CVE-2018-17685

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2018-17685

Foxit Reader 9.2.0.9297 is affected by CVE-2018-17685 due to a type confusion in PDF handling. The issue allows remote code execution when a user opens a malicious file or visits a malicious page, and requires user interaction. The vulnerability is confirmed across multiple sources (e.g., ZDI-18-...

WordPress 4.7.x < 4.7.3 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A cross-site scripting XSS vulnerability exists in the wpplaylistshortcode function within the /wp-includes/media.php script due to a failure to validate input passed via...

CVE-2017-1000070

The Bitly oauth2proxy in version 2.1 and earlier was affected by an open redirect vulnerability during the start and termination of the 2-legged OAuth flow. This issue was caused by improper input validation and a violation of RFC-6819...

CVE-2017-1000070

The Bitly oauth2proxy in version 2.1 and earlier was affected by an open redirect vulnerability during the start and termination of the 2-legged OAuth flow. This issue was caused by improper input validation and a violation of RFC-6819...

Open redirect

The Bitly oauth2proxy in version 2.1 and earlier was affected by an open redirect vulnerability during the start and termination of the 2-legged OAuth flow. This issue was caused by improper input validation and a violation of RFC-6819...

CVE-2017-1000070

CVE-2017-1000070 concerns the Bitly oauth2_proxy showing an open redirect vulnerability in versions up to 2.1 during the start and end of the 2-legged OAuth flow. The root cause cited is improper input validation violating RFC-6819, allowing an attacker to redirect users to arbitrary sites. The c...

CVE-2017-1000070

The Bitly oauth2proxy in version 2.1 and earlier was affected by an open redirect vulnerability during the start and termination of the 2-legged OAuth flow. This issue was caused by improper input validation and a violation of RFC-6819...

CVE-2015-6819

Multiple integer underflows in the ffmjpegdecodeframe function in libavcodec/mjpegdec.c in FFmpeg before 2.7.2 allow remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted MJPEG data...

DEBIAN-CVE-2015-6819

Multiple integer underflows in the ffmjpegdecodeframe function in libavcodec/mjpegdec.c in FFmpeg before 2.7.2 allow remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted MJPEG data...

CVE-2015-6819

FFmpeg vulnerability (CVE-2015-6819) in libavcodec/mjpegdec.c: ff_mjpeg_decode_frame suffers multiple integer underflows before 2.7.2, enabling remote attackers to cause a denial of service via crafted MJPEG data (out-of-bounds array access). Impact is a crash or unspecified effects; upgrade to F...

CVE-2014-6819

CVE-2014-6819 affects the Lapp Group Catalogue (com.prinovis.LappKabel) application for Android (version 1.4). The vulnerability is due to the app not verifying X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafte...

CVE-2013-6819

Cross-site scripting XSS vulnerability in Performance Provider in SAP NetWeaver allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6819

SAP NetWeaver CVE-2013-6819 is an XSS vulnerability in the Performance Provider component. The available documents identify the affected software as SAP NetWeaver and describe remote injection of arbitrary web script/HTML via unspecified vectors. No concrete root cause details, affected versions,...

CVE-2008-6819

win32k.sys in Microsoft Windows Server 2003 and Vista allows local users to cause a denial of service system crash via vectors related to CreateWindow, TranslateMessage, and DispatchMessage, possibly a race condition between threads, a different vulnerability than CVE-2008-1084. NOTE: some of the...

CVE-2008-6819

The provided data identifies CVE-2008-6819 as related to win32k.sys in Microsoft Windows Server 2003 and Windows Vista, enabling local users to cause a denial of service (system crash) through vectors tied to CreateWindow, TranslateMessage, and DispatchMessage, potentially via a race condition be...

CVE-2006-6819

creationtimestamp| type| source ---|---|--- 2008-11-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7116...

CVE-2008-6788

creationtimestamp| type| source ---|---|--- 2008-10-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6819 2008-10-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6820...

CVE-2006-6819

CVE-2006-6819 concerns AlstraSoft Web Host Directory, where sensitive information is stored under the web root due to insufficient access control. The vulnerability allows remote attackers to download a backup database by issuing a direct request to admin/backup/db. The public records indicate th...