CVE-2015-6817

CVE-2015-6817 affects PgBouncer 1.6.x before 1.6.1. The vulnerability allows a remote attacker to gain login access as auth_user via an unknown username when configured with the auth_user feature. Public references in multiple databases (NVD, OSV, CNVD, Debian tracker, Gentoo GLSA) corroborate th...

Debian DSA-3815-1 : wordpress - security update

Several vulnerabilities were discovered in wordpress, a web blogging tool. They would allow remote attackers to delete unintended files, mount Cross-Site Scripting attacks, or bypass redirect URL validation mechanisms. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

[SECURITY] [DSA 3815-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3815-1 [email protected] https://www.debian.org/security/ Sebastien Delafond March 23, 2017 https://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-3815-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-6817

CVE-2017-6817 affects WordPress versions before 4.7.3, where authenticated XSS is possible via YouTube URL embeds in wp-includes/embed.php. The CVSS metrics in the record indicate a Medium severity (CVSS‑3 base 5.4). Remediation is to upgrade to WordPress 4.7.3 or later (as noted in the WordPress...

CVE-2017-6817

In WordPress before 4.7.3 wp-includes/embed.php, there is authenticated Cross-Site Scripting XSS in YouTube URL Embeds...

Apache Tomcat denial of service vulnerability, CVE-2016-6817）

The HTTP/2 header parser entered an infinite loop if a header was received that was larger than the available buffer. This made a denial of service attack possible. This was fixed in revision 1765794. This issue was reported as 60232 on 10 October 2016 and the security implications identified by...

Fedora Update for tomcat FEDORA-2016-9c33466fbb

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for tomcat FEDORA-2016-98cca07999

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 24 : 1:tomcat (2016-a98c560116)

This updates includes a rebase from tomcat 8.0.38 up to 8.0.39 which resolves multiple CVEs : - \1397493 - CVE-2016-6816 CVE-2016-6817 CVE-2016-8735 tomcat: various flaws Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system websit...

Fedora 23 : 1:tomcat (2016-9c33466fbb)

This updates includes a rebase from tomcat 8.0.38 up to 8.0.39 which resolves multiple CVEs : - \1397493 - CVE-2016-6816 CVE-2016-6817 CVE-2016-8735 tomcat: various flaws Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system websit...

SOL49160100 - Apache Tomcat vulnerability CVE-2016-6817

Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...

Fixed in Apache Tomcat 8.5.8

Note: The issues below were fixed in Apache Tomcat 8.5.7 but the release vote for the 8.5.7 release candidate did not pass. Therefore, although users must download 8.5.8 to obtain a version that includes fixes for these issues, version 8.5.7 is not included in the list of affected versions...

Pgbouncer 1.6 Invalid User Authentication Bypass

The version of Pgbouncer running on the remote host is affected by an authentication bypass vulnerability due to a flaw in the startauthrequest function within file client.c when handling requests for invalid users. A remote attacker can exploit this issue to bypass authentication and log into...

CVE-2014-6817

The CVE-2014-6817 entry concerns The Cove app (org.covechurch.app) for Android 1.0.2, which does not verify X.509 certificates from SSL servers. This failure enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Public sources in the prov...

CVE-2013-6817

CVE-2013-6817 affects SAP Network Interface Router (SAProuter) 7.30. It is a heap-based buffer overflow in NI Route message handling that can allow a remote attacker to cause a denial of service and execute arbitrary code. The available documents confirm the vulnerable component is SAProuter 7.30...

SuSE 11.2 Security Update : inst-source-utils (SAT Patch Number 6817)

Multiple code execution flaws have been fixed that could have been exploited via specially crafted file names / directory path names. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The tex...

CVE-2008-6817

CVE-2008-6817 affects Mole Group Lastminute Script 4.0 and earlier, where passwords are stored in cleartext. This indicates improper credential storage (cleartext) and can allow context-dependent attackers to obtain sensitive information. The description notes provenance is uncertain and informat...

CVE-2008-6172

creationtimestamp| type| source ---|---|--- 2008-10-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6817...

CVE-2006-6817

The CVE-2006-6817 issue affects AlstraSoft Web Host Directory (also listed as HyperStop WebHost Directory 1.2). Affected component: login/URI handling that, when an invalid URI is requested, exposes the installation path in the error message, enabling a remote attacker to obtain sensitive informa...