-admin/admin-ajax.php, with resultant socialwidgeticonarrayorder XSS...

CVE-2018-6357

The acxasmwsaveordercallback function in function.php in the acurax-social-media-widget plugin before 3.2.6 for WordPress has CSRF via the recordsArray parameter to wp-admin/admin-ajax.php, with resultant socialwidgeticonarrayorder XSS...

CVE-2018-6357

CVE-2018-6357 affects the WordPress plugin acurax-social-media-widget (

CVE-2016-6357

A vulnerability in the configured security policies, including drop email filtering, in Cisco AsyncOS for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass a configured drop filter by using an email with a corrupted attachment. More Information:...

CVE-2016-6357

CVE-2016-6357 affects Cisco AsyncOS for the Cisco Email Security Appliance (ESA). The issue is a vulnerability in configured security policies, including drop email filtering, where an unauthenticated, remote attacker could bypass a configured drop filter by sending an email with a corrupted atta...

Cisco FireSIGHT Management Center Certificate Validation Vulnerability

A vulnerability in the rule update functionality of Cisco FireSIGHT Management Center MC could allow an unauthenticated, remote attacker to manipulate the content of the rule update packages and execute arbitrary code on the system. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions...

Fedora 20 : java-1.8.0-openjdk-1.8.0.45-31.b13.fc20 (2015-6357)

Updated to security update u45 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

CVE-2014-6357

CVE-2014-6357 is a use-after-free remote code execution vulnerability reported in Microsoft Office products (Office 2010 SP2, Office 2013 SP1/Gold, Office for Mac 2011, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2/2013) and related Office Web ...

CVE-2014-6357

Use-after-free vulnerability in Microsoft Office 2010 SP2, Office 2013 Gold and SP1, Office 2013 RT Gold and SP1, Office for Mac 2011, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2 and 2013 Gold and SP1, and Office Web Apps 2010 SP2 and 2013 Go...

Microsoft SharePoint Server WAS Remote Code Execution Vulnerability (3017301)

This host is missing a critical security update according to Microsoft Bulletin MS14-081. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft Office Web Apps Remote Code Execution Vulnerabilities (3017301)

This host is missing a critical security update according to Microsoft Bulletin MS14-081. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft Office Word Viewer Remote Code Execution Vulnerabilities (3017301)

This host is missing a critical security update according to Microsoft Bulletin MS14-081. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Fedora 20 : kernel-3.14.4-200.fc20 (2014-6357)

The 3.14.4 stable update contains a number of important fixes across the tree Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

CVE-2013-6357

Cross-site request forgery CSRF vulnerability in the Manager application in Apache Tomcat 5.5.25 and earlier allows remote attackers to hijack the authentication of administrators for requests that manipulate application deployment via the POST method, as demonstrated by a...

CVE-2013-6357

Cross-site request forgery CSRF vulnerability in the Manager application in Apache Tomcat 5.5.25 and earlier allows remote attackers to hijack the authentication of administrators for requests that manipulate application deployment via the POST method, as demonstrated by a...

CVE-2013-6357

CVE-2013-6357 affects the Apache Tomcat Manager application and can enable CSRF to hijack administrator sessions for actions that manipulate deployments via POST requests (notably undeploy via /manager/html/undeploy?path=). It targets Tomcat 5.5.25 and earlier. The description notes that the vend...

CVE-2012-6357

Technical details about CVE-2012-6357 are not publicly provided in the connected documents. The initial description lists affected IBM Maximo products but does not disclose vulnerability specifics, vectors, or remediation. Monitor for updates.

CVE-2008-6357

MyCal Personal Events Calendar stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing the username and password via a direct request to mycal.mdb...

CVE-2008-6357

CVE-2008-6357 affects MyCal Personal Events Calendar. The vulnerability arises from storing the database (mycal.mdb) under the web root with insufficient access control, enabling remote attackers to download the database containing usernames and passwords via a direct request. The NVD entry lists...

CVE-2008-6357

creationtimestamp| type| source ---|---|--- 2008-12-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7420...