73 matches found
CVE-2015-0942
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-6742, CVE-2015-6743, CVE-2015-6744, CVE-2015-6745, CVE-2015-6746, CVE-2015-6747. Reason: This candidate originally combined multiple issues that have different vulnerability types and other complex abstraction issues. Notes:...
CVE-2015-6747
The Basware Banking (Maksuliikenne) vulnerability CVE-2015-6747 affects Basware Banking 8.90.07.X and earlier, where private keys are stored in plaintext in the SQL database. This storage flaw enables remote attackers to spoof communications with banks through unspecified vectors. CNVD-2015-05816...
CVE-2015-6747
Basware Banking Maksuliikenne 8.90.07.X does not properly prevent access to private keys, which allows remote attackers to spoof communications with banks via unspecified vectors. NOTE: this identifier was SPLIT from CVE-2015-0942 per ADT2 due to different vulnerability types. NOTE: this...
CVE-2014-6747
The CVE-2014-6747 entry describes the Android SeeOn (com.seeon) application, version 4.0.7, as not verifying X.509 certificates when establishing SSL connections. This causes a trust/validation bypass that enables man-in-the-middle attackers to spoof servers and access sensitive information via a...
IBM DB2 9.7 < Fix Pack 9a Multiple Vulnerabilities
According to its version, the installation of DB2 9.7 running on the remote host is prior to Fix Pack 9a. It is, therefore, affected by one or more of the following vulnerabilities : - An unspecified error exists related to handling malformed certificate chains that allows denial of service...
IBM DB2 9.1 TLS/SSL Multiple DoS Vulnerabilities
According to its version, the installation of IBM DB2 running on the remote host is version 9.1. It is, therefore, affected by one or more of the following vulnerabilities : - An unspecified error exists related to handling malformed certificate chains that could allow denial of service attacks...
IBM DB2 10.1 < Fix Pack 3a Multiple Vulnerabilities
According to its version, the installation of IBM DB2 10.1 running on the remote host is prior to Fix Pack 3a. It is, therefore, affected by one or more of the following vulnerabilities : - The included version of GSKit contains an error related to CBC-mode and timing that could allow an attacker...
CVE-2013-6747
CVE-2013-6747 affects GSKit used by IBM Security Directory Server (ISDS) and Tivoli Directory Server (TDS). A malformed X.509 certificate chain can cause the GSKit client/server process to hang or crash, enabling a remote attacker to trigger a denial of service without authentication. IBM’s bulle...
RKD Software BarCodeAx.dll v4.9 ActiveX Remote Stack Buffer Overflow
$Id: barcodeax49.rb 8466 2010-02-12 18:06:49Z patrickw $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...
CVE-2008-6747
CVE-2008-6747 affects dotProject prior to 2.1.2. The issue is that access to administrative pages is not properly restricted, enabling remote attackers to gain privileges. Public details in the connected docs consistently identify a privilege-escalation vulnerability in dotProject
CVE-2006-6747
SQL injection vulnerability in shownews.php in Xt-News 0.1 allows remote attackers to execute arbitrary SQL commands via the idnews parameter...
CVE-2006-6747
The CVE-2006-6747 entry describes a SQL injection in Xt-News 0.1’s show_news.php, exploitable via the id_news parameter. A remote attacker can cause arbitrary SQL execution (no authentication required; network access; low attack complexity) with potential partial impact to confidentiality, integr...