CVE-2017-6561

CVE-2017-6561 : The connected sources confirm a cross-site scripting (XSS) vulnerability in Agora-Project version 3.2.2, exploitable via an index.php?ctrl=object&action=[XSS] parameter. The reports do not provide remediation details or confirm exploitation status. No other concrete technical spec...

wehkamp.nl Open Redirect vulnerability

Vulnerable URL: http://www.wehkamp.nl/Opruiming/Default.aspx?redirector=http://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 6561 VIP website...

CVE-2014-6561

Unspecified vulnerability in the Oracle Payments component in Oracle E-Business Suite 12.0.4, 12.0.6, 12.1.1, 12.1.2, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality via unknown vectors related to Separate Remittance Advice...

CVE-2014-6561

Technical details about CVE-2014-6561 are not publicly provided in the supplied documents. Monitor for updates from Oracle CPU advisories and external references.

CVE-2012-6561

CVE-2012-6561 affects Elgg prior to 1.8.5. The vulnerability exists in the engine/lib/views.php component, where the view parameter of index.php can be manipulated to inject arbitrary web script or HTML (a reflected/DOM-like XSS as described in sources). Impact is remote code execution within the...

CVE-2008-6561

CVE-2008-6561 affects the Citrix Presentation Server Client for Windows prior to version 10.200. The issue is that it does not clear credential information from process memory under unspecified circumstances, which could allow local users to gain privileges. The provided documents confirm the aff...

Gentoo Security Advisory GLSA 200803-17 (pdflib)

The remote host is missing updates announced in advisory GLSA 200803-17. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2007-6561

Multiple stack-based buffer overflows in PDFLib allow user-assisted remote attackers to execute arbitrary code via a long filename argument to the PDFloadimage function that results in an overflow in the pdcfsearchfopen function, and possibly other vectors...

CVE-2007-6561

PDFlib contains multiple stack-based buffer overflows that can be triggered by a long filename argument to PDF_load_image, causing an overflow in pdc_fsearch_fopen and possibly other vectors. Impact is remote code execution under the privileges of the vulnerable application. The issue is document...

MS07-014 / MS07-015: Vulnerabilities in Microsoft Word and Office Could Allow Remote Code Execution (929434 / 932554) (Mac OS X)

The remote host is running a version of Microsoft Office that is affected by various flaws that may allow arbitrary code to be run. To succeed, the attacker would have to send a rogue file to a user of the remote computer and have it open it with Microsoft Word or another Office application...

Memory corruption

Unspecified vulnerability in Microsoft Word allows user-assisted remote attackers to execute arbitrary code on Word 2000, and cause a denial of service on Word 2003, via unknown attack vectors that trigger memory corruption, as exploited by Trojan.Mdropper.W and later by Trojan.Mdropper.X, a...

CVE-2006-6628

Integer overflow in OpenOffice.org OOo 2.1 allows user-assisted remote attackers to cause a denial of service application crash via a crafted DOC file, as demonstrated by the 12122006-djtest.doc file, a variant of CVE-2006-6561 in a separate codebase...

CVE-2006-6561

CVE-2006-6561 is a memory‑corruption vulnerability in Microsoft Word 2000, Word 2002, and Word Viewer 2003 triggered by a crafted DOC file, enabling remote code execution. The issue is demonstrated via the 12122006-djtest.doc file and is related to other Word memory‑corruption CVEs (e.g., CVE-200...