55 matches found
CVE-2016-6802
Apache Shiro before 1.3.2 allows attackers to bypass intended servlet filters and gain access by leveraging use of a non-root servlet context path...
UBUNTU-CVE-2016-6802
Apache Shiro before 1.3.2 allows attackers to bypass intended servlet filters and gain access by leveraging use of a non-root servlet context path...
CVE-2016-6802
CVE-2016-6802 affects Apache Shiro prior to 1.3.2. The issue allows bypass of intended servlet filters by leveraging a non-root servlet context path, enabling an attacker to gain access. The risk and exploit details are limited in the provided documents; the core vulnerability is a path/filters b...
CVE-2016-6802
Apache Shiro before 1.3.2 allows attackers to bypass intended servlet filters and gain access by leveraging use of a non-root servlet context path...
CVE-2016-6802
Apache Shiro before 1.3.2 allows attackers to bypass intended servlet filters and gain access by leveraging use of a non-root servlet context path...
CVE-2014-6802
The First Assembly NLR aka com.subsplash.thechurchapp.firstassemblynlr application 2.8.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6802
The First Assembly NLR aka com.subsplash.thechurchapp.firstassemblynlr application 2.8.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2013-6802
Google Chrome before 31.0.1650.57 allows remote attackers to bypass intended sandbox restrictions by leveraging access to a renderer process, as demonstrated during a Mobile Pwn2Own competition at PacSec 2013, a different vulnerability than CVE-2013-6632...
CVE-2013-6802
Technical details for CVE-2013-6802 are not publicly available in the provided documents. Monitor for updates.
SuSE 10 Security Update : acroread (ZYPP Patch Number 6802)
Specially crafted PDF files could crash acroread. Attackers could exploit that to potentially execute arbitrary code. CVE-2009-3953 / CVE-2009-3954 / CVE-2009-3955 / CVE-2009-3956 / CVE-2009-3957 / CVE-2009-3958 / CVE-2009-3959 / CVE-2009-4324 Acrobat reader was updated to version 9.3 to fix thos...
CVE-2008-6802
Affected product: phPhotoGallery 0.92 (index.php). The CVE describes multiple SQL injection vulnerabilities allowing remote attackers to modify/steal data via the (1) Username and (2) Password fields due to insufficient input sanitization. Exploitation status and practical exploit details are not...
CVE-2008-6076
creationtimestamp| type| source ---|---|--- 2008-10-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6802...
CVE-2008-6802
creationtimestamp| type| source ---|---|--- 2008-10-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32499...
CVE-2006-6802
CVE-2006-6802 describes an SQL injection vulnerability in Enthrallweb ePages, specifically in actualpic.asp via the Biz_ID parameter, allowing remote attackers to execute arbitrary SQL commands. Affected component: actualpic.asp within Enthrallweb ePages. Root cause: improper handling of Biz_ID p...
