92 matches found
CVE-2016-6812
The HTTP transport module in Apache CXF prior to 3.0.12 and 3.1.x prior to 3.1.9 uses FormattedServiceListWriter to provide an HTML page which lists the names and absolute URL addresses of the available service endpoints. The module calculates the base URL using the current HttpServletRequest. Th...
CVE-2016-6812
CVE-2016-6812 affects the HTTP transport module of Apache CXF. The issue arises when the service list page is generated using the calculated base URL; if the request URL contains unexpected matrix parameters, they may be echoed back in the service endpoint URLs, causing a reflected cross‑site scr...
CVE-2017-6812
MaNGOSWebV4 4.0.8 is affected by a reflected XSS in inc/admin/template_files/admin.vote.php (id parameter). The vulnerability stems from unsanitized input echoed back to the page, enabling arbitrary script execution if a user visits a crafted URL. Affected product is MaNGOSWebV4; no vendor versio...
Fedora 25 : 1:cxf (2016-2361e1e07a)
fixes CVE-2016-6812 CVE-2016-8739 rhbz1406810,1406811,1406813 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...
CVE-2015-6812
CVE-2015-6812 affects Invision Power Services IPS Community Suite (IPS Community Suite/IPB/Power Board) prior to 4.0.12.1. A remote attacker can trigger a denial of service through a crafted URL, causing a loop and memory consumption. The connected documents corroborate the vulnerability descript...
CVE-2014-6812
CVE-2014-6812 affects the Android app “The Aloha Guide” (com.aloha.guide.english), version 1.5. The root cause is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Pub...
JouleTemp environmental server detection
Binary data 6812.prm...
CVE-2008-6812
SQL injection vulnerability in bukutamu.php in phpWebNews 0.2 MySQL Edition allows remote attackers to execute arbitrary SQL commands via the det parameter...
CVE-2008-6812
SQL injection vulnerability in bukutamu.php in phpWebNews 0.2 MySQL Edition allows remote attackers to execute arbitrary SQL commands via the det parameter...
CVE-2008-6812
The CVE-2008-6812 issue affects phpWebNews 0.2 MySQL Edition, specifically the bukutamu.php component, where the det parameter is vulnerable to SQL injection. This allows remote attackers to execute arbitrary SQL commands. The NVD data shows a high severity (CVSS v2 base score 7.5) with network a...
CVE-2008-4762
creationtimestamp| type| source ---|---|--- 2008-10-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6800 2008-10-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6812...