RHEL 6 : chromium-browser (RHSA-2015:2545)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2015:2545 advisory. Chromium is an open-source web browser, powered by WebKit Blink. Several flaws were found in the processing of malformed web content. A web...

CVE-2014-6771

CVE-2014-6771 affects the United Heritage Mobile (Fi_Mobile.UHCU) Android app version 1.1. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and steal sensitive information via a crafted certificate. The da...

Splunk collect file Directory Traversal (CVE-2013-6771)

A directory traversal vulnerability has been found in Splunk. The vulnerability is due to insufficient sanitization of user-provided input to the advanced search functionality in the "file" parameter of the "collect" script...

CVE-2013-6771

CVE-2013-6771 covers a directory traversal flaw in Splunk’s collect script prior to version 5.0.5. The vulnerability arises from insufficient sanitization of the file parameter, allowing an attacker to craft a path with .. to execute arbitrary commands. Public references note the issue as split f...

SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 6771)

Mozilla Firefox was upgraded to 3.5.7 fixing some bugs and regressions. The following security bug has been fixed : - The nsObserverList::FillObserverArray function in xpcom/ds/nsObserverList.cpp in Mozilla Firefox before 3.5.7 allows remote attackers to cause a denial of service application cras...

CVE-2008-6771

CVE-2008-6771 affects YourPlace 1.0.2 and earlier, where a direct request to user/uploads/phpinfo.php invokes phpinfo and exposes sensitive system information. The document set confirms the affected product/version and the underlying cause (calling phpinfo). No explicit remediation is documented ...

CVE-2006-6771

creationtimestamp| type| source ---|---|--- 2009-02-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32823...

CVE-2008-6771

creationtimestamp| type| source ---|---|--- 2008-12-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7545...

CVE-2006-6771

CVE-2006-6771 affects Irokez CMS 0.7.1 and earlier. When register_globals is enabled, remote attackers can craft a URL to set GLOBALS[PTH] parameters to include PHP code, enabling remote code execution. Affected files include (1) scripts/gallery.scr.php (func), (2) scripts/xtextarea.scr.php (spaw...