CVE-2017-6727

The CVE-2017-6727 issue affects Cisco Wide Area Application Services (WAAS) SMB service. A vulnerability in the SMB Create Request handling (incomplete input validation) can allow an unauthenticated, remote attacker to cause a DoS on affected devices by triggering a process restart that creates C...

CVE-2016-6727

CVE-2016-6727 is a vulnerability described as affecting the Qualcomm GPS subsystem in Android on Android One devices, enabling remote code execution via a network-like vector. The linked records identify the issue as part of Qualcomm component vulnerabilities with a Critical impact (CVE-2016-6727...

MediaWiki Multiple Vulnerabilities (Sep 2015) - Windows

MediaWiki is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mediawiki:mediawiki"; ifdescripti...

CVE-2015-6727

The Special:DeletedContributions page in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 allows remote attackers to determine if an IP is autoblocked via the "Change block" text...

CVE-2015-6727

CVE-2015-6727 affects MediaWiki prior to 1.23.10, 1.24.x prior to 1.24.3, and 1.25.x prior to 1.25.2. The issue is an information disclosure: remote attackers can determine whether an IP is autoblocked by inspecting the Change block text on the Special:DeletedContributions page. The connected doc...

CVE-2014-6727

The Mikeius Official App aka com.automon.mikeius application 1.4.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6727

The Mikeius Official App aka com.automon.mikeius application 1.4.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6727

The CVE-2014-6727 entry concerns The Mikeius (Official App) (com.automon.mikeius) Android app version 1.4.2.0. The connected documents confirm that the app does not verify X.509 certificates from SSL servers, enabling a MITM attacker to spoof servers and obtain sensitive information via a crafted...

CVE-2013-6727

IBM Lotus Sametime Connect Client (Windows) is affected by CVE-2013-6727. The vulnerability arises because the Connect client does not properly restrict unsigned Java plugins, enabling a remote attacker to disclose confidential information via unspecified vectors. Affected versions are IBM Sameti...

BACnet Protocol Detection (deprecated)

Binary data 6727.prm...

CVE-2007-6727

SQL injection vulnerability in topic.php in KerviNet Forum 1.1 allows remote attackers to execute arbitrary SQL commands via the forum parameter...

CVE-2007-6727

The CVE-2007-6727 entry describes a SQL injection in KerviNet Forum 1.1, specifically topic.php, where the parameter forum can be exploited to execute arbitrary SQL commands remotely. This is the underlying vulnerability: improper sanitization/parameter handling in the forum parameter leading to ...

CVE-2008-6727

Cross-site scripting XSS vulnerability in Ultimate PHP Board UPB 2.2.2, 2.2.1, and earlier 2.x versions allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header...

CVE-2008-6727

Cross-site scripting XSS vulnerability in Ultimate PHP Board UPB 2.2.2, 2.2.1, and earlier 2.x versions allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header...

CVE-2008-6727

CVE-2008-6727 describes a cross-site scripting (XSS) vulnerability in Ultimate PHP Board (UPB) versions up to 2.x, specifically 2.2.2 and 2.2.1 (and earlier 2.x). The issue arises from accepting the User-Agent HTTP header without proper sanitization, enabling a remote attacker to inject arbitrary...

CVE-2008-6727

creationtimestamp| type| source ---|---|--- 2008-12-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7607...

CVE-2006-6727

This CVE concerns a PHP remote file inclusion in inertianews_class.php of inertianews 0.02 beta and earlier. The underlying issue is a vulnerable use of a URL specified in the DOCUMENT_ROOT parameter, allowing remote attackers to execute arbitrary PHP code. Affected file/component: inertianews_cl...