USN-3625-1: Perl vulnerabilities

It was discovered that Perl incorrectly handled certain regular expressions. An attacker could possibly use this issue to cause Perl to hang, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS. CVE-2015-8853 It was discovered that Perl incorrectly loaded libraries from th...

Debian DSA-4172-1 : perl - security update

Multiple vulnerabilities were discovered in the implementation of the Perl programming language. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2018-6797 Brian Carpenter reported that a crafted regular expression could cause a heap buffer write overflow...

[SECURITY] [DLA 1345-1] perl security update

Package : perl Version : 5.14.2-21+deb7u6 CVE ID : CVE-2018-6913 GwanYeong Kim reported that pack could cause a heap buffer write overflow with a large item count. For Debian 7 "Wheezy", these problems have been fixed in version 5.14.2-21+deb7u6. We recommend that you upgrade your perl packages...

[SECURITY] [DSA 4172-1] perl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4172-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 14, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4172-1] perl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4172-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 14, 2018 https://www.debian.org/security/faq -...

CVE-2018-6913

Heap-based buffer overflow in the pack function in Perl before 5.26.2 allows context-dependent attackers to execute arbitrary code via a large item count...

perl -- multiple vulnerabilities

perldelta: CVE-2018-6797: heap-buffer-overflow WRITE of size 1 in Sregatom regcomp.c A crafted regular expression could cause a heap buffer write overflow, with control over the bytes written. perl 132227 CVE-2018-6798: Heap-buffer-overflow in Perlbytedumpstring utf8.c Matching a crafted locale...

Debian: Security Advisory (DSA-4172-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-6913

CVE-2016-6913 affects AlienVault OSSIM/USM prior to 5.3. The vulnerability is a DOM-based Cross‑Site Scripting (XSS) that lets an attacker inject arbitrary script or HTML via the back parameter to ossim/conf/reload.php. Public‑facing details in the provided documents confirm the affected product/...

CVE-2016-6913

creationtimestamp| type| source ---|---|--- 2016-08-25 00:20:52+00:00| published-proof-of-concept| https://t.me/FullDisclosure/12...

AlienVault USM/OSSIM 5.2 Cross Site Scripting

RCE Security Advisory https://www.rcesecurity.com 1. ADVISORY INFORMATION ======================= Product: AlienVault USM/OSSIM Vendor URL: www.alienvault.com Type: Cross-Site Scripting CWE-79 Date found: 2016-05-24 Date published: 2016-08-23 CVSSv3 Score: 5.4...

CVE-2015-6913

Affected product: Synology Download Station. Vulnerability: Cross-site scripting (XSS) in theCreate download task via URL feature. Component/entry point: add_url_task action to dlm/downloadman.cgi. Version range: vulnerable prior to 3.5-2967. Root cause/impact: attacker can inject arbitrary web s...

CVE-2015-6913

Cross-site scripting XSS vulnerability in the "Create download task via URL" feature in Synology Download Station before 3.5-2967 allows remote attackers to inject arbitrary web script or HTML via the urls parameter in an addurltask action to dlm/downloadman.cgi...

CVE-2014-6913

CVE-2014-6913 affects the Android app Dive The World (package com.paperton.wl.divetheworld) version 1.53. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and exfiltrate sensitive information via a crafted...

CVE-2013-6913

CVE-2013-6913 affects Cybozu Garoon (groupware) with a vulnerability in the search component that enables cross-site scripting (XSS) when using Internet Explorer. The issue targets Garoon versions before 3.7.2 and can be triggered by remote authenticated users via unspecified vectors, potentially...

Honeywell Device Detection

Binary data 6913.prm...

CVE-2008-6913

creationtimestamp| type| source ---|---|--- 2008-11-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7062...

CVE-2008-6246

creationtimestamp| type| source ---|---|--- 2008-10-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6913...

phpMyFAQ < 1.6.8 Multiple SQL Injection Vulnerabilities

The version of phpMyFAQ on the remote host does not properly validate input to the 'uin' parameter of several scripts before using it in database queries. An unauthenticated, remote attacker may be able to leverage these issues to launch SQL injection attacks against the affected application, eve...

CVE-2006-6913

CVE-2006-6913 affects phpMyFAQ 1.6.7 and earlier. An unspecified vulnerability allows remote attackers to upload arbitrary PHP scripts via unspecified vectors. Multiple reports reference this entry and describe the ability to upload executable files, but the exact vectors, affected components, an...