CVE-2014-6910

The MemorizeIt! Android app (package com.kshinenterprises.kshinent.memorizeit) version 1.7.2 does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Root cause: failure to verify TLS cer...

CVE-2013-6910

CVE-2013-6910 is a cross-site scripting (XSS) vulnerability in Cybozu Garoon’s Ajax components prior to 3.7.0. The issue allows remote attackers to inject arbitrary script/HTML via unspecified vectors, potentially executing in a user’s browser. Affected product/version details are supported by mu...

Cooper Power Systems Device Detection

Binary data 6910.prm...

CVE-2008-6910

Services 5.x before 5.x-0.92 and 6.x before 6.x-0.13, a module for Drupal, does not use timeouts for signed requests, which allows remote attackers to impersonate other users and gain privileges via a replay attack that sends the same request...

CVE-2008-6910

CVE-2008-6910 affects Drupal modules (Services 5.x up to 5.x-0.91/0.92 and 6.x up to 6.x-0.13). The root cause is that signed requests do not implement timeouts, enabling a replay attack that can impersonate other users and escalate privileges. Exposed components: the Drupal Services module on af...

CVE-2006-6910

Analysis of CVE-2006-6910 (Fersch Formbankserver 1.9) shows that formbankcgi.exe is vulnerable when PATH_INFO begins with Abfrage. The vulnerability allows remote attackers to cause a denial of service (daemon crash) by sending multiple requests containing many /../ sequences in the Name paramete...