CVE-2018-6488

The CVE-2018-6488 entry concerns Micro Focus Universal CMDB (versions 4.10, 4.11, 4.12). The connected sources indicate an Arbitrary Code Execution vulnerability that could be exploited remotely, allowing an attacker to execute code on the affected system. The documents consistently describe the ...

CVE-2017-6488

EPESI 1.8.1.1 is affected by multiple XSS vulnerabilities due to insufficient filtration of user-supplied data (visible, tab, cid) passed to EPESI-master/modules/Utils/RecordBrowser/Filters/save_filters.php. The flaws allow an attacker to inject arbitrary HTML/JavaScript into a victim’s browser i...

CVE-2015-6488

CVE-2015-6488 : A cross-site scripting (XSS) vulnerability exists in the web server of Rockwell Automation’s Allen‑Bradley MicroLogix PLCs. Affected devices are MicroLogix 1100 (Series B and earlier firmware) and MicroLogix 1400 (Series B and earlier firmware). The issue allows remote attackers t...

CVE-2015-6488

Cross-site scripting XSS vulnerability in the web server on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-6488

CVE-2014-6488 affects Oracle Enterprise Manager components (Grid Control EM Base Platform: 10.2.0.5, 11.1.0.1; EM DB Control: 11.1.0.7, 11.2.0.3, 11.2.0.4; EM Plugin for DB: 12.1.0.4–12.1.0.6) in the Content Management sub-component. The vulnerability is described as unspecified with remote authe...

CVE-2014-6488

Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform: 10.2.0.5, 11.1.0.1 EM DB Control: 11.1.0.7, 11.2.0.3, 11.2.0.4 EM Plugin for DB: 12.1.0.4, 12.1.0.5, and 12.1.0.6 allows remote authenticated users to affe...

openSUSE 10 Security Update : libldap-2_4-2 (libldap-2_4-2-6488)

This update of openldap2 makes SSL certificate verification more robust against uses of the special character \0 in the subjects name. CVE-2009-2408 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

CVE-2008-6488

CVE-2008-6488 describes an SQL injection in the login action of the web application SoftComplex PHP Image Gallery 1.0 . The vulnerability exists in the login functionality, where the Admin field can be exploited to execute arbitrary SQL commands remotely. According to the NVD entry, the vulnerabi...

CVE-2008-6488

creationtimestamp| type| source ---|---|--- 2008-11-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7021 2008-11-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7026...

CVE-2006-6488

creationtimestamp| type| source ---|---|--- 2008-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6570...

CVE-2007-6488

Falcon Series One CMS 1.4.3 is affected by multiple PHP remote file inclusion vulnerabilities. An attacker can cause arbitrary PHP code execution by providing a URL in (1) dir[classes] to sitemap.xml.php or (2) error to errors.php. The underlying issue is insecure handling of user-supplied URLs l...

CVE-2006-6488

The CVE-2006-6488 issue is a stack-based buffer overflow in ICONICS Dialog Wrapper Module ActiveX (DlgWrapper.dll) DoModal function, exploited by ICONICS OPC-enabled Gauge/Switch/Vessel ActiveX prior to version 8.4.166.0. An attacker can remotely execute arbitrary code by sending a long FileName ...

CVE-2013-6488

CVE-2013-0328 describes a cross-site scripting (XSS) vulnerability in Jenkins prior to 1.502 and LTS prior to 1.480.3, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affected product: Jenkins (web UI). Underlying cause and exact vector are not detailed i...

CVE-2013-6488

...