42 matches found
CVE-2023-6907
creationtimestamp| type| source ---|---|--- 2024-01-12 07:02:01+00:00| seen| https://t.me/ctinow/167094...
CVE-2023-6907 codelyfe Stupid Simple CMS Deletion Interface delete.php improper authentication
A vulnerability has been found in codelyfe Stupid Simple CMS up to 1.2.4 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /file-manager/delete.php of the component Deletion Interface. The manipulation of the argument file leads to improper...
CVE-2023-6907
The CVE-2023-6907 entry concerns codelyfe Stupid Simple CMS (versions up to 1.2.4). The vulnerability affects the Deletion Interface’s file-manager delete.php, where manipulation of the file parameter leads to improper authentication. Public exploit details exist, indicating potential exploitatio...
CVE-2016-6907
CVE-2016-6907 affects F5 BIG-IP TMM SSL/TLS virtual servers using CBC ciphers, enabling a Vaudenay timing/padding oracle attack to potentially reveal plaintext. vulnerable platforms include BIG-IP on Cavium Nitrox with CBC ciphers (not AES-GCM or RC4); also impacts BIG-IP VE/cloud and specific ha...
K39508724: TMM SSL/TLS virtual server vulnerability CVE-2016-6907
Security Advisory Description TMM SSL/TLS virtual server using CBC cipher may be vulnerable to a "Vaudenay timing attack" aka 'Padding oracle attack.' CVE-2016-6907 The BIG-IP system may be vulnerable to a padding oracle attack on the following platforms: The VIPRION B4450 blade and BIG-IP 2000 a...
CVE-2020-6907
CVE-2020-6907 is rejected/not used per the Initial Description.
CVE-2015-6907
CVE-2015-6907 is rejected/not used per initial description.
CVE-2018-6907
A Cross Site Request Forgery CSRF vulnerability in the Green Electronics RainMachine Mini-8 2nd Generation and Touch HD 12 web application allows an attacker to control the RainMachine device via the REST API...
CVE-2018-6907
The CVE-2018-6907 entry describes a CSRF vulnerability in Green Electronics RainMachine Mini-8 (2nd Generation) and Touch HD 12 web application that could allow an attacker to control the RainMachine device via its REST API. Documents consistently identify the affected components as the RainMachi...
CVE-2017-6907
An issue was discovered in Open.GL before 2017-03-13. The vulnerability exists due to insufficient filtration of user-supplied data content passed to the "Open.GL-master/index.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website...
CVE-2017-6907
CVE-2017-6907 affects the Open.GL project (before 2017-03-13). The vulnerability arises from insufficient filtration of user-supplied data (content) passed to the Open.GL-master/index.php URL, allowing an attacker to execute arbitrary HTML and script code in the browser context of the vulnerable ...
F5 BIG-IP - TMM SSL/TLS virtual server vulnerability CVE-2016-6907
TMM SSL/TLS virtual server using CBC cipher may be vulnerable to a SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/h:f5:big-ip"; if...
F5 Networks BIG-IP : TMM SSL/TLS virtual server vulnerability (K39508724)
TMM SSL/TLS virtual server using CBC cipher may be vulnerable to a 'Vaudenay timing attack' aka 'Padding oracle attack.'CVE-2016-6907 The BIG-IP system may be vulnerable to a padding oracle attack on the following platforms : The VIPRION B4450 blade and BIG-IP 2000 and 4000 series platforms are...
Fedora Update for mingw-libtiff FEDORA-2015-6907
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2014-6907
The CVE-2014-6907 entry covers the Rakuten Install (co.jp.rakuten.installapp) Android app v1.5.0, which does not verify X.509 certificates from SSL servers. This root cause enables man-in-the-middle attackers to spoof servers and exfiltrate sensitive information via a crafted certificate. Public ...
CVE-2013-6907
CVE-2013-6907 is a cross-site scripting (XSS) vulnerability in the Cybozu Garoon mail component affecting Garoon 2.x and 3.x prior to 3.7.0. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, potentially enabling script execution in an affected user’...
2532|Gigs <= 1.2.2 Multiple Vulnerabilities - Active Check
2532-Gigs is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:2532gigs:2532gigs"; ifdescription...
CVE-2008-6907
CVE-2008-6907 affects 2532designs/2532|Gigs 1.2.2 Stable. Vulnerable component: checkuser.php; issue arises when magic_quotes_gpc is disabled. Attackers can manipulate the (1) username and (2) password parameters via the login form (index.php) to cause SQL injection. OpenVAS entries describe thes...