CVE-2016-6582

The CVE-2016-6582 entry concerns the Doorkeeper gem for Ruby, with versions prior to 4.2.0. The underlying issue is a failure to implement the OAuth 2.0 Token Revocation specification, which could allow remote attackers to conduct replay attacks or revoke arbitrary tokens. The available connected...

Doorkeeper gem does not revoke tokens & uses wrong auth/auth method

Doorkeeper failed to implement OAuth 2.0 Token Revocation RFC 7009 in the following ways: 1. Public clients making valid, unauthenticated calls to revoke a token would not have their token revoked 2. Requests were not properly authenticating the client credentials but were, instead, looking at th...

Google Chrome Multiple Vulnerabilities-01 (Sep 2015) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

CVE-2015-6582

The decompose function in platform/transforms/TransformationMatrix.cpp in Blink, as used in Google Chrome before 45.0.2454.85, does not verify that a matrix inversion succeeded, which allows remote attackers to cause a denial of service uninitialized memory access and application crash or possibl...

CVE-2015-6582

CVE-2015-6582 concerns the Blink decompose function in TransformationMatrix.cpp used by Google Chrome prior to 45.0.2454.85, which does not verify whether matrix inversion succeeded. This can allow remote attackers to cause an uninitialized memory access and crash (denial of service) or potential...

CVE-2014-6582

Unspecified vulnerability in the Oracle HCM Configuration Workbench component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality via unknown vectors related to Rapid Implementation...

CVE-2014-6582

Technical details about CVE-2014-6582 are not publicly provided in the supplied documents. Monitor Oracle CPU advisories and related feeds for updates on affected products and remediation.

CVE-2012-6582

The vulnerability CVE-2012-6582 affects the Drupal Spambot module: versions 6.x-3.x before 6.x-3.2 and 7.x-1.x before 7.x-1.1 permit XSS via stopforumspam.com API responses that are logged by watchdog. The root cause is improper sanitization of API responses before logging, enabling remote attack...

CVE-2008-6582

SQL injection vulnerability in index.php in Miniweb 2.0 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action...

CVE-2008-6582

CVE-2008-6582 describes a SQL injection vulnerability in index.php of Miniweb 2.0, where the login action vulnerable via the username parameter allows remote attackers to execute arbitrary SQL commands. Connected documents confirm the affected component and the injection vector; no exploitation d...

CVE-2008-6582

SQL injection vulnerability in index.php in Miniweb 2.0 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action...

CVE-2008-6582

creationtimestamp| type| source ---|---|--- 2008-05-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5548 2008-12-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7586...

CVE-2007-6582

CVE-2007-6582 : A directory traversal vulnerability in index.php of mBlog 1.2 allows remote attackers to read arbitrary files by supplying a .. sequence in the page parameter within a page mode action. This is tied to the vulnerable component/function (index.php, page mode) and enables partial co...

CVE-2006-6582

CVE-2006-6582 concerns ScriptMate User Manager 2.1 and earlier. The vulnerability set is multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary script or HTML via the login action fields (members_username, members_password) in members/default.asp and via the Sea...