54 matches found
CVE-2016-6521
Cross-site request forgery CSRF vulnerability in Grails console aka Grails Debug Console and Grails Web Console 2.0.7, 1.5.10, and earlier allows remote attackers to hijack the authentication of users for requests that execute arbitrary Groovy code via unspecified vectors...
CVE-2016-6521
CVE-2016-6521: CSRF vulnerability in Grails console (Grails Debug Console / Grails Web Console) versions 2.0.7, 1.5.10 and earlier. It allows remote attackers to hijack user authentication for requests that execute arbitrary Groovy code via unspecified vectors. Affected products/versions are name...
CVE-2014-6521
CVE-2014-6521 affects Oracle Solaris 10, specifically the CDE - Power Management Utility. The Solaris 10 component is vulnerable to a local, easily exploitable flaw that can lead to complete compromise of confidentiality, integrity, and availability (arbitrary code execution). Patches addressing ...
Solaris 10 (x86) : 126120-02 (deprecated)
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: CDE - Power Management Utility. The supported version that is affected is 10. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in...
SuSE 11.1 Security Update : libopenssl (SAT Patch Number 6521)
This update adds libopenssl098-hmac packages, that, when installed, will enforce FIPS 140-2 self-test being run upon first use of the library. If FIPS mode is enforced, these new packages are required in order to enable FIPS mode successfully. The update also imposes limits on the parameters of a...
CVE-2012-6521
CVE-2012-6521 is an XSS in Elefant CMS 1.2.0. The vulnerability resides in apps/admin/handlers/versions.php and is exploitable via the id parameter to admin/versions, allowing remote attackers to inject arbitrary web script or HTML. The affected component is the PHP handler for version management...
SuSE 10 Security Update : Cyrus IMAPD (ZYPP Patch Number 6521)
This update fixes another buffer overflow in the Sieve code CVE-2009-3235. This can be exploited by users allowed to use their own sieve scripts to execute arbitrary code remotely. Additionally the handling of long headers was improved. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The tex...
CVE-2008-6521
CVE-2008-6521 affects Terracotta/OpenTerracotta 0.6.1. The index.php vulnerable path allows remote attackers to obtain sensitive information via an invalid File parameter, revealing the installation path in an error message. Impact: information disclosure. Vector: network access to the vulnerable...
SuSE Update for opera SUSE-SA:2008:001
Check for the Version of opera OpenVAS Vulnerability Test $Id: gbsuse2008001.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for opera SUSE-SA:2008:001 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...
FreeBSD Ports: opera, opera-devel, linux-opera
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2007-6521
Opera before 9.25 is affected by a heap-based buffer overflow during TLS certificate parsing (specifically subject alternative names in X.509 certificates), which can allow remote attackers to cause a crash or execute arbitrary code. This vulnerability (CVE-2007-6521) was addressed in Opera 9.25,...
CVE-2006-6521
SQL injection vulnerability in lire-avis.php in Messageriescripthp 2.0 allows remote attackers to execute arbitrary SQL commands via the aa parameter...
CVE-2006-6521
CVE-2006-6521 is a SQL injection vulnerability affecting lire-avis.php in Messageriescripthp 2.0. The underlying issue allows remote attackers to inject and execute arbitrary SQL commands via the aa parameter. Documented impact aligns with partial confidentiality, integrity, and availability conc...