48 matches found
CVE-2023-6608
CVE-2023-6608 affects Tongda OA 2017 up to 11.9. The vulnerability is a SQL injection in the file general/notify/manage/delete.php caused by manipulation of the DELETE_STR argument. The issue has been publicly disclosed and may be exploited. Upgrading to version 11.10 addresses the vulnerability....
CVE-2023-6608 Tongda OA 2017 delete.php sql injection
A vulnerability was found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this issue is some unknown functionality of the file general/notify/manage/delete.php. The manipulation of the argument DELETESTR leads to sql injection. The exploit has been disclosed to the public and...
Rocky Linux 9 : dbus-broker (RLSA-2022:6608)
The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:6608 advisory. - An issue was discovered in dbus-broker before 31. It depends on c-uitl/c-shquote to parse the DBus service's Exec line. c-shquote contains a stack-bas...
CVE-2020-6608
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...
CVE-2020-6608
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...
K12139752: BIG-IP SNMPD vulnerability CVE-2019-6608
Security Advisory Description Under certain conditions, the snmpd process may leak memory on a multi-blade BIG-IP Virtual Clustered Multiprocessing vCMP guest when processing authorized SNMP requests. CVE-2019-6608 Impact Over time, the snmpd process consumes excessive memory, forcing the BIG-IP...
Oracle Linux 9 : dbus-broker (ELSA-2022-6608)
The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-6608 advisory. 28-5.1 - Fix a stack buffer over-read in the c-shquote library - Fix null pointer reference when supplying a malformed XML config file - Add gating.yam...
RHEL 9 : dbus-broker (RHSA-2022:6608)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:6608 advisory. dbus-broker is an implementation of a message bus as defined by the D-Bus specification. Its aim is to provide high performance and...
CVE-2019-6608
CVE-2019-6608 affects BIG-IP SNMPD on multiple versions (11.5.1–11.6.3, 12.1.0–12.1.3, 13.0.0–13.1.1.1, 14.0.0–14.0.0.2) where processing authorized SNMP requests may leak memory in multi‑blade BIG-IP vCMP guests. The vulnerability manifests as progressive memory growth in the snmpd process, pote...
F5 Networks BIG-IP : BIG-IP SNMPD vulnerability (K12139752)
Under certain conditions, the snmpd process may leak memory on a multi-blade BIG-IP Virtual Clustered Multiprocessing vCMP guest when processing authorized SNMP requests. CVE-2019-6608 Impact Over time, the snmpd process consumes excessive memory, forcing the BIG-IP system to slow down and...
CVE-2018-6608
The CVE-2018-6608 entry concerns Opera’s WebRTC component, specifically version 51.0.2830.55. The vulnerability allows disclosure of a private client IP address in a STUN request after visiting a site attempting to enumerate complete client information (e.g., ip.voidsec.com). Technical details ac...
CVE-2013-6608
CVE-2013-6608 entry is rejected and not associated with a vulnerability.
CVE-2016-6608
XSS issues were discovered in phpMyAdmin. This affects the database privilege check and the "Remove partitioning" functionality. Specially crafted database names can trigger the XSS attack. All 4.6.x versions prior to 4.6.4 are affected...
CVE-2016-6608
CVE-2016-6608 refers to a Cross-site Scripting (XSS) vulnerability in phpMyAdmin affecting 4.6.x versions prior to 4.6.4, specifically impacting the database privilege check and the Remove partitioning functionality via specially crafted database names. The issue is rooted in input validation tha...
CVE-2016-6608
XSS issues were discovered in phpMyAdmin. This affects the database privilege check and the "Remove partitioning" functionality. Specially crafted database names can trigger the XSS attack. All 4.6.x versions prior to 4.6.4 are affected...
CVE-2016-6608
XSS issues were discovered in phpMyAdmin. This affects the database privilege check and the "Remove partitioning" functionality. Specially crafted database names can trigger the XSS attack. All 4.6.x versions prior to 4.6.4 are affected...
Multiple XSS vulnerabilities
PMASA-2016-31 Announcement-ID: PMASA-2016-31 Date: 2016-07-11 Summary Multiple XSS vulnerabilities Description XSS vulnerabilities were discovered in: The database privilege check The "Remove partitioning" functionality Specially crafted database names can trigger the XSS attack. Severity We...
CVE-2015-8072
mediaserver in Android 4.4 through 5.x before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 23881715, a different vulnerability than CVE-2015-6608 and CVE-2015-8073...
CVE-2015-6608
Mediaserver on Android is affected: versions 5.x before 5.1.1 LMY48X and 6.0 before 2015-11-01 are vulnerable to remote code execution or memory corruption via a crafted media file. Root cause cited as memory corruption in mediaserver. CVE-2015-6608 is the umbrella entry; associated internal bugs...