98 matches found
CVE-2016-6892
The x509FreeExtensions function in MatrixSSL before 3.8.6 allows remote attackers to cause a denial of service free of unallocated memory via a crafted X.509 certificate...
CVE-2016-6892
MatrixSSL 3.8.5 and earlier contains a denial-of-service issue (CVE-2016-6892) in the x509FreeExtensions function, where processing a crafted X.509 certificate can cause a free operation on unallocated memory. Affected component: MatrixSSL under versions
FreeBSD : websvn -- information disclosure (f69e1f09-e39b-11e5-9f77-5453ed2e2b49)
Thijs Kinkhorst reports : James Clawson reported : 'Arbitrary files with a known path can be accessed in websvn by committing a symlink to a repository and then downloading the file using the download link. An attacker must have write access to the repo, and the download option must have been...
Fedora Update for testdisk FEDORA-2015-6892
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for websvn FEDORA-2015-1465
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for websvn FEDORA-2015-1439
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 20 : websvn-2.3.3-8.fc20 (2015-1439)
Security fix for CVE-2013-6892 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...
[SECURITY] [DLA 136-1] websvn security update
Package : websvn Version : 2.3.3-1+deb6u1 CVE ID : CVE-2013-6892 Debian Bug : 775682 James Clawson discovered that websvn, a web viewer for Subversion repositories, would follow symlinks in a repository when presenting a file for download. An attacker with repository write access could thereby...
[SECURITY] [DSA 3137-1] websvn security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3137-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst January 24, 2015 http://www.debian.org/security/faq -...
CVE-2013-6892
CVE-2013-6892 affects WebSVN 2.3.3. Affected component is the websvn web viewer for Subversion repositories; the root cause is a symlink handling issue that allows a remote authenticated user to read arbitrary files by exploiting a symlink during commit/download. Practical impact: an attacker wit...
CVE-2014-6892
The CVE-2014-6892 entry concerns the kalahari.com Shopping Android app (com.kalahari.shop), version 1.4.2.1. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and potentially obtain sensitive data through c...
Fedora Update for mingw-libpng FEDORA-2014-6892
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Lantronix Device Detection
Binary data 6892.prm...
CVE-2008-6892
The provided data confirms a SQL injection vulnerability in Peel 3.1 (CVE-2008-6892), specifically in lire/index.php via the rubid parameter. Root cause: unsafely constructed SQL in this parameter may allow remote attackers to execute arbitrary SQL commands. The entry notes a possible link to CVE...
CVE-2008-6892
creationtimestamp| type| source ---|---|--- 2008-12-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7395...
CVE-2008-6864
creationtimestamp| type| source ---|---|--- 2008-10-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6892...
CVE-2006-6892
The CVE-2006-6892 entry concerns OvBB 0.13a (Jonathon J. Freeman) with an XSS flaw in GetLocation() in online.php. The issue allows remote attackers to inject arbitrary script/HTML via the aRequest parameter, enabling client-side impact on affected pages. The vulnerability is caused by improper h...