32 matches found
baur.de XSS vulnerability
Open Bug Bounty ID: OBB-682015 Description| Value ---|--- Affected Website:| baur.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2016-6813
Apache CloudStack 4.1 to 4.8.1.0 and 4.9.0.0 contain an API call designed to allow a user to register for the developer API. If a malicious user is able to determine the ID of another non-"root" CloudStack user, the malicious user may be able to reset the API keys for the other user, in turn...
CVE-2016-6813
CVE-2016-6813 affects Apache CloudStack 4.1–4.8.1.0 and 4.9.0.0. The issue is an API call that lets a user register for the developer API, and if the attacker can determine another non-root user’s CloudStack ID, they may reset that user’s API keys and gain access to their account and resources. T...
CVE-2017-6813
A service provided by Zimbra Collaboration Suite ZCS before 8.7.6 fails to require needed privileges before performing a few requested operations...
CVE-2017-6813
CVE-2017-6813 affects Zimbra Collaboration Suite (ZCS) prior to version 8.7.6. The issue is an insufficient privilege check in a service, allowing certain operations to be carried out without required privileges, which constitutes elevation of privilege. Public references describe ZCS 8.7.6 as a ...
CVE-2017-6813
A service provided by Zimbra Collaboration Suite ZCS before 8.7.6 fails to require needed privileges before performing a few requested operations...
CVE-2014-6813
The CVE-2014-6813 entry concerns the Android app klassens (com.mcreda.klassens.apps) version 1.0, which does not verify X.509 certificates from SSL servers. This underlying flaw enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Connec...
Proficy Portal SCADA server detection
Binary data 6813.prm...
SuSE 11.2 Security Update : ghostscript (SAT Patch Number 6813)
This update fixes an array index error leading to a heap-based buffer overflow in ghostscript-library. CVE-2012-4405 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...
CVE-2008-6813
CVE-2008-6813 affects phpWebNews 0.2 MySQL Edition; the vulnerability is a SQL injection in index.php via the id_kat parameter, allowing remote attackers to issue arbitrary SQL commands. The issue is documented across multiple sources; the connected documents provide the vulnerability description...
CVE-2008-6813
creationtimestamp| type| source ---|---|--- 2008-07-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5998...
CVE-2006-6813
CVE-2006-6813 affects Mxmania File Upload Manager (FUM) up to version 1.0.6. The vulnerability is an SQL injection in detail.asp via the ID parameter, allowing remote attackers to execute arbitrary SQL commands. This is documented in NVD records for CVE-2006-6813. The connected documents confirm ...