41 matches found
CVE-2019-6696
An improper input validation vulnerability in FortiOS 6.2.1, 6.2.0, 6.0.8 and below until 5.4.0 under admin webUI may allow an attacker to perform an URL redirect attack via a specifically crafted request to the admin initial password change webpage...
CVE-2019-6696
CVE-2019-6696 is a FortiOS URL-redirect vulnerability caused by improper input validation on the admin webUI password-change page. Connected sources confirm it affects FortiOS 5.x (>=5.4.0), 6.x (prior to 6.0.9), and 6.2.x (prior to 6.2.2). The issue allows an attacker to perform an URL redire...
CVE-2012-6696
inspircd in Debian before 2.0.7 does not properly handle unsigned integers. NOTE: This vulnerability exists because of an incomplete fix to CVE-2012-1836...
CVE-2012-6696
Technical details about CVE-2012-6696 are not publicly available in the provided documents. Monitor for updates.
CVE-2017-6696
Cisco Elastic Services Controller (ESC) contains an information-disclosure vulnerability in its file-system credential repository. An authenticated, local attacker could access sensitive user credentials stored on an affected system due to insufficient access control over the credential repositor...
CVE-2016-6696
CVE-2016-6696 affects sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in the Qualcomm QDSP6v2 driver used by Android. The issue allows denial of service (and potentially unspecified impact) when a large negative value is used for the data length, described as Qualcomm internal bug CR 1041130. Connecte...
Heap overflow
Heap-based buffer overflow in AGM.dll in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary...
Adobe Acrobat < 10.1.16 / 11.0.13 / 2015.006.30094 / 2015.009.20069 Multiple Vulnerabilities (APSB15-24)
The version of Adobe Acrobat installed on the remote Windows host is a version prior to 10.1.16, 11.0.13, 2015.006.30094, or 2015.009.20069. It is, therefore, affected by multiple vulnerabilities. - The ANAuthenticateResource method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before...
CVE-2015-6696
Heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code via...
CVE-2015-6696
CVE-2015-6696 is a heap-based buffer overflow in Adobe Reader/Acrobat components (notably AcroForm/AGM.dll) on Windows and macOS. Affected are Adobe Reader/Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat/Reader DC Classic before 2015.006.30094 and DC Continuous before 2015.009.20069;...
Debian DSA-3226-1 : inspircd - security update
Adam discovered several problems in inspircd, an IRC daemon : - An incomplete patch for CVE-2012-1836 failed to adequately resolve the problem where maliciously crafted DNS requests could lead to remote code execution through a heap-based buffer overflow. - The incorrect processing of specific DN...
Debian Security Advisory DSA 3226-1 (inspircd - security update)
Adam discovered several problems in inspircd, an IRC daemon: An incomplete patch for CVE-2012-1836 failed to adequately resolve the problem where maliciously crafted DNS requests could lead to remote code execution through a heap-based buffer overflow. The incorrect processing of specific DNS...
Debian: Security Advisory (DSA-3226-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2014-6696
The CVE-2014-6696 entry concerns the Android app Candy Girl Party Makeover (com.bearhugmedia.android_candygirlparty) version 1.0.0.0, which does not verify X.509 certificates when establishing TLS connections. Root cause: missing server certificate validation, enabling man-in-the-middle attackers...
CVE-2013-6696
Cisco Adaptive Security Appliance ASA Software does not properly handle errors during the processing of DNS responses, which allows remote attackers to cause a denial of service device reload via a malformed response, aka Bug ID CSCuj28861...
CVE-2013-6696
Cisco ASA Software is affected by CVE-2013-6696 due to improper handling of DNS error cases when processing DNS replies, allowing an unauthenticated, remote attacker to trigger a denial-of-service (reload) via a malformed DNS response. The issue stems from DNS response processing in ASA’s DNS cod...
CVE-2008-6696
SQL injection vulnerability in Fussballtippspiel toto 0.1.1 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...
CVE-2008-6696
CVE-2008-6696 corresponds to a SQL injection vulnerability in the Fussballtippspiel (toto) extension for TYPO3, affecting version 0.1.1 and earlier. The issue allows remote attackers to execute arbitrary SQL commands via unknown vectors. The available references indicate public awareness and disc...
Microsoft Security Bulletin MS07-021 Vulnerabilities in CSRSS Could Allow Remote Code Execution (930178)
Microsoft Security Bulletin MS07-021 Vulnerabilities in CSRSS Could Allow Remote Code Execution 930178 Published: April 10, 2007 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Rating: Critical...
Immunity Canvas: LOCALLPC
Name| localLPC ---|--- CVE| CVE-2006-6696 Exploit Pack| CANVAS Description| LPC local MS07-021 Notes| CVE Name: CVE-2006-6696 VENDOR: Microsoft MSADV: MS07-021 CVSS: 6.9 CVE Url: https://vulners.com/cve/CVE-2006-6696 Notes: If you get FFFFFFF that means inetinfo died sorry,...