CVE-2017-6847

The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

CVE-2017-6847

CVE-2017-6847 affects the PoDoFo library (PoDoFo 0.9.4) and is caused by a NULL pointer dereference in the DelayedLoad function of PdfVariant.h when processing crafted PDFs. Publicly referenced advisories in connected documents confirm the issue is fixed in subsequent PoDoFo updates (e.g., openSU...

CVE-2017-6847

The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

CVE-2017-6847

The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

CVE-2016-6847

Open-Xchange OX App Suite prior to 7.8.2-rev8 is affected by CVE-2016-6847. The issue allows an attacker to embed script-enabled SVG files used as mp3 album covers; if the SVG XML includes script code, it may execute when the related cover URL is accessed, enabling code execution in the user’s br...

CVE-2015-6847

The CVE-2015-6847 entry involves EMC VPLEX GeoSynchrony 5.4 SP1 prior to P3, where the default configuration stores cleartext NAVISPHERE GUI passwords in a log file. This exposes sensitive credentials to local users who can read the log, constituting a local information-disclosure vulnerability. ...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-6846, CVE-2014-6847. Reason: this ID was intended for one issue, but was assigned to two issues by a CNA. Notes: All CVE users should consult CVE-2014-6846 and CVE-2014-6847 to determine which ID is appropriate. All reference...

CVE-2014-6809

This CVE entry is rejected; it does not represent an active vulnerability.

CVE-2014-6847

CVE-2014-6847 corresponds to the Android app Horoscopes and Dreams (com.horoscopesanddreams) version 1.0.1, which does not verify X.509 certificates when making SSL connections. The root cause is missing SSL certificate validation, allowing man-in-the-middle attackers to spoof servers and exfiltr...

Tridium Niagara AX Detection

Binary data 6847.prm...

CVE-2008-6847

CVE-2008-6847 describes a cross-site scripting (XSS) vulnerability in the Pre ASP Job Board, specifically in the login flow at Employee/emp_login.asp. The issue arises from the msg parameter, allowing remote attackers to inject arbitrary web script or HTML. According to the NVD metrics, the base ...

CVE-2008-6847

Cross-site scripting XSS vulnerability in Employee/emplogin.asp in Pre ASP Job Board allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

CVE-2008-6847

creationtimestamp| type| source ---|---|--- 2008-12-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32630...

CVE-2006-6847

CVE-2006-6847 affects RealNetworks RealPlayer 10.5 via an ActiveX control (ierpplug.dll). The vulnerability allows a remote attacker to cause a denial of service (Internet Explorer 7 crash) by invoking RealPlayer.OpenURLInPlayerBrowser with a long second argument. Exploitation details are not pro...