CVE-2016-6439

CVE-2016-6439 affects Cisco Firepower System Software prior to 6.0.1. The denial-of-service arises in the detection engine’s HTTP packet stream reassembly, where an unauthenticated remote attacker can send crafted HTTP streams to trigger the Snort process to restart. If the Snort process restarts...

e-reading.club XSS vulnerability

Vulnerable URL: http://e-reading.club/?query=%27%22%3E%3Cimg%20src=x%20onerror=alert%28%22OPENBUGBOUNTY%22%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6439 VIP website...

CVE-2014-6439

Cross-site scripting XSS vulnerability in the CORS functionality in Elasticsearch before 1.4.0.Beta1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-6439

Cross-site scripting XSS vulnerability in the CORS functionality in Elasticsearch before 1.4.0.Beta1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

UBUNTU-CVE-2014-6439

Cross-site scripting XSS vulnerability in the CORS functionality in Elasticsearch before 1.4.0.Beta1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-6439

The CVE-2014-6439 entry tracks a Cross-site Scripting (XSS) vulnerability in the CORS functionality of Elasticsearch prior to 1.4.0.Beta1. The issue could allow remote attackers to inject arbitrary script/HTML via unspecified vectors. Public references confirm this XSS surface is tied to Elastics...

Elasticsearch vulnerability CVE-2014-6439

Summary: Elasticsearch versions 1.3.x and prior have a default configuration for CORS that allows an attacker to craft links that could cause a user’s browser to send requests to Elasticsearch instances on their local network. These requests could cause data loss or compromise. We have been...

RHEL 6 : candlepin in Subscription Asset Manager (RHSA-2013:1863)

Updated candlepin packages that fix one security issue are now available for Red Hat Subscription Asset Manager. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CVE-2013-6439

CVE-2013-6439 affects Red Hat Subscription Asset Manager Candlepin 1.0–1.3, which uses a weak authentication scheme when the configuration file does not specify a scheme. Public sources reiterate an authentication-bypass risk. Remediation involves applying the updated candlepin packages from RHSA...

CVE-2012-6439

CVE-2012-6439 affects Rockwell Automation EtherNet/IP products (e.g., 1756-ENBT/EWEB; 1768-ENBT/EWEB; CompactLogix L32E/L35E; 1788-ENBT FLEXLogix; 1794-AENTR; and various ControlLogix/GuardLogix/SoftLogix/MicroLogix series). Root cause: improper access control for CIP messages that modify configu...

CentOS 4 / 5 : wireshark (CESA-2008:0058)

Updated wireshark packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring network traffic. Wireshark was previously...

CVE-2008-6439

The CVE-2008-6439 entry corresponds to an XSS vulnerability in ABK-Soft AbleDating 2.4, specifically in search_results.php where the keyword parameter can be manipulated to inject arbitrary script/HTML. Affected component: search_results.php (AbleDating 2.4). Root cause: insufficient input saniti...

CVE-2008-6439

creationtimestamp| type| source ---|---|--- 2008-05-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31830...

GLSA-200712-23 : Wireshark: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200712-23 Wireshark: Multiple vulnerabilities Multiple buffer overflows and infinite loops were discovered in multiple dissector and parser components, including those for MP3 and NCP CVE-2007-6111, PPP CVE-2007-6112, DNP...

Wireshark: Multiple vulnerabilities

Background Wireshark is a network protocol analyzer with a graphical front-end. Description Multiple buffer overflows and infinite loops were discovered in multiple dissector and parser components, including those for MP3 and NCP CVE-2007-6111, PPP CVE-2007-6112, DNP CVE-2007-6113, SSL and iSerie...

CVE-2007-6439

Wireshark formerly Ethereal 0.99.6 allows remote attackers to cause a denial of service infinite or large loop via the 1 IPv6 or 2 USB dissector, which can trigger resource consumption or a crash. NOTE: this identifier originally included Firebird/Interbase, but it is already covered by...

CVE-2007-6439

Wireshark formerly Ethereal 0.99.6 allows remote attackers to cause a denial of service infinite or large loop via the 1 IPv6 or 2 USB dissector, which can trigger resource consumption or a crash. NOTE: this identifier originally included Firebird/Interbase, but it is already covered by...

CVE-2007-6439

Wireshark (formerly Ethereal) 0.99.6 is affected by CVE-2007-6439, allowing remote attackers to trigger a denial of service via the IPv6 or USB dissectors (infinite or large loop) leading to resource consumption or crash. Affected advisories from MiracleLinux/CentOS/RH indicate the fix is to upgr...

CVE-2007-6439

Wireshark formerly Ethereal 0.99.6 allows remote attackers to cause a denial of service infinite or large loop via the 1 IPv6 or 2 USB dissector, which can trigger resource consumption or a crash. NOTE: this identifier originally included Firebird/Interbase, but it is already covered by...