138 matches found
CVE-2018-6574
Go before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-releases before Go 1.10rc2 allow "go get" remote command execution during source code build, by leveraging the gcc or clang plugin feature, because -fplugin= and -plugin= arguments were not blocked...
CVE-2018-6574
Go before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-releases before Go 1.10rc2 allow "go get" remote command execution during source code build, by leveraging the gcc or clang plugin feature, because -fplugin= and -plugin= arguments were not blocked...
CVE-2018-6574
Go before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-releases before 1.10rc2 are vulnerable to remote command execution during source build via the go get workflow, by not blocking -fplugin/ -plugin usage in gcc/clang backends. A remote attacker hosting malicious repositories could trigger arb...
CVE-2013-6574
CVE-2013-6574 entry is rejected/not used as described; not an active vulnerability.
CVE-2017-6574
A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/lists/editmember.php with the GET Parameter: filterlist...
CVE-2017-6574
The CVE-2017-6574 entry affects the Mail Masta (mail-masta) WordPress plugin v1.0. The vulnerability is a SQL injection in the code path ./inc/lists/edit_member.php with the GET parameter filter_list, exploitable from WordPress admin context. Impact described as arbitrary SQL execution with high ...
CVE-2015-6574
CVE-2015-6574 affects the SNAP Lite component in Siemens SISCO MMS-EASE and AX-S4 ICCP products. The vulnerability allows remote attackers to cause a denial-of-service (CPU consumption) by sending a specially crafted packet. Public documentation confirms affected products include SIPROTEC 5 devic...
CVE-2014-6574
Affected software : Oracle Agile PLM for Process, part of Oracle Supply Chain Products Suite 6.1.0.3. Vulnerability description : Unspecified vulnerability related to the Testing Protocol Library could allow remote attackers to compromise integrity. Documents indicate the issue affects the specif...
CVE-2012-6574
The CVE-2012-6574 entry pertains to the Fonecta verify module for Drupal (7.x-1.x) prior to 7.x-1.6, where an XSS vulnerability exists due to unsanitized data retrieved from an untrusted third-party source. The vulnerability affects Fonecta verify 7.x-1.x versions before 7.x-1.6, enabling remote ...
SA-CONTRIB-2012-144 Fonecta verify - Cross Site Scripting (XSS)
Fonecta verify provides an interface to retrieve information from the Finnish Fonecta company information database. The module contains an arbitrary script injection vulnerability XSS due to the fact that it fails to sanitize data retrieved from an untrusted third party source. This vulnerability...
CVE-2008-6574
CVE-2008-6574 affects Avaya Communication Manager SIP Enablement Services (SES) on versions 3.1.x and 4.x. The vulnerability allows remote attackers to gain privileges and cause a denial of service through unspecified vectors related to reuse of valid credentials. The connected documents do not p...
Debian: Security Advisory (DSA-1467-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 1467-1 (mantis)
The remote host is missing an update to mantis announced via advisory DSA 1467-1. OpenVAS Vulnerability Test $Id: deb14671.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1467-1 mantis Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Debian DSA-1467-1 : mantis - several vulnerabilities
Several remote vulnerabilities have been discovered in Mantis, a web-based bug tracking system. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-6574 Custom fields were not appropriately protected by per-item access control, allowing for sensitive da...
[SECURITY] [DSA 1467-1] New mantis packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-1467-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst January 19, 2008 http://www.debian.org/security/faq -...
DSA-1467-1 mantis - several vulnerabilities
Bulletin has no description...
CVE-2006-6574
CVE-2006-6574 affects MantisBT. The vulnerability is that Mantis before 1.1.0a2 does not implement per-item access control for Issue History (Bug History), allowing remote attackers to obtain sensitive information by reading the Change column (e.g., in a custom field). This is the exact issue des...