CVE-2017-6906

SiberianCMS before 4.10.0 is vulnerable due to insufficient filtration of user-supplied data (log) passed to SiberianCMS-master/errors/500.php, allowing an attacker to execute arbitrary HTML/JavaScript in the context of the vulnerable website. This risk is documented with CVSS metrics (MEDIUM). N...

Ubuntu 14.04 LTS / 16.04 LTS : GD library vulnerabilities (USN-3213-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3213-1 advisory. Stefan Esser discovered that the GD library incorrectly handled memory when processing certain images. If a user or automated system were...

openSUSE Security Update : gd (openSUSE-2017-289)

This update for gd fixes the following security issues : - CVE-2016-6906: An out-of-bounds read in TGA decompression was fixed which could have lead to crashes. bsc1022553 - CVE-2016-6912: Double free vulnerability in the gdImageWebPtr function in the GD Graphics Library aka libgd allowed remote...

SUSE-SU-2017:0468-1 Security update for gd

This update for gd fixes the following security issues: - CVE-2016-6906: An out-of-bounds read in TGA decompression was fixed which could have lead to crashes. bsc1022553 - CVE-2016-6912: Double free vulnerability in the gdImageWebPtr function in the GD Graphics Library aka libgd allowed remote...

Debian DSA-3777-1 : libgd2 - security update

Multiple vulnerabilities have been discovered in libgd2, a library for programmatic graphics creation and manipulation, which may result in denial of service or potentially the execution of arbitrary code if a malformed file is processed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

[SECURITY] [DSA 3777-1] libgd2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3777-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 31, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3777-1] libgd2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3777-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 31, 2017 https://www.debian.org/security/faq -...

CVE-2016-6906

The readimagetga function in gdtga.c in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA file, related to the decompression buffer...

Integer overflow

Integer overflow in SystemUI in KK4.4 and L5.0/5.1 on Samsung Note devices allows attackers to cause a denial of service UI restart via vectors involving APIs and an activity that computes an out-of-bounds array index, aka SVE-2016-6906...

CVE-2014-6906

The CVE-2014-6906 entry concerns the Android app Loli Chocolate Cake (com.alison.kang.chocolatecake) 1.0.0, which does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. According to ...

CVE-2013-6906

CVE-2013-6906 affects Cybozu Garoon prior to version 3.7.0, specifically a XSS vulnerability in the mail component when using Internet Explorer 6–8. An attacker could inject arbitrary script/HTML via unspecified vectors, potentially compromising user sessions or browser security. The connected JV...

HAProxy 'tcp-request content' Buffer Overflow Vulnerability

Binary data 6906.prm...

CVE-2008-6906

CVE-2008-6906 describes a cross-site scripting (XSS) vulnerability in BabbleBoard 1.1.6, specifically in the index.php file where an attacker can inject arbitrary web script or HTML via the username parameter. The issue is categorized with a low‑to‑moderate impact (CVSSv2 base score 4.3, MEDIUM) ...

CVE-2008-6906

Cross-site scripting XSS vulnerability in index.php in BabbleBoard 1.1.6 allows remote attackers to inject arbitrary web script or HTML via the username...

CVE-2008-6781

creationtimestamp| type| source ---|---|--- 2008-10-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6894 2008-10-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6906...

CVE-2006-6906

Technical details for CVE-2006-6906 are not publicly available in the provided documents. Monitor for updates; no specific affected product/version, vulnerability type, impact, or remediation can be confirmed from these sources.