39 matches found
CVE-2019-6826
The CVE-2019-6826 entry concerns a CWE-426 Untrusted Search Path vulnerability in Schneider Electric SoMachine HVAC (v2.4.1 and earlier). The vulnerability arises when a malicious DLL library is loaded by the product, enabling arbitrary code execution on the system. Connected documents consistent...
CVE-2019-6826
A CWE-426: Untrusted Search Path vulnerability exists in SoMachine HVAC v2.4.1 and earlier versions, which could cause arbitrary code execution on the system running SoMachine HVAC when a malicious DLL library is loaded by the product...
Debian: Security Advisory (DLA-1611-2)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2018-6826
An issue was discovered on VOBOT CLOCK before 0.99.30 devices. Cleartext HTTP is used to download a breakout program, and therefore man-in-the-middle attackers can execute arbitrary code by watching for a local user to launch the Breakout Easter Egg feature, and then sending a crafted HTTP respon...
CVE-2018-6826
VULNERABILITY: VOBOT CLOCK devices before version 0.99.30 are affected by a remote code execution issue. The root cause is use of plaintext HTTP to download a breakout program, enabling a man-in-the-middle to observe a local user launching the Breakout Easter Egg feature and then send a crafted H...
CVE-2016-6826
CVE-2016-6826 affects Huawei AnyMail prior to 2.6.0301.0060. The issue is an improper input validation when opening compressed email attachments, enabling remote attackers to cause an application crash (denial of service). The available connected documents confirm the vulnerable component and the...
Security Advisory - Improper Input Validation Vulnerability in AnyMail
Huawei AnyMail has an improper input validation vulnerability when opening compressed email attachments. Successful exploit could cause AnyMail to crash and exit. Vulnerability ID: HWPSIRT-2016-06099 This vulnerability has been assigned Common Vulnerabilities and Exposures CVE ID: CVE-2016-6826...
CVE-2015-6826
The ffrv34decodeinitthreadcopy function in libavcodec/rv34.c in FFmpeg before 2.7.2 does not initialize certain structure members, which allows remote attackers to cause a denial of service invalid pointer access or possibly have unspecified other impact via crafted 1 RV30 or 2 RV40 RealVideo dat...
CVE-2015-6826
CVE-2015-6826 affects FFmpeg’s libavcodec/rv34.c: the function ff_rv34_decode_init_thread_copy does not initialize certain structure members, which can allow a remote attacker to trigger a denial of service (invalid pointer access) or other impact via crafted RealVideo data (RV30 or RV40). The vu...
CVE-2014-6826
The CVE-2014-6826 entry affects the Android app Tic-Tac To The MAX FREE (package com.tothemax) version 1.2, which does not verify X.509 certificates from SSL servers. Root cause: improper TLS certificate validation, enabling a man-in-the-middle to spoof servers and access sensitive information vi...
CVE-2013-6826
Fortinet FortiAnalyzer (pre-5.0.5) is affected by CVE-2013-6826 due to improper validation of the csrf_token parameter, enabling cross-site request forgery via multiple web UI scripts. The underlying issue is lack of CSRF protection in SYSAdminUserDialog paths, leading to potential session hijack...
CVE-2013-6826
cgi-bin/module//sysmanager/admin/SYSAdminUserDialog in Fortinet FortiAnalyzer before 5.0.5 does not properly validate the csrftoken parameter, which allows remote attackers to perform cross-site request forgery CSRF attacks...
CVE-2013-6826
creationtimestamp| type| source ---|---|--- 2013-10-12 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38824...
CVE-2008-6826
dhtml.pl in MHF Media Pro allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter, as demonstrated using the 1 adverttop.htm or 2 advertlogin.htm pages...
CVE-2008-6826
dhtml.pl in MHF Media Pro allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter, as demonstrated using the 1 adverttop.htm or 2 advertlogin.htm pages...
CVE-2008-6826
CVE-2008-6826 affects MHF Media Pro’s dhtml.pl. The vulnerability enables remote command execution via shell metacharacters in the page parameter, demonstrated on the advert_top.htm and advert_login.htm pages. The CVSSv2 base score is 10.0 (HIGH) with network access, low attack complexity, no aut...
CVE-2008-6826
creationtimestamp| type| source ---|---|--- 2008-10-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6845...
CVE-2006-6826
Technical details are not publicly provided in the supplied documents for CVE-2006-6826. Monitor for updates to see affected products, vulnerable components, impact, and remediation guidance.