CVE-2018-17627

Foxit Reader/PhantomPDF for Windows (Foxit Reader 9.2.0.9297 and earlier) contains a vulnerability in the XFA mouseUp handling that can trigger a use-after-free, allowing remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). Affecte...

CVE-2019-6455

An issue was discovered in GNU Recutils 1.8. There is a double-free problem in the function recmsetelemdestroy in the file rec-mset.c...

CVE-2019-6455

GNU Recutils 1.8 contains a double-free vulnerability in rec_mset_elem_destroy() within rec-mset.c (CVE-2019-6455). The OSV/ CNVD entries confirm the same issue; no exploit details or affected version ranges beyond 1.8 are provided in the connected documents. No patch/version remediation is speci...

[SECURITY] Fedora 28 Update: python-websockets-5.0.1-1.fc28

websockets is a library for developing WebSocket servers and clients in Python. It implements RFC 6455 with a focus on correctness and simplicity. It passes the Autobahn Testsuite. Built on top of Python=EF=BF=BD=EF=BF=BD=EF=BF=BDs asynchronous I/O support introduced in PEP 3156, it provides an A...

CVE-2016-10542

ws is a "simple to use, blazing fast and thoroughly tested websocket client, server and console for node.js, up-to-date against RFC-6455". By sending an overly long websocket payload to a ws server, it is possible to crash the node process. This affects ws 1.1.0 and earlier...

CVE-2017-6455

CVE-2017-6455 affects NTP versions prior to 4.2.8p10 and 4.3.x prior to 4.3.94 when using PPSAPI. Local users can gain privileges by placing a DLL in the PPSAPI_DLLS environment variable, enabling a local privilege escalation. Public references in the connected documents confirm the vulnerability...

CVE-2015-6455

...

CVE-2015-6455

CVE-2015-6455 is rejected/not used and does not represent an active vulnerability entry.

CVE-2016-6455

CVE-2016-6455 concerns the Slowpath in StarOS on Cisco ASR 5500 Series routers with Data Processing Card 2 (DPC2). An unauthenticated, remote attacker can disrupt a subset of subscriber sessions by sending crafted IPv4/IPv6 fragments, causing the sessmgr service to reload and triggering a denial ...

[SECURITY] Fedora 24 Update: nodejs-ws-1.1.1-1.fc24

Simple to use, blazing fast and thoroughly tested web socket client, server and console for nodejs, up-to-date against RFC-6455...

[SECURITY] Fedora 23 Update: nodejs-ws-1.1.1-1.fc23

Simple to use, blazing fast and thoroughly tested web socket client, server and console for nodejs, up-to-date against RFC-6455...

[SECURITY] Fedora 22 Update: nodejs-ws-1.0.1-1.fc22

Simple to use, blazing fast and thoroughly tested web socket client, server and console for nodejs, up-to-date against RFC-6455...

[SECURITY] Fedora 23 Update: nodejs-ws-1.0.1-1.fc23

Simple to use, blazing fast and thoroughly tested web socket client, server and console for nodejs, up-to-date against RFC-6455...

CVE-2014-6455

CVE-2014-6455 describes an unspecified vulnerability in the SQLJ component of Oracle Database Server versions 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 that allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors. Connected sources c...

SuSE 10 Security Update : open-iscsi (ZYPP Patch Number 6455)

The iscsidiscovery tool created predictable temporary files which potentially allowed attackers to overwrite system files. CVE-2009-1297 Also several non-security bugs have been fixed : - don't fail init script if discovery fails - print correct ipconfig mask for dhcp - synchronize startup settin...

CVE-2008-6455

CVE-2008-6455 affects Edikon phpShop 0.8.1 with a session fixation vulnerability that enables remote attackers to hijack web sessions via unspecified vectors. The available sources confirm the affected product/version and the attack vector is not detailed; no exploit information is provided. The ...

CVE-2007-6455

CVE-2007-6455 involves multiple cross-site scripting (XSS) vulnerabilities in index.php of Mambo 4.6.2. The issues allow remote attackers to inject arbitrary web script or HTML via the (1) Itemid parameter in a com_frontpage option and (2) the option parameter. Documents provided identify the aff...

CVE-2006-6455

Multiple SQL injection vulnerabilities in admin/default.asp in DUware DUdirectory 3.1, and possibly DUdirectory Pro and Pro SQL 3.x, allow remote attackers to execute arbitrary SQL commands via the 1 Username or 2 Password parameter. NOTE: some of these details are obtained from third party...