CVE-2019-7670

CVE-2019-7670 affects Prima Systems FlexAir (Versions 2.3.38 and earlier). The vulnerability is an OS command injection caused by improper neutralization of elements that could modify commands sent to downstream components. This could allow an attacker to execute commands on the operating system....

FreeBSD : phpmyadmin -- remote code inclusion and XSS scripting (17cb6ff3-7670-11e8-8854-6805ca0b3d42)

The phpMyAdmin development team reports : Summary XSS in Designer feature Description A Cross-Site Scripting vulnerability was found in the Designer feature, where an attacker can deliver a payload to a user through a specially crafted database name. Severity We consider this attack to be of...

CVE-2015-7670

CVE-2015-7670 : The WordPress Support Ticket System plugin (pre-1.2.1) is vulnerable to multiple SQL injections in includes/update.php via the (1) user and (2) id parameters. This allows remote attackers to execute arbitrary SQL commands and potentially access or modify tickets/users. The vulnera...

CVE-2017-7670

The Traffic Router component of the incubating Apache Traffic Control project is vulnerable to a Slowloris style Denial of Service attack. TCP connections made on the configured DNS port will remain in the ESTABLISHED state until the client explicitly closes the connection or Traffic Router is...

CVE-2017-7670

CVE-2017-7670 describes a Slowloris-style DoS affecting the Traffic Router component of Apache Traffic Control. The vulnerability occurs because TCP connections on the configured DNS port can stay in the ESTABLISHED state indefinitely. If enough connections remain open, they exhaust the thread po...

CVE-2016-7670

...

CVE-2016-7670

CVE-2016-7670 is rejected/not used per description; does not represent an active vulnerability entry.

WordPress Support Ticket System 1.2 SQL Injection Vulnerability

WordPress Support Ticket System plugin version 1.2 suffers from a remote SQL injection vulnerability. Vulnerability title: SQL Injection in Support Ticket System 1.2 WordPress plugin CVE: CVE-2015-7670 Vendor: Tim Dahlmanns Product: Support Ticket System Affected version: 1.2 Fixed version: 1.2.1...

CVE-2014-7670

The CVE pertains to The Motor Town: Machine Soul Free Android app (com.alawar.motortownfree) version 1.1. It does not verify X.509 certificates from SSL servers, allowing MITM attackers to spoof servers and obtain sensitive information with crafted certificates. Impact is described as partial con...

SuSE 10 Security Update : libpng (ZYPP Patch Number 7670)

This update of libpng fixes : - CVE-2008-6218: CVSS v2 Base Score: 7.1 AV:N/AC:M/Au:N/C:N/I:N/A:C: Resource Management Errors CWE-399 - CVE-2011-2690: CVSS v2 Base Score: 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P: Buffer Errors CWE-119 - CVE-2011-2692: CVSS v2 Base Score: 5.0 AV:N/AC:M/Au:N/C:N/I:N/A:P:...

Fedora 9 : R-2.7.2-1.fc9 / rpy-1.0.3-3.fc9 (2008-7670)

Update to R 2.7.2, also fixes security issue with unsafe temp directory handling in javareconf script. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...