Wireshark Multiple Denial of Service Vulnerabilities-02 (Aug 2016) - Windows

Wireshark is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

openSUSE Security Update : wireshark (openSUSE-2016-947)

Wireshark was updated to 1.12.13 to fix a number of minor security issues and bugs. This release fixes a number issues in protocol dissectors that could have allowed a remote attacker to crash Wireshark or cause excessive CPU usage through specially crafted packages inserted into the network or a...

CVE-2016-6509

epan/dissectors/packet-ldss.c in the LDSS dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 mishandles conversations, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2016-6509

Wireshark CVE-2016-6509 affects the LDSS dissector (epan/dissectors/packet-ldss.c). Versions 1.12.x prior to 1.12.13 and 2.x prior to 2.0.5 mishandle conversations, allowing remote attackers to cause a denial of service (application crash) with a crafted packet. Remediation: upgrade to Wireshark ...

CVE-2015-6509

pfSense exposes multiple reflected XSS vulnerabilities (CVE-2015-6509) in the web GUI prior to version 2.2.3. The flaws allow remote attackers to inject arbitrary web script/HTML through numerous parameters across system_advanced_misc.php, system_advanced_firewall.php, and system_advanced_notific...

CVE-2014-6509

CVE-2014-6509 is a Solaris 10 kernel vulnerability that allows local users to affect availability (DOS) via kernel-level flaws. The connected Nessus entries indicate the kernel subcomponent is affected in Solaris 10 (both x86 and SPARC) and describe an easily exploitable condition requiring local...

CVE-2012-6509

Unrestricted file upload vulnerability in NetArt Media Car Portal 3.0 allows remote attackers to execute arbitrary PHP code by uploading a file a double extension, as demonstrated by .php%00.jpg...

CVE-2012-6509

CVE-2012-6509 affects NetArt Media Car Portal 3.0. The vulnerability is an unrestricted file upload that allows remote code execution by uploading a file with a double extension (e.g., .php%00.jpg). The available documents describe the impact as remote PHP code execution and do not provide remedi...

Gentoo Security Advisory GLSA 200904-01 (openfire)

The remote host is missing updates announced in advisory GLSA 200904-01. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

CVE-2008-6509

SQL injection vulnerability in CallLogDAO in SIP Plugin in Openfire 3.6.0a and earlier allows remote attackers to execute arbitrary SQL commands via the type parameter to sipark-log-summary.jsp...

CVE-2008-6509

CVE-2008-6509 concerns Openfire (Jive Software) Openfire server. It is an SQL injection in the SIP plugin’s sipark-log-summary.jsp where the unsanitized input for the type parameter is used to build SQL statements. A remote attacker could execute arbitrary SQL via the type parameter, potentially ...

CVE-2008-6509

SQL injection vulnerability in CallLogDAO in SIP Plugin in Openfire 3.6.0a and earlier allows remote attackers to execute arbitrary SQL commands via the type parameter to sipark-log-summary.jsp...

CVE-2008-6509

creationtimestamp| type| source ---|---|--- 2008-11-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7075...

CVE-2008-3195

creationtimestamp| type| source ---|---|--- 2008-08-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6269 2008-09-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6509...

CVE-2007-6509

Unspecified vulnerability in Appian Enterprise Business Process Management BPM Suite 5.6 SP1 allows remote attackers to cause a denial of service via a crafted packet to port 5400/tcp...

CVE-2007-6509

CVE-2007-6509 affects Appian Enterprise BPM Suite 5.6 SP1. The vulnerability is described as an unspecified remote denial of service caused by sending a crafted packet to port 5400/tcp. The connected documents confirm a DoS exploit context (e.g., Metasploit module and PoC references), but no patc...

CVE-2006-6509

Cross-site scripting XSS vulnerability in the skinning feature in SiteKiosk before 6.5.150 allows local users to bypass security protections and inject arbitrary web script or HTML via an ABOUT: URI, which is displayed in the title bar of the browser...

CVE-2006-6509

Cross-site scripting XSS vulnerability in the skinning feature in SiteKiosk before 6.5.150 allows local users to bypass security protections and inject arbitrary web script or HTML via an ABOUT: URI, which is displayed in the title bar of the browser...

CVE-2006-6509

SiteKiosk

Cisco 6509 switch telnet vulnerability

A vulnerability has been found on Cisco 6509 switches. The vulnerability was found to work on 2 different Cisco 6509 switches running CATOS 5.42 and 5.52. The vulnerability can lead to information and commands being exectued on the remote switch from the login prompt. Commands can be exectued at...