RHEL 6 : chromium-browser (RHSA-2015:2545)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2015:2545 advisory. Chromium is an open-source web browser, powered by WebKit Blink. Several flaws were found in the processing of malformed web content. A web...

CVE-2014-6766

The CVE-2014-6766 issue affects the Afro-Beat (com.zero.themelock.tambourine) Android app version 0.2, where the client does not verify X.509 certificates from SSL servers. This permits man-in-the-middle attackers to spoof legitimate servers and extract sensitive information via a crafted certifi...

CVE-2013-6766

OpenVAS Administrator 1.2 before 1.2.2 and 1.3 before 1.3.2 allows remote attackers to bypass the OAP authentication restrictions and execute OAP commands via a crafted OAP request for version information, which causes the state to be set to CLIENTAUTHENTIC...

CVE-2013-6766

OpenVAS Administrator (and Manager) is affected by an authentication bypass (CVE-2013-6766) where processing OMP/OAP version-info requests incorrectly sets the client state to CLIENT_AUTHENTIC, allowing unauthorized OAP commands. Affected: OpenVAS Administrator 1.2.x before 1.2.2 and 1.3.x before...

[OVSA20131108] OpenVAS Manager And OpenVAS Administrator Vulnerable To Partial Authentication Bypass

Summary It has been identified that OpenVAS Manager and OpenVAS Administrator are vulnerable to authentication bypass due to an incorrect state assignment when processing OMP and OAP requests. It has been identified that this vulnerability may allow unauthorised access to OpenVAS Manager and...

Oracle MySQL Server 5.5.x < 5.5.30 yaSSL Buffer Overflow

Binary data 6766.prm...

CVE-2008-6766

ViArt Shop (Shopping Cart) 3.5 is affected by CVE-2008-6766 through the cart_save.php entry point. The vulnerability allows remote attackers to cause a denial-of-service condition by sending a flood of requests, resulting in an excessive number of shopping carts. The available documents do not pr...

CVE-2006-6766

CVE-2006-6766 describes multiple SQL injection vulnerabilities in cwmExplorer 1.1.0 and earlier . Remote attackers can execute arbitrary SQL commands via unspecified vectors. The record aggregates information from third‑party sources with note on provenance, and there is no explicit exposure of a...