CVE-2016-6374

CVE-2016-6374 affects Cisco Cloud Services Platform (CSP) 2100, specifically 2.x prior to 2.1.0, where an unauthenticated, remote attacker can exploit a web GUI input sanitization flaw to execute arbitrary code via a crafted dnslookup HTTP request. Root cause: improper sanitization of user-suppli...

CVE-2014-6374

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."...

CVE-2014-6374

Microsoft Internet Explorer (IE6–IE11) Memory Corruption Vulnerability (CVE-2014-6374) allows remote code execution and memory corruption when visiting a crafted web page. Several connected advisories confirm the root cause involves memory corruption in IE’s rendering/processing of content, with ...

CVE-2014-6374

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."...

MS14-080: Cumulative Security Update for Internet Explorer (3008923)

The version of Internet Explorer installed on the remote host is missing Cumulative Security Update 3008923. It is, therefore, affected by multiple vulnerabilities, the majority of which are remote code execution vulnerabilities. An attacker can exploit these by convincing a user to visit a...

Microsoft Internet Explorer CVE-2014-6374 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

Microsoft Internet Explorer Memory Corruption (MS14-080: CVE-2014-6374)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

CVE-2013-6374

Cross-site scripting XSS vulnerability in the Build Failure Analyzer plugin before 1.5.1 for Jenkins allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6374

The Build Failure Analyzer plugin for Jenkins (before 1.5.1) is affected by a Cross-Site Scripting (XSS) vulnerability that lets remote authenticated users inject arbitrary script/HTML via unspecified vectors. Affected component: Jenkins plugin; root cause: XSS in the plugin. Impact per sources i...

CVE-2008-6374

CodefixerSoftware MailingListPro Free Edition stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to db/MailingList.mdb...

CVE-2008-6374

CVE-2008-6374 affects CodefixerSoftware MailingListPro Free Edition, where sensitive information is stored under the web root with insufficient access control. This allows remote attackers to obtain sensitive data via direct requests to db/MailingList.mdb. The available documents do not provide r...

CVE-2008-4467

creationtimestamp| type| source ---|---|--- 2008-09-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6374...

CVE-2007-6374

CVE-2007-6374 concerns multiple XSS flaws in Bitweaver 2.0.0 and earlier, exploitable via PATH_INFO in four endpoints: /users/register.php, /search/index.php, /wiki/index.php (editcomments action), and /forums/index.php. The vulnerability allows remote attackers to inject arbitrary script or HTML...

HTTP Response Splitting vulnerability

PMASA-2007-1 Announcement-ID: PMASA-2007-1 Date: 2007-01-16 Summary HTTP Response Splitting vulnerability Description On systems running PHP 5 before 5.1.2 or PHP 4 before 4.4.2, it is possible to trigger this vulnerability by editing the cookie containing PHP's session id. This can be used to se...

CVE-2006-6374

The CVE-2006-6374 vulnerability affects PhpMyAdmin 2.7.0-pl2, with multiple CRLF injection flaws enabling HTTP header injection and response splitting via CRLF sequences in a PhpMyAdmin cookie. Affected components include css/phpmyadmin.css.php, db_create.php, index.php, left.php, libraries/sessi...

Path disclosure vulnerability

PMASA-2006-8 Announcement-ID: PMASA-2006-8 Date: 2006-11-17 Summary Path disclosure vulnerability Description We received a security advisory from laurent gaffié and we wish to thank him for his work. It was possible to disclose path by passing an array to several parameters. Severity We consider...