CVE-2017-6669

The CVE-2017-6669 entry concerns Cisco WebEx Network Recording Player for ARF files. The vulnerability arises from multiple buffer overflow flaws in the ARF file processing code, allowing an attacker to crash the player or execute arbitrary code on a targeted user’s system. Exploitation requires ...

CVE-2016-6669

CVE-2016-6669 is a buffer overflow in the Authentication, Authorization and Accounting (AAA) module of Huawei USG2100, USG2200, USG5100, and USG5500 devices prior to V300R001C10SPC600. A remote attacker authenticated to a RADIUS server can send crafted EAP packets to trigger arbitrary code execut...

Security Advisory - Buffer Overflow Vulnerability in Huawei USG Products

The Authentication, Authorization and Accounting AAA module in the USG products has a buffer overflow vulnerability. A remote attacker can send crafted Enterprise Application Platform EAP packets to the USG products through a Remote Authentication Dial In User Service RADIUS server which has...

CVE-2014-6669

CVE-2014-6669 affects the Android app “Inside Crochet” (package com.magazinecloner.insidecrochet). The provided documents state that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted ce...

CVE-2008-6669

viewrq.php in nweb2fax 0.2.7 and earlier allows remote attackers to execute arbitrary code via shell metacharacters in the varfilename parameter in a 1 tif or 2 pdf format action...

CVE-2008-6669

viewrq.php in nweb2fax 0.2.7 and earlier allows remote attackers to execute arbitrary code via shell metacharacters in the varfilename parameter in a 1 tif or 2 pdf format action...

CVE-2008-6669

The CVE-2008-6669 entry applies to viewrq.php in the nweb2fax project (version 0.2.7 and earlier). The vulnerability allows remote code execution through shell metacharacters in the var_filename parameter when performing (1) tif or (2) pdf format actions. The affected component is the server-side...

CVE-2008-6669

creationtimestamp| type| source ---|---|--- 2008-06-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5856...

CVE-2007-6669

CVE-2007-6669 describes a Cross-site Scripting (XSS) vulnerability in the search.php component of PHCDownload 1.1.0 . The issue allows remote attackers to inject arbitrary web script or HTML by supplying the attacker-controlled string parameter, enabling potential user session or browser context ...

[SECURITY] [DSA 1279-1] New webcalendar packages fix cross-site scripting

-------------------------------------------------------------------------- Debian Security Advisory DSA 1279-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 22nd, 2007 http://www.debian.org/security/faq -...

CVE-2006-6669

Cross-site scripting XSS vulnerability in exporthandler.php in WebCalendar 1.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the format parameter...

CVE-2006-6669

WebCalendar (v1.0.4 and earlier) is affected by a cross-site scripting (XSS) flaw in export_handler.php that allows an attacker to inject arbitrary script/HTML via the format parameter. The issue has been publicly documented (e.g., CVE-2006-6669; Debian DSA-1279-1) with Debian advising upgrades t...