CVE-2020-6963

GE Healthcare GECARE/CSCS/CIC/ApexPro Telemetry Server and related components (ApexPro Telemetry Server 4.2 and prior; CARESCAPE Telemetry Server 4.2 and prior; CIC 4.X/5.X; CSCS 1.X, 2.X; B450/B650/B850 monitors) are affected by CVE-2020-6963 alongside a family of vulnerabilities (CVE-2020-6961/...

CVE-2020-6963

In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center CIC Versions 4.X and 5.X, CARESCAPE Central Station CSCS Versions 1.X, the affected products utilized hard coded SMB credentials, which may allow an attacker to remotely execut...

CVE-2019-6963

A heap-based buffer overflow exists in cosa_dhcpv4_dml.c of the RDK RDKB-20181217-1 CcspPandM module. The issue could allow remote code execution when an attacker with login credentials crafts an oversized input in the Comment field of an IP reservation form in the admin panel, due to improper me...

CVE-2015-6963

...

CVE-2015-6963

CVE-2015-6963 entry is rejected/not used; this CVE ID does not correspond to an active vulnerability.

Design/Logic Flaw

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different...

Design/Logic Flaw

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different...

CVE-2016-6963

Technical details for CVE-2016-6963 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2016-6944

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different...

Adobe Acrobat and Reader Use-After-Free Code Execution (APSB16-33: CVE-2016-6961; CVE-2016-6962; CVE-2016-6963; CVE-2016-6964)

A remote code execution vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to a use-after-free error in Adobe Acrobat and Reader while handling a specially crafted PDF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially...

CVE-2014-6963

The CVE-2014-6963 entry concerns the feiron (aka es.sw.feironmobile.app) Android application, version 1.1. The root cause is that the app does not verify X.509 certificates from SSL servers, which allows a man-in-the-middle attacker to spoof servers and obtain sensitive information via a crafted ...

Cisco WebEx Training Center培训注册跨站脚本漏洞

Bugtraq ID:64277 CVE ID:CVE-2013-6963 Cisco WebEx Training Center是一款互动式培训解决方案，可开展电子教学。 Cisco WebEx Training Center培训中心注册页面不正确过滤用户提交的输入，允许远程攻击者利用漏洞构建恶意URI，诱使用户解析，可获取敏感信息或劫持用户会话。 0 Cisco WebEx Training Center 厂商补丁： Cisco ----- 用户可参考如下厂商提供的安全公告获得补丁信息：...

CVE-2013-6963

Cisco WebEx Training Center contains a cross-site scripting (XSS) vulnerability in the registration page (CVE-2013-6963). The issue stems from insufficient validation of user-supplied input, enabling an unauthenticated remote attacker to craft a malicious URL that, when a user follows it, may inj...

CVE-2008-6963

admin.php in TurnkeyForms Text Link Sales allows remote attackers to bypass authentication and gain administrative privileges via a direct request...

CVE-2008-6963

CVE-2008-6963 affects TurnkeyForms Text Link Sales (admin.php). The vulnerability allows remote attackers to bypass authentication and gain administrative privileges through a direct request. Documents describe the flaw and its impact but do not provide a patch version, workaround, or explicit re...

CVE-2008-6963

creationtimestamp| type| source ---|---|--- 2008-11-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7118...

CVE-2006-6963

CVE-2006-6963 affects Docebo LMS 3.0.3 and involves PHP remote file inclusions via the GLOBALS[where_lms] parameter in (1) class.module/class.definition.php and (2) modules/scorm/scorm_utils.php. Root cause is exploitation of PHP globals handling (register_globals context) enabling arbitrary PHP ...