64 matches found
CVE-2017-6396
The CVE-2017-6396 entry concerns WPO-Foundation WebPageTest 3.0, where insufficient filtration of user-supplied data passed to webpagetest-master/www/compare-cf.php enables an attacker to execute arbitrary HTML/JavaScript in a victim browser (XSS). The vulnerability affects the specific URL path ...
CVE-2016-6396
Cisco Firepower Management Center and FireSIGHT System Software before 6.1 are affected by CVE-2016-6396. The issue arises from improper validation of HTTP header fields in the malware blocking/detection features, which could allow an unauthenticated, remote attacker to bypass malware detection b...
CVE-2016-6396
Cisco Firepower Management Center before 6.1 and FireSIGHT System Software before 6.1, when certain malware blocking options are enabled, allow remote attackers to bypass malware detection via crafted fields in HTTP headers, aka Bug ID CSCuz44482...
CVE-2015-6396
CVE-2015-6396 affects Cisco RV110W, RV130W, and RV215W routers. The issue stems from the CLI command parser, where insufficient input validation allows an authenticated, local attacker to inject and execute arbitrary shell commands with administrator privileges. This vulnerability could enable fu...
Gentoo Security Advisory GLSA 201505-01
Gentoo Linux Local Security Checks GLSA 201505-01 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
Fedora 20 : ettercap-0.8.2-1.fc20 (2015-4020)
0.8.2-Ferri Bug Fix !! Fixed some openssl deprecated functions usage !! Fixed log file ownership !! Fixed mixed output print !! Fixed dropprivs function usage !! Fixed nopromisc option usage. !! Fixed missing break in parser code. !! Improved redirect commands !! Fix truncated VLAN packet headers...
Fedora Update for ettercap FEDORA-2015-4020
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 22 : ettercap-0.8.2-1.fc22 (2015-4009)
0.8.2-Ferri Bug Fix !! Fixed some openssl deprecated functions usage !! Fixed log file ownership !! Fixed mixed output print !! Fixed dropprivs function usage !! Fixed nopromisc option usage. !! Fixed missing break in parser code. !! Improved redirect commands !! Fix truncated VLAN packet headers...
Fedora Update for ettercap FEDORA-2014-17210
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 19 : ettercap-0.8.1-2.fc19 (2014-17210)
Fix for multiple CVEs. https://www.obrela.com/home/security-labs/advisories/osi-advisory-osi- 1402/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...
Fedora 21 : ettercap-0.8.1-2.fc21 (2014-17090)
Fix for multiple CVEs. https://www.obrela.com/home/security-labs/advisories/osi-advisory-osi- 1402/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...
Fedora 20 : ettercap-0.8.1-2.fc20 (2014-17107)
Fix for multiple CVEs. https://www.obrela.com/home/security-labs/advisories/osi-advisory-osi- 1402/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...
CVE-2014-6396
The dissectorpostgresql function in dissectors/ecpostgresql.c in Ettercap before 0.8.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted password length, which triggers a 0 character to be written to an arbitrary memory location...
CVE-2014-6396
CVE-2014-6396 affects Ettercap prior to 0.8.1, where dissector_postgresql in dissectors/ec_postgresql.c can be triggered by a crafted password length to write a 0 byte to an arbitrary memory location, enabling remote denial of service and potential arbitrary code execution. Several connected advi...
Fedora 20 : python-swiftclient-2.0.2-1.fc20 (2014-3054)
Update to upstream 2.0.2 Add SSL certificate verification by default CVE-2013-6396 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...
CVE-2013-6396
The CVE-2013-6396 entry concerns the OpenStack Python Swift client, python-swiftclient, versions 1.0 through 1.9.0, which do not verify X.509 certificates on SSL connections. This allows an attacker to perform a man-in-the-middle attack to spoof the Swift server and read sensitive data via a craf...
CVE-2012-6396
Cisco NX-OS on Nexus 7000 series switches has a vulnerability where improper handling of certain line-card replacements can allow remote authenticated users to cause a denial of service (memory consumption) by crafting a configuration that references interfaces that do not exist on the new card (...
CVE-2008-6396
CVE-2008-6396 is an XSS vulnerability in Celerondude Uploader 6.1, found in account.php via the username parameter. The root cause is unsanitized user input that allows injection of arbitrary web script/HTML. Impact is that an attacker could execute script in a victim’s browser. Public references...
CVE-2008-6396
Cross-site scripting XSS vulnerability in account.php in Celerondude Uploader 6.1 allows remote attackers to inject arbitrary web script or HTML via the username parameter. NOTE: some of these details are obtained from third party information...
CVE-2008-3954
creationtimestamp| type| source ---|---|--- 2008-09-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6396 2008-09-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6401...