CVE-2016-6401

Cisco CVE-2016-6401 affects Cisco Carrier Routing System (CRS) platforms running CRS Carrier Grade Services for CRS-1 and CRS-3, specifically IOS XR-based CRS 5.1 and 5.1.4. The root cause is insufficient logic in processing crafted IPv6-over-MPLS packets in IPv6 over MPLS handling, allowing an u...

Cisco EPC 3928 - Multiple Vulnerabilities

Exploit for asp platform in category web applications Title: Cisco EPC 3928 Multiple Vulnerabilities Vendor: http://www.cisco.com/ Vulnerable Versions: Cisco Model EPC3928 DOCSIS 3.0 8x4 Wireless Residential Gateway CVE References: CVE-2015-6401 / CVE-2015-6402 / CVE-2016-1328 / CVE-2016-1336 /...

CVE-2015-6401

Cisco EPC3928 devices with EDVA 5.5.10, 5.5.11 and 5.7.1 are affected by CVE-2015-6401, where an unauthenticated remote attacker can bypass the intended web authentication and execute unspecified administrative functions via a crafted HTTP request (Bug CSCux24941). Public references include Cisco...

Fedora Update for jansson FEDORA-2014-3782

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for jansson FEDORA-2014-3778

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 20 : jansson-2.6-1.fc20 (2014-3778)

Florian Weimer of the Red Hat Product Security Team found that the hashing implementation in Jansson, a library for encoding, decoding and manipulating JSON data, was susceptible to predictable hash collisions. A remote attacker could use this flaw to cause an application using Jansson to use an...

CVE-2013-6401

Jansson, possibly 2.4 and earlier, does not restrict the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via a crafted JSON document...

CVE-2013-6401

CVE-2013-6401 affects Jansson (2.4 and earlier) with predictable hash collisions enabling context-dependent attackers to trigger a denial of service (CPU consumption) via crafted JSON. IBM DataPower Gateway (ODR component) uses Jansson and lists affected versions: 10.6CD 10.6.1.0–10.6.5.0; 10.5.0...

openSUSE 10 Security Update : libcurl3 (libcurl3-6401)

This update of libcurl2 fixes the 0-character handling in the subject name of a SSL certificate. This bug could be used to execute an undetected man-in-the-middle-attack. CVE-2009-2417 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

CVE-2008-6401

SQL injection vulnerability in sayfa.php in JETIK-WEB allows remote attackers to execute arbitrary SQL commands via the kat parameter...

CVE-2008-6401

The CVE-2008-6401 entry describes an SQL injection in the web application JETIK-WEB, specifically the sayfa.php handler, exploitable via the kat parameter. The issue allows remote attackers to submit arbitrary SQL commands, leading to potential data exposure or modification. The referenced data s...

CVE-2008-6401

SQL injection vulnerability in sayfa.php in JETIK-WEB allows remote attackers to execute arbitrary SQL commands via the kat parameter...

CVE-2008-6401

creationtimestamp| type| source ---|---|--- 2008-09-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6542...

CVE-2008-3954

creationtimestamp| type| source ---|---|--- 2008-09-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6396 2008-09-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6401...

CVE-2007-6402

Stack-based buffer overflow in mplayerc.exe in Media Player Classic MPC 6.4.9, when used with the 3ivx 4.5.1 or 5.0.1 codec, allows remote attackers to execute arbitrary code via a certain .mp4 file, possibly a related issue to CVE-2007-6401...

Stack overflow

Stack-based buffer overflow in mplayerc.exe in Media Player Classic MPC 6.4.9, when used with the 3ivx 4.5.1 or 5.0.1 codec, allows remote attackers to execute arbitrary code via a certain .mp4 file, possibly a related issue to CVE-2007-6401...

CVE-2007-6401

CVE-2007-6401/6402 describe a stack-based buffer overflow in Media Player Classic components (mplayer2.exe/mplayerc.exe) when used with the 3ivx MPEG-4 codec (versions 4.5.1/5.0.1). The vulnerability allows remote arbitrary code execution via crafted MP4 files; affected product version cited in p...

CVE-2007-6402

Stack-based buffer overflow in mplayerc.exe in Media Player Classic MPC 6.4.9, when used with the 3ivx 4.5.1 or 5.0.1 codec, allows remote attackers to execute arbitrary code via a certain .mp4 file, possibly a related issue to CVE-2007-6401...

CVE-2007-6401

Stack-based buffer overflow in mplayer2.exe in Microsoft Windows Media Player WMP 6.4, when used with the 3ivx 4.5.1 or 5.0.1 codec, allows remote attackers to execute arbitrary code via a certain .mp4 file, possibly a related issue to CVE-2007-6402...

CVE-2006-6401

CVE-2006-6401; XSS in mystats.php of MyStats 1.0.8 and earlier allows remote injection of script/HTML via the parameters (connexion, by, details). Severity ~6.8 (Medium) per NVD; no exploit details provided in the documents. Affected versions: 1.0.8 and earlier; no remediation details are include...