26 matches found
CVE-2015-6818
CVE-2015-6818 affects FFmpeg’s decode_ihdr_chunk in libavcodec/pngdec.c, where the IHDR chunk in PNGs isn’t required to be unique. This can enable a crafted image with two or more IHDR chunks to trigger an out-of-bounds array access and cause a denial of service, with potential unspecified impact...
CVE-2014-6818
The CVE-2014-6818 entry concerns the OHBM 20th Annual Meeting Android app (com.coreapps.android.followme.ohbm2014), version 6.0.9.2. The connected sources consistently describe the root cause as the app failing to verify X.509 certificates when connecting to SSL servers. This misconfiguration ena...
CVE-2013-6818
CVE-2013-6818 affects SAP NetWeaver Logviewer 6.30 running on Windows. The connected documents confirm the component and version, and state that remote attackers can bypass intended access restrictions via unspecified vectors. The root cause, specific vulnerable function/file, exploitation detail...
CVE-2008-6818
Mole Group Real Estate Script 1.1 and earlier stores passwords in cleartext, which allows context-dependent attackers to obtain sensitive information. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-6818
The CVE-2008-6818 entry concerns Mole Group Real Estate Script (version 1.1 and earlier) where passwords are stored in cleartext. The root cause is insecure credential storage, enabling context-dependent attackers to obtain sensitive information. The connected documents confirm the existence of t...
CVE-2006-6818
CVE-2006-6818 affects AlstraSoft Web Host Directory. The vulnerability allows remote attackers to bypass authentication and change the admin password via a direct request to /admin/config. CVSS v2 base score 7.5 (HIGH) with network attack vector and no authentication required; impact includes par...