56 matches found
Fedora 24 : shiro (2016-744df45727)
update to 1.3.2, security fix for CVE-2016-6802 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
UBUNTU-CVE-2016-6802
Apache Shiro before 1.3.2 allows attackers to bypass intended servlet filters and gain access by leveraging use of a non-root servlet context path...
CVE-2016-6802
Apache Shiro before 1.3.2 allows attackers to bypass intended servlet filters and gain access by leveraging use of a non-root servlet context path...
CVE-2016-6802
CVE-2016-6802 affects Apache Shiro prior to 1.3.2. The issue allows bypass of intended servlet filters by leveraging a non-root servlet context path, enabling an attacker to gain access. The risk and exploit details are limited in the provided documents; the core vulnerability is a path/filters b...
CVE-2016-6802
Apache Shiro before 1.3.2 allows attackers to bypass intended servlet filters and gain access by leveraging use of a non-root servlet context path...
CVE-2016-6802
Apache Shiro before 1.3.2 allows attackers to bypass intended servlet filters and gain access by leveraging use of a non-root servlet context path...
CVE-2014-6802
The First Assembly NLR aka com.subsplash.thechurchapp.firstassemblynlr application 2.8.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6802
The First Assembly NLR aka com.subsplash.thechurchapp.firstassemblynlr application 2.8.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2013-6802
Google Chrome before 31.0.1650.57 allows remote attackers to bypass intended sandbox restrictions by leveraging access to a renderer process, as demonstrated during a Mobile Pwn2Own competition at PacSec 2013, a different vulnerability than CVE-2013-6632...
CVE-2013-6802
Technical details for CVE-2013-6802 are not publicly available in the provided documents. Monitor for updates.
SuSE 10 Security Update : acroread (ZYPP Patch Number 6802)
Specially crafted PDF files could crash acroread. Attackers could exploit that to potentially execute arbitrary code. CVE-2009-3953 / CVE-2009-3954 / CVE-2009-3955 / CVE-2009-3956 / CVE-2009-3957 / CVE-2009-3958 / CVE-2009-3959 / CVE-2009-4324 Acrobat reader was updated to version 9.3 to fix thos...
CVE-2008-6802
Affected product: phPhotoGallery 0.92 (index.php). The CVE describes multiple SQL injection vulnerabilities allowing remote attackers to modify/steal data via the (1) Username and (2) Password fields due to insufficient input sanitization. Exploitation status and practical exploit details are not...
CVE-2008-6076
creationtimestamp| type| source ---|---|--- 2008-10-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6802...
CVE-2008-6802
creationtimestamp| type| source ---|---|--- 2008-10-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32499...
CVE-2006-6802
CVE-2006-6802 describes an SQL injection vulnerability in Enthrallweb ePages, specifically in actualpic.asp via the Biz_ID parameter, allowing remote attackers to execute arbitrary SQL commands. Affected component: actualpic.asp within Enthrallweb ePages. Root cause: improper handling of Biz_ID p...
