CVE-2015-6394

CVE-2015-6394 affects Cisco NX-OS on Nexus 5000 series with kernel DoS vulnerability exposed by USB driver parameters. Specifically, Cisco NX-OS 5.2(9)N1(1) is vulnerable to a local attacker who can crash the device by sending crafted USB parameters, per Bug CSCus89408. The issue is a local, kern...

CVE-2014-6394

visionmedia send before 0.8.4 for Node.js uses a partial comparison for verifying whether a directory is within the document root, which allows remote attackers to access restricted directories, as demonstrated using "public-restricted" under a "public" directory...

CVE-2014-6394

visionmedia send before 0.8.4 for Node.js uses a partial comparison for verifying whether a directory is within the document root, which allows remote attackers to access restricted directories, as demonstrated using "public-restricted" under a "public" directory...

CVE-2014-6394

The CVE-2014-6394 entry concerns visionmedia send before 0.8.4 for Node.js. The vulnerability arises from a partial directory-root verification, which can allow a remote attacker to escape the intended restricted directory and access files such as those under a public-restricted path (e.g., publi...

CVE-2014-6394

visionmedia send before 0.8.4 for Node.js uses a partial comparison for verifying whether a directory is within the document root, which allows remote attackers to access restricted directories, as demonstrated using "public-restricted" under a "public" directory...

Fedora Update for nodejs-send FEDORA-2014-11495

Check the version of nodejs-send SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868362";...

openSUSE Security Update : xtrabackup (openSUSE-SU-2013:1864-1)

Percona XtraBackup was updated to 2.1.6 bnc852224 - New Features : - New innobackupex --force-non-empty-directories option - now supports logs created with the new log block checksums - New Features specific to MySQL 5.6: option innodblogchecksumalgorithm in Percona Server 5.6 - Bugs Fixed : -...

CVE-2013-6394

Percona XtraBackup had an IV handling flaw (constant IV) up to 2.1.6, enabling plaintext-attacks against encrypted backups. The issue is acknowledged as a result of an incomplete fix; later advisories indicate that xbcrypt in 2.3.6 and 2.4.x before 2.4.5 does not properly set the IV, implying an ...

CVE-2008-6394

CS-Cart 1.3.5 and earlier is affected by a SQL injection vulnerability in core/user.php via the cs_cookies[customer_user_id] cookie parameter. Remote attackers could potentially execute arbitrary SQL commands. Affected component is the web application’s user handling logic; no patch/version detai...

CVE-2008-6394

creationtimestamp| type| source ---|---|--- 2008-09-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6352...

CVE-2007-6394

Content Injector 1.53 is affected by a SQL injection in index.php via the id parameter in the expand action. The vulnerability allows remote attackers to execute arbitrary SQL commands and could lead to data compromise or corruption. The entry is supported by multiple sources (NVD/NVD entry) and ...

CVE-2006-6394

The CVE-2006-6394 entry describes an SQL injection vulnerability in certain database classes of Jonas Gauffin Publicera 1.0-rc2 and earlier, potentially allowing remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected software: Jonas Gauffin Publicera 1.0-rc2 and earl...