38 matches found
CVE-2023-6752
creationtimestamp| type| source ---|---|--- 2024-01-02 21:26:20+00:00| seen| https://t.me/ctinow/162028...
CVE-2020-6752
In OMERO before 5.6.1, group owners can access members' data in other groups...
CVE-2020-6752
CVE-2020-6752 affects OMERO.server prior to 5.6.1. According to the connected CNVD entries, group owners can access members’ data in other groups, revealing an information-disclosure risk due to a pre-5.6.1 access-control issue. The vulnerability is described across sources as existing in OMERO.s...
CVE-2019-6752
Foxit PhantomPDF flaw CVE-2019-6752: in Foxit PhantomPDF 9.3.10826, parsing of PDF documents allows read past end of an allocated object, enabling information disclosure. Remote attacker must persuade target to open a malicious page/file and may leverage this with other vulnerabilities to execute...
CVE-2017-6752
The CVE-2017-6752 issue affects Cisco ASA Web UI for versions 9.3(3) and 9.6(2). It stems from the interaction between LDAP and SSL Connection Profile, enabling an unauthenticated remote attacker to enumerate valid usernames via the device IP. This information disclosure stems from username enume...
CVE-2013-6752
CVE-2013-6752 is rejected/not used per the description; this entry does not represent an active vulnerability.
adult-empire.com XSS vulnerability
Vulnerable URL: http://www.adult-empire.com/warning.php?goto=http://www.adult-empire.com/search.htm?q=q%22%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability...
CVE-2016-6752
CVE-2016-6752: An information-disclosure vulnerability in Qualcomm components (GPU driver, power driver, SMSM Point-to-Point driver, and sound driver) in Android prior to 2016-11-05 can allow a local malicious app to access data outside its permissions after compromising a privileged process. Aff...
CVE-2015-6752
Summary: CVE-2015-6752 is a cross-site scripting (XSS) vulnerability in Drupal’s Search API Autocomplete module (7.x-1.x, prior to 7.x-1.3). The issue arises when the search index uses the HTML filter processor, allowing remote authenticated users with certain permissions to inject arbitrary web ...
CVE-2015-6752
Cross-site scripting XSS vulnerability in the Search API Autocomplete module 7.x-1.x before 7.x-1.3 for Drupal, when the search index is configured to use the HTML filter processor, allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified...
Search API Autocomplete - Moderately Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2015-140
This module enables you to add autocomplete suggestions for search forms created with the Search API module. The module doesn't sufficiently sanitize the HTML output for the returned suggestions, theoretically allowing an attacker to include custom HTML there. This vulnerability is mitigated by t...
CVE-2007-6752
CVE-2007-6752 describes a CSRF vulnerability in Drupal 7.12 and earlier that allows an attacker to hijack the authentication of arbitrary users via requests ending the session on the user/logout URI. The vendor disputes the severity and there is no documented fix in the provided sources; some ref...
CVE-2008-6752
CVE-2008-6752 affects the Twitter Clone (TClone) plugin for ReVou Micro Blogging. The bug occurs in adminlogin/password.php where the original password is not verified before changing passwords, enabling a remote attacker to change the administrator’s password and gain privileges by sending a Cha...
CVE-2008-6752
creationtimestamp| type| source ---|---|--- 2008-12-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7523...
CVE-2006-6752
The CVE-2006-6752 entry describes a buffer overflow in FTPRush 1.0.0.610 that could allow an attacker to gain privileges by supplying a long Host field. The description notes uncertainty about provenance and whether the issue crosses security boundaries; no exploitation details or patch informati...