Zimbra Collaboration Suite 8.7.11_GA_1854 Cross Site Scripting

------------------------------------------------------------------------ Cross-Site Scripting vulnerability in Zimbra Collaboration Suite due to the way it handles attachment links ------------------------------------------------------------------------ Stephan Kaag, January 2018...

CVE-2015-6882

...

CVE-2015-6882

CVE-2015-6882 is rejected/not used and does not represent an active vulnerability entry.

CVE-2016-6882

MatrixSSL before 3.8.7, when the DHERSA based cipher suite is supported, makes it easier for remote attackers to obtain RSA private key information by conducting a Lenstra side-channel attack...

CVE-2016-6882

CVE-2016-6882 concerns MatrixSSL prior to 3.8.7. When DHE_RSA cipher suites are enabled, remote attackers may exploit a Lenstra side-channel to glean RSA private key information. The vulnerability is limited to affected builds of MatrixSSL and is primarily an information-leak risk to private RSA ...

CVE-2014-6882

The CVE-2014-6882 entry concerns the Android app for Western Federal Credit Union (version 2.1), which does not verify X.509 certificates when connecting to SSL servers. This creates a risk of man-in-the-middle attacks, potentially allowing a crafted certificate to spoof the server and expose sen...

CVE-2013-6882

Affected product: CRU Ditto Forensic FieldStation (firmware 2013Oct15a and earlier). Vulnerabilities documented: Multiple cross-site scripting (XSS) vulnerabilities via the username parameter during login and via unspecified form fields for authenticated users. In addition, related exploit materi...

Ditto Forensic FieldStation 2013Oct15a - Multiple Vulnerabilities

Title: Ditto Forensic FieldStation, multiple vulnerabilities Versions affected: = 2013Oct15a all Vendor: CRU Wiebetech Discovered by: Martin Wundram Email: [email protected] Date found: 2013-04-22 Date published: 2013-12-12 Status: partially patched 0 ======== Introduction / Background / Impac...

SuSE 10 Security Update : gimp (ZYPP Patch Number 6882)

Integer overflows in the BMP and PSD plug-ins potentially allowed attackers to execute arbitrary code on the victim's system by tricking the victim to open specially crafted files. - CVE-2009-3909: CVSS v2 Base Score: 4.3 moderate AV:N/AC:M/Au:N/C:N/I:N/A:P: Numeric Errors. CWE-189. CVE-2009-1570...

CVE-2008-6882

Live Chat comlivechat component 1.0 for Joomla! allows remote attackers to use the xmlhttp.php script as an open HTTP proxy to hide network scanning activities or scan internal networks via a GET request with a full URL in the query string...

CVE-2008-6882

Live Chat comlivechat component 1.0 for Joomla! allows remote attackers to use the xmlhttp.php script as an open HTTP proxy to hide network scanning activities or scan internal networks via a GET request with a full URL in the query string...

CVE-2008-6882

creationtimestamp| type| source ---|---|--- 2008-12-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7441...

CVE-2006-6882

Technical details for CVE-2006-6882 are not publicly available in the provided documents. No affected products, versions, or remediation are disclosed here. Monitor for updates from official advisories.