79 matches found
Linux Distros Unpatched Vulnerability : CVE-2019-6456
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in GNU Recutils 1.8. There is a NULL pointer dereference in the function recfexsize in the file rec-fex.c of librec.a. CVE-2019-6456 Not...
CVE-2025-6456
A vulnerability, which was classified as critical, has been found in code-projects Online Hotel Reservation System 1.0. Affected by this issue is some unknown functionality of the file /reservation/order.php. The manipulation of the argument Start leads to sql injection. The attack may be launche...
CVE-2025-6456
creationtimestamp| type| source ---|---|--- 2025-06-22 03:47:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19147 2025-06-22 04:32:28+00:00| published-proof-of-concept| Telegram/CibZyyUX4hhp7zmagHt8vIrVWs1R9nkn-nVyDntDrrfH3c 2025-06-22 07:58:41+00:00| seen|...
CVE-2025-6456
CVE-2025-6456 affects code-projects Online Hotel Reservation System 1.0, specifically the file /reservation/order.php. The vulnerability arises from manipulation of the Start argument, leading to SQL injection. Exploitation is possible remotely, and public disclosure is noted. Reports across mult...
CVE-2024-6456
AVEVA Historian Server has a vulnerability, if exploited, could allow a malicious SQL command to execute under the privileges of an interactive Historian REST Interface user who had been socially engineered by a miscreant into opening a specially crafted URL...
CVE-2023-6456
The WP Review Slider WordPress plugin before 13.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
Linux Distros Unpatched Vulnerability : CVE-2013-6456
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The LXC driver lxc/lxcdriver.c in libvirt 1.0.1 through 1.2.1 allows local users to 1 delete arbitrary host devices via the virDomainDeviceDettach API and a...
CGA-VV69-5VC9-6456
Bulletin has no description...
USN-7137-1 recutils vulnerabilities
It was discovered that recutils incorrectly handled memory when parsing comments with the recparser utility. An attacker could possibly use this issue to cause a denial of service or run arbitrary commands. CVE-2021-46019, CVE-2021-46021, CVE-2021-46022 It was discovered that recutils incorrectly...
CVE-2024-6456
creationtimestamp| type| source ---|---|--- 2024-08-16 00:20:21+00:00| seen| https://t.me/cvedetector/3289...
CVE-2024-6456
AVEVA Historian Server has a vulnerability, if exploited, could allow a malicious SQL command to execute under the privileges of an interactive Historian REST Interface user who had been socially engineered by a miscreant into opening a specially crafted URL...
CVE-2024-6456 SQL Injection vulnerability in AVEVA Historian Server
AVEVA Historian Server has a vulnerability, if exploited, could allow a malicious SQL command to execute under the privileges of an interactive Historian REST Interface user who had been socially engineered by a miscreant into opening a specially crafted URL...
AVEVA Historian Web Server
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.5 ATTENTION : Exploitable remotely/low attack complexity Vendor : AVEVA Equipment : Historian Server Vulnerability : SQL Injection 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an authenticated user to get read and write...
CGA-6456-G576-PW4M
Bulletin has no description...
CVE-2023-6456
creationtimestamp| type| source ---|---|--- 2024-01-22 21:31:28+00:00| seen| https://t.me/ctinow/171445 2024-02-16 11:16:32+00:00| seen| https://t.me/ctinow/186267...
CVE-2023-6456
The WP Review Slider WordPress plugin before 13.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2023-6456 WP Review Slider < 13.0 - Admin+ Stored XSS
The WP Review Slider WordPress plugin before 13.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2023-6456
The CVE-2023-6456 entry concerns the WP Review Slider WordPress plugin prior to version 13.0. The vulnerability arises from not sanitising and escaping certain settings, which can let high-privilege users (e.g., admins) perform Stored Cross-Site Scripting even when unfiltered_html is disallowed (...
CVE-2023-6456 WP Review Slider < 13.0 - Admin+ Stored XSS
The WP Review Slider WordPress plugin before 13.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
Ubuntu 20.04 LTS : Firefox vulnerabilities (USN-6456-1)
The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6456-1 advisory. Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially explo...