CVE-2014-6587

CVE-2014-6587 is an unspecified vulnerability in Oracle Java SE affecting OpenJDK/OpenJDK-derived packages (notably 6u85, 7u72, 8u25) that could allow local users to impact confidentiality, integrity, and availability via unknown vectors related to Libraries. Several connected advisories confirm ...

java security update

CentOS Errata and Security Advisory CESA-2015:0069 Updated java-1.8.0-openjdk packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS...

java security update

CentOS Errata and Security Advisory CESA-2015:0068 Updated java-1.7.0-openjdk packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS...

CentOS 6 : java-1.8.0-openjdk (CESA-2015:0069) (POODLE)

Updated java-1.8.0-openjdk packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, a...

Important: Red Hat Security Advisory: java-1.7.0-openjdk security update

Updated java-1.7.0-openjdk packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, a...

CVE-2012-6587

Cross-site scripting XSS vulnerability in vacation/1mobile/alertmembers.php in MYRE Vacation Rental Software allows remote attackers to inject arbitrary web script or HTML via the linkidd parameter in a login action...

CVE-2012-6587

creationtimestamp| type| source ---|---|--- 2012-11-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/22712...

CVE-2007-6587

creationtimestamp| type| source ---|---|--- 2012-05-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37305...

Apache OFBiz <= 3.0.0 Multiple HTML Injection Vulnerabilities

Apache OFBiz is prone to multiple HTML injection vulnerabilities. Copyright C 2009 Christian Eric Edjenguele Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

CVE-2008-6587

CVE-2008-6587 describes a cross-site request forgery (CSRF) in Vuze (formerly Azureus HTML WebUI) where requests to index.tmpl can hijack a user’s session to force downloads of arbitrary torrent files via the upurl parameter. Reported as likely in the 0.7.6 timeframe, this vulnerability could per...

CVE-2007-6587

Plogger 1.0 Beta 3.0 is affected by a SQL injection in plog-rss.php via the id parameter. The issue allows remote attackers to manipulate the database and potentially read/modify data. The vulnerability is confirmed across CVE-2007-6587 entries in NVD/NIST and corroborated by Nessus plugin covera...

CVE-2006-6587

Cross-site scripting XSS vulnerability in the forum implementation in the ecommerce component in the Apache Open For Business Project OFBiz allows remote attackers to inject arbitrary web script or HTML by posting a message...

CVE-2006-6587

CVE-2006-6587 is a Cross‑Site Scripting (XSS) flaw in the Apache OFBiz Open For Business (OFBiz) ecommerce forum component. The vulnerability allows remote attackers to inject arbitrary script or HTML by posting a message, targeting the forum implementation. The connected OpenVAS entry notes OFBi...

CVE-2006-6587

Cross-site scripting XSS vulnerability in the forum implementation in the ecommerce component in the Apache Open For Business Project OFBiz allows remote attackers to inject arbitrary web script or HTML by posting a message...