73 matches found
CVE-2014-6532
Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6503...
CVE-2014-6532
CVE-2014-6532 is an unspecified vulnerability in Oracle Java SE Deployment with complete confidentiality, integrity, and availability impact. Affected products are Oracle Java SE 6u81, 7u67, and 8u20. The documented remediation is to apply the vendor patch/update from the Oracle October 2014 CPU ...
CVE-2014-6493
CVE-2014-6493 is an unspecified vulnerability in the Deployment component of Oracle Java SE 6u81, 7u67, and 8u20 that enables remote attackers to affect confidentiality, integrity, and availability via unknown vectors. Other sources (IBM advisories) corroborate that this family of CVEs (Deploymen...
CVE-2014-6532
Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6503...
CVE-2014-4288
Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2014-6493, CVE-2014-6503, and CVE-2014-6532...
KLA10505 Multiple vulnerabilities in Oracle products
An unspecified vulnerabilities were found in Oracle products. By exploiting these vulnerabilities malicious users can affect integrity, confidentiality and vulnerability. These vulnerabilities can be exploited remotely via an unknown vectors related to JSSE, JAXP, AWT, 2D, Deployment, Libraries,...
CVE-2008-6532
Multiple cross-site request forgery CSRF vulnerabilities in the update feature in Drupal 5.x before 5.13 and 6.x before 6.7 allow remote attackers to perform unauthorized actions as the superuser via unspecified vectors, as demonstrated by causing the superuser to "execute old updates" that modif...
CVE-2008-6532
CVE-2008-6532 describes multiple CSRF vulnerabilities in Drupal’s update feature. Affected software: Drupal 5.x before 5.13 and 6.x before 6.7. The issue enables remote attackers to cause the superuser to perform unauthorized actions via unspecified vectors, exemplified by the superuser executing...
GLSA-200801-06 : Xfce: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200801-06 Xfce: Multiple vulnerabilities Gregory Andersen reported that the Xfce4 panel does not correctly calculate memory boundaries, leading to a stack-based buffer overflow in the launcherupdatepanelentry function CVE-2007-653...
CVE-2007-6532
Double free vulnerability in the Widget Library libxfcegui4 in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via unknown vectors related to the "cliend id, program name and working directory in session management."...
CVE-2007-6532
CVE-2007-6532 is a double-free vulnerability in libxfcegui4 (Xfce) prior to 4.4.2. The issue arises in session management where freed memory could be accessed, potentially enabling a remote attacker to execute arbitrary code. Gentoo GLSA 200801-06 and related advisories note that affected package...
CVE-2007-6532
Removed by vendor...
CVE-2006-6532
CVE-2006-6532 is an XSS issue affecting Vt-Forum Lite 1.3 and earlier. Connected docs confirm exploitable via (1) StrMsg/Topic_ID parameters to vf_info.asp, vf_newtopic.asp, vf_settings.asp, and vf_replytopic.asp (and references to CVE-2006-6447). Root cause is insufficient input sanitization lea...