Sophos SafeGuard Privilege Escalation Vulnerability - Windows

Sophos SafeGuard Client Products are prone to privilege escalation vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

CVE-2016-9279

CVE-2016-9279 describes a use-after-free vulnerability in the Samsung Exynos fimg2d driver used by Android on Exynos 5433, 54xx, and 7420 chipsets. The underlying issue is a use-after-free condition in the fimg2d driver that could allow a nearby attacker to obtain sensitive information via unspec...

CVE-2016-6853

Open-Xchange OX Guard (vulnerable: 2.4.2-rev5 and earlier) contains a cross-site scripting flaw where script code can be injected into PGP public key names. When a user later fetches the key via a specific URL, the injected script may execute in the user’s context, potentially leading to phishing...

CVE-2016-9279

Use-after-free vulnerability in the Samsung Exynos fimg2d driver for Android with Exynos 5433, 54xx, or 7420 chipsets allows attackers to obtain sensitive information via unspecified vectors. The Samsung ID is SVE-2016-6853...

Open-Xchange Guard 2.4.2 Cross Site Scripting

Product: OX Guard Vendor: OX Software GmbH Internal reference: 47878 Bug ID Vulnerability type: Cross Site Scripting CWE-80 Vulnerable version: 2.4.2 and earlier Vulnerable component: guard Report confidence: Confirmed Solution status: Fixed by Vendor Fixed version: 2.4.0-rev11, 2.4.2-rev5...

Open-Xchange Guard 2.4.2 - Multiple Cross-Site Scripting Vulnerabilities

Open-Xchange Guard 2.4.2 - Multiple Cross-Site Scripting Vulnerabilities Product: OX Guard Vendor: OX Software GmbH Internal reference: 47878 Bug ID Vulnerability type: Cross Site Scripting CWE-80 Vulnerable version: 2.4.2 and earlier Vulnerable component: guard Report confidence: Confirmed...

Open-Xchange Guard 2.4.2 - Multiple Cross Site Scripting

Exploit for linux platform in category web applications Product: OX Guard Vendor: OX Software GmbH Internal reference: 47878 Bug ID Vulnerability type: Cross Site Scripting CWE-80 Vulnerable version: 2.4.2 and earlier Vulnerable component: guard Report confidence: Confirmed Solution status: Fixed...

Open-Xchange Guard 2.4.2 - Multiple Cross-Site Scripting Vulnerabilities

Product: OX Guard Vendor: OX Software GmbH Internal reference: 47878 Bug ID Vulnerability type: Cross Site Scripting CWE-80 Vulnerable version: 2.4.2 and earlier Vulnerable component: guard Report confidence: Confirmed Solution status: Fixed by Vendor Fixed version: 2.4.0-rev11, 2.4.2-rev5...

CVE-2015-6853

Technical details about CVE-2015-6853 are not publicly provided in the supplied documents; sources largely reiterate the vulnerability exists and can cause DoS or information disclosure. Monitor for updates.

CVE-2014-6853

The CVE-2014-6853 entry affects the Foxit MobilePDF - PDF Reader (com.foxit.mobile.pdf.lite) Android app (version 2.2.0.0616) and is caused by failure to verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a cra...

CVE-2013-6853

Cross-site scripting XSS vulnerability in clickstream.js in Y! Toolbar plugin for FireFox 3.1.0.20130813024103 for Mac, and 2.5.9.2013418100420 for Windows, allows remote attackers to inject arbitrary web script or HTML via a crafted URL that is stored by the victim...

CVE-2013-6853

The CVE-2013-6853 entry describes a Cross-Site Scripting (XSS) vulnerability in the clickstream.js component of the Y! Toolbar Firefox plugin. Affected products are Y! Toolbar for Firefox on Mac (version 3.1.0.20130813024103) and Windows (version 2.5.9.2013418100420). The flaw allows remote attac...

CVE-2008-6853

The CVE describes an SQL injection in AIST NetCat 3.0 and 3.12, exploitable via the PollID parameter in modules/poll/index.php. The underlying issue allows remote attackers to execute arbitrary SQL commands, potentially impacting confidentiality, integrity, and availability (per CVSS base metrics...

CVE-2008-6853

creationtimestamp| type| source ---|---|--- 2008-12-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7611...

CVE-2006-6853

Durian Web Application Server 3.02 freeware on Windows is affected by a buffer overflow vulnerability. The issue allows remote code execution via a crafted packet containing a long string sent to TCP port 4002, leading to untrusted data being processed by the server. The CVE description specifies...