CVE-2015-6947

CVE-2015-6947 has been merged into CVE-2015-6946; connected documents confirm a Borland AccuRev Reprise License Manager service vulnerability with multiple stack-based buffer overflows affecting the activate_doit function via parameters (akey, actserver) or licfile, enabling remote code execution...

CVE-2015-6946

CVE-2015-6946 (Borland AccuRev Reprise License Manager) involves multiple stack-based buffer overflows in the service where remote attackers can execute arbitrary code via the activate_doit (akey, actserver) or service_startup_doit (licfile) parameters. Connected advisories (ZDI) describe stack o...

CVE-2014-6946

CVE-2014-6946 affects the Android app Re:kyu (aka com.appzone619) 1.0. The root cause is that the application does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Public sources in th...

PHP IDNA Convert 0.8.0 Cross Site Scripting

PHP IDNA Convert Cross-site scripting XSS Vendor product description PHP NetIDNA is a class to convert between the Punycode and Unicode formats. Punycode is a standard described in RFC 3492 and part of IDNA Internationalizing Domain Names in Applications RFC3490 . This class allows PHP scripts to...

Virtualizor < 2.3.1 Unspecified SQL Injection

Binary data 6946.prm...

SuSE 10 Security Update : Python (ZYPP Patch Number 6946)

This update of python has a copy of libxmlrpc that is vulnerable to denial of service bugs that can occur while processing malformed XML input. CVE-2009-2625: CVSS v2 Base Score: 5.0 moderate AV:N/AC:L/Au:N/C:N/I:N/A:P: Permissions, Privileges, and Access Control CWE-264 CVE-2009-3720: CVSS v2 Ba...

CVE-2008-6946

creationtimestamp| type| source ---|---|--- 2008-11-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7076...

CVE-2006-6946

CVE-2006-6946 affects NEC MultiWriter 1700C?built-in web server. The vulnerability is an authentication bypass allowing remote attackers to modify the device’s configuration via the web interface. Connected JVN entry confirms that unauthorized users could change the system configuration; no mitig...