40 matches found
CVE-2019-6652
CVE-2019-6652 affects F5 BIG-IQ Centralized Management 6.0.0–6.1.0, where BIG-IQ services for stats do not require authentication and lack TLS. The vulnerability can allow an attacker to gain full access to the statistics database on affected BIG-IQ systems. Remediation per vendor is to upgrade t...
F5 BIG-IQ Centralized Management CVE-2019-6652 Security Bypass Vulnerability
Description F5 BIG-IQ Centralized Management is prone to a remote security-bypass vulnerability. Successfully exploiting this issue may allow an attacker to bypass certain security restrictions and perform unauthorized actions. Technologies Affected F5 BIG-IQ Centralized Management 6.0.1 F5 BIG-I...
CVE-2012-6652
creationtimestamp| type| source ---|---|--- 2019-05-13 18:31:34+00:00| seen| https://t.me/cibsecurity/4271...
CVE-2012-6652
Summary: CVE-2012-6652 describes a directory traversal vulnerability in the WordPress plugin “Page Flip Book” (wppageflip), specifically in the pageflipbook.php script that processes the pageflipbook_language parameter, allowing remote attackers to include and execute arbitrary local files. The i...
CVE-2015-6652
CVE-2015-6652 entry is rejected and does not represent an active vulnerability entry.
Spring Data JPA Blind SQL Injection Vulnerability
PoC for blind SQL injection bug found in Solita Webhack 2016. Founders: Niklas Särökaari, Joona Immonen Analysis: Arto Santala, Niklas Särökaari, Joona Immonen, Antti Virtanen, Michael Holopainen PoC: Antti Ahola, Antti Virtanen CVE: https://pivotal.io/security/cve-2016-6652 This has been fixed i...
CVE-2016-6652
The CVE-2016-6652 vulnerability affects Spring Data JPA prior to 1.9.6 (Gosling SR6) and 1.10.x prior to 1.10.4 (Hopper SR4). When using a repository method that defines a String query with @Query, an attacker can execute arbitrary JPQL commands through a sort parameter (via QueryUtils.applySorti...
CVE-2014-6652
CVE-2014-6652 affects the Android app Wizaz Forum (package com.tapatalk.wizazplforum) version 3.6.4. The vulnerability is that the app does not verify X.509 certificates from SSL servers, which can allow man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted c...
FreeBSD : chromium -- multiple vulnerabilities (9dd47fa3-9d53-11e3-b20f-00262d5ed8ee)
Google Chrome Releases reports : 28 security fixes in this release, including : - 334897 High CVE-2013-6652: Issue with relative paths in Windows sandbox named pipe policy. Credit to tyranid. - 331790 High CVE-2013-6653: Use-after-free related to web contents. Credit to Khalil Zhani. - 333176 Hig...
CVE-2013-6652
CVE-2013-6652 affects Google Chrome on Windows prior to 33.0.1750.117, describing a directory traversal in sandbox/win/src/named_pipe_dispatcher.cc that could bypass sandbox restrictions via missing checks for .. sequences and/or missing use of the \? protection. Public sources (NVD/OpenVAS/Gento...
Google Chrome < 33.0.1750.117 Multiple Vulnerabilities
Binary data 8130.pasl...
chromium -- multiple vulnerabilities
Google Chrome Releases reports: 28 security fixes in this release, including: 334897 High CVE-2013-6652: Issue with relative paths in Windows sandbox named pipe policy. Credit to tyranid. 331790 High CVE-2013-6653: Use-after-free related to web contents. Credit to Khalil Zhani. 333176 High...
Stable Channel Update
The Stable Channel has been updated to 33.0.1750.117 for Windows, Mac, and Linux. Security Fixes and Rewards This update includes 28 security fixes. Below, we highlight fixes that were either contributed by external researchers or particularly interesting. Please see the Chromium security page fo...
SuSE 10 Security Update : kdegraphics3-pdf (ZYPP Patch Number 6652)
Specially crafted PDF files could cause buffer overflows in the pdftops filter when printing such a document. CVE-2009-3608: CVSS v2 Base Score: 9.3 CVE-2009-3609: CVSS v2 Base Score: 4. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...
CVE-2008-6652
SQL injection vulnerability in asd.php in OneCMS 2.5 allows remote attackers to execute arbitrary SQL commands via the sitename parameter...
CVE-2008-6652
The vulnerability CVE-2008-6652 affects OneCMS 2.5, specifically in asd.php where the sitename parameter enables SQL injection. This could allow remote attackers to execute arbitrary SQL commands. The provided documents do not include a remediation or patch details.
CVE-2008-6652
creationtimestamp| type| source ---|---|--- 2008-05-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5557...
CVE-2007-6652
CVE-2007-6652 affects XCMS 1.83 and earlier. The flaw lies in cpie.php which redirects without exiting, enabling direct static code injection via the testo_0 parameter in a cpie admin action to index.php and resulting in writes to dati/generali/footer.dtb (the XCMS footer). This can allow remote ...
CVE-2006-6652
CVE-2006-6652 describes a buffer overflow in the glob implementation (glob.c) of libc used by the FTP daemon tnftpd, affecting NetBSD-current (before 20050914), NetBSD 2.* and 3.* before 20061203, and Mac OS X before 2007-004. A long pathname resulting from path expansion can allow remote authent...