CVE-2018-7206

An issue was discovered in Project Jupyter JupyterHub OAuthenticator 0.6.x before 0.6.2 and 0.7.x before 0.7.3. When using JupyterHub with GitLab group whitelisting for access control, group membership was not checked correctly, allowing members not in the whitelisted groups to create accounts on...

CVE-2018-7206

The CVE relates to JupyterHub OAuthenticator in Project Jupyter JupyterHub, where GitLab group whitelisting was not enforced correctly. Affected versions are OAuthenticator 0.6.x before 0.6.2 and 0.7.x before 0.7.3. The flaw could let whitelisted-group members fail to be required for account crea...

CVE-2015-7206

...

CVE-2015-7206

CVE-2015-7206 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2017-7206

The ffh2645extractrbsp function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service heap-based buffer over-read or obtain sensitive information from process memory via a crafted h264 video file...

CVE-2017-7206

The CVE-2017-7206 issue affects libavcodec (libav) 9.21, specifically the ff_h2645_extract_rbsp function. A crafted H.264 video file can trigger a heap-based buffer over-read, leading to a denial of service and potential leakage of memory content. Documented impact scores in NVD show CVSS-2/3 bas...

Information disclosure

Cross-site scripting XSS vulnerability in Microsoft Edge allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Microsoft Edge Information Disclosure Vulnerability," a different vulnerability than CVE-2016-7206...

CVE-2016-7206

CVE-2016-7206 : The provided connected documents indicate a cross-site scripting (XSS) vulnerability in Microsoft Edge described as allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors (information disclosure/partial integrity impact). The core affected product...

Microsoft Edge CVE-2016-7206 Information Disclosure Vulnerability

Description Microsoft Edge is prone to an information disclosure vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Successful exploits will allow attackers to run arbitrary code and obtain sensitive information that may aid in...

CVE-2014-7206

The changelog command in Apt before 1.0.9.2 allows local users to write to arbitrary files via a symlink attack on the changelog file...

CVE-2014-7206

CVE-2014-7206 affects apt’s changelog retrieval: the changelog functionality before version 1.0.9.2 allows local users to overwrite arbitrary files via a symlink-based race. Vulnerable: apt, prior to 1.0.9.2. Root cause: insecure creation/use of temporary files during changelog access. Impact: lo...

[SECURITY] [DSA 3048-1] apt security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3048-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst October 08, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3048-1] apt security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3048-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst October 08, 2014 http://www.debian.org/security/faq -...

CVE-2014-7206

The changelog command in Apt before 1.0.9.2 allows local users to write to arbitrary files via a symlink attack on the changelog file...

CVE-2008-7206

ELOG (Electronic Logbook)

CVE-2008-7206

Unspecified vulnerability in Electronic Logbook ELOG before 2.7.2 has unknown impact and attack vectors when the "logbook contains HTML code," probably cross-site scripting XSS...

CVE-2006-7206

CVE-2006-7206 affects Microsoft Internet Explorer 6 on Windows XP SP2. It describes a denial-of-service crash caused by creating an ADODB.Recordset object and issuing a sequence of NextRecordset calls with a long string argument, leading to an invalid memory access in SysFreeString. The provided ...