60 matches found
CVE-2017-6386
Memory leak in the vrendcreatevertexelementsstate function in vrendrenderer.c in virglrenderer allows local guest OS users to cause a denial of service host memory consumption via a large number of VIRGLOBJECTVERTEXELEMENTS commands...
CVE-2017-6386
Memory leak in the vrendcreatevertexelementsstate function in vrendrenderer.c in virglrenderer allows local guest OS users to cause a denial of service host memory consumption via a large number of VIRGLOBJECTVERTEXELEMENTS commands...
CVE-2017-6386
CVE-2017-6386 affects virglrenderer: memory leak in vrend_create_vertex_elements_state (vrend_renderer.c) can cause host memory exhaustion via a high volume of VIRGL_OBJECT_VERTEX_ELEMENTS from a local guestOS user, leading to DoS. The provided documents do not specify a patch version or remediat...
CVE-2016-6386
Cisco IOS XE Software IP Fragment Reassembly Denial of Service vulnerability (CVE-2016-6386) affects Cisco IOS XE on 64-bit platforms, specifically versions 3.1–3.17 and 16.1. The issue stems from corruption in the IPv4 fragment reassembly data structure when handling fragmented packets, allowing...
CVE-2015-6386
The Cisco Web Security Appliance (WSA) passthrough FTP feature is affected. A vulnerability in WSA software versions 8.0.7-142 and 8.5.1-021 can allow an unauthenticated, remote attacker to cause a denial of service via FTP sessions where the control connection is closed after data transfer (Bug ...
CVE-2014-6386
Juniper Junos 11.4 before 11.4R8, 12.1X44 before 12.1X44-D35, 12.1X45 before 12.1X45-D25, 12.1X46 before 12.1X46-D20, 12.1X47 before 12.1X47-D10, 12.2 before 12.2R9, 12.3R2 before 12.3R2-S3, 12.3 before 12.3R3, 13.1 before 13.1R4, and 13.2 before 13.2R1 allows remote attackers to cause a denial o...
CVE-2014-6386
CVE-2014-6386 affects Juniper Networks Junos OS. A crafted BGP FlowSpec prefix in affected releases can trigger an assertion failure and restart the routing process daemon (rpd), causing a remote denial of service. Affected releases include Junos 11.4 before 11.4R8, 12.1X44 before 12.1X44-D35, 12...
Fedora Update for drupal6 FEDORA-2013-22352
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 2828-1] drupal6 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2828-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 28, 2013 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2828-1] drupal6 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2828-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 28, 2013 http://www.debian.org/security/faq -...
Fedora Update for drupal6 FEDORA-2013-22507
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2013-6386
Drupal 6.x before 6.29 and 7.x before 7.24 uses PHP mt_rand with predictable seeds, allowing remote attackers to predict security strings and bypass restrictions via brute force. Impact includes potential unauthorized access or bypass of protections as described in multiple advisories. Mitigation...
Fedora Update for drupal7 FEDORA-2013-21844
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 2804-1] drupal7 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2804-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 26, 2013 http://www.debian.org/security/faq -...
CVE-2008-6386
CVE-2008-6386 describes a Cross-site scripting (XSS) vulnerability in Z1Exchange 1.0, specifically in showads.php, where the id parameter can be leveraged to inject arbitrary web script or HTML. The NVD entry assigns a medium severity (CVSS v2 base score 4.3) with network attack vector, no confid...
CVE-2008-6386
Cross-site scripting XSS vulnerability in showads.php in Z1Exchange 1.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter...
CVE-2008-6386
creationtimestamp| type| source ---|---|--- 2008-12-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32634...
CVE-2008-6997
creationtimestamp| type| source ---|---|--- 2008-09-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6386...
CVE-2007-6386
CVE-2007-6386 : A stack-based buffer overflow in PccScan.dll (before build 1451) affects Trend Micro AntiVirus plus AntiSpyware 2008, Internet Security 2008, and Internet Security Pro 2008. The overflow occurs when processing a malformed ZIP archive with a long name (constructed via format string...
CVE-2006-6386
CVE-2006-6386 is a Cross-site Scripting (XSS) vulnerability in Drupal’s CVS management/tracker components (4.7.x-1.0, 4.7.x-2.0, 4.7.0 before 20060807). The flaw allows remote attackers to inject arbitrary web script or HTML via the motivation field on the CVS application page, because the value ...