1284 matches found
Android Skia Memory Corruption Vulnerability
Android is a cell phone operating system based on the Linux open kernel. A security vulnerability exists in Skia in versions prior to Android 5.1.1 LMY48Z and 6.0 2015-12-01, which can be exploited by remote attackers to execute arbitrary code or cause a denial of service memory corruption via a...
Android SystemUI Information Disclosure Vulnerability
Android is a cell phone operating system based on the Linux open kernel. SystemUI in versions prior to Android 5.1.1 LMY48Z, 6.0 2015-12-01 and 6.0 2015-12-01 has a security vulnerability in its implementation, which can be exploited by remote attackers to read screenshots and then elevate...
The vulnerability of the microprogramming software in Janitza UMG 508, 509, 511, 604, 605 power supply monitoring systems allows a intruder to authenticate as an arbitrary user.
The vulnerability of the Microprogramming Software in Janitza UMG 508, 509, 511, 604, 605 power supply monitoring systems is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to bypass authentication by acting as an arbitrary user...
Multiple Cross-Site Scripting Vulnerabilities in Cisco FireSIGHT Management Center
Cisco FireSIGHT Management Center is the United States Cisco Cisco company's set of support for centralized management of the use of FirePOWER Services Cisco ASA and Cisco FirePOWER network security equipment network security and operational functions of the management center software. Multiple...
ALPINE-CVE-2015-7697
Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service infinite loop via empty bzip2 data in a ZIP archive...
Android Arbitrary Code Execution Vulnerability (CNVD-2015-07369)
Android is a mobile operating system based on the Linux open kernel led and developed by Google and the Open Handset Alliance. An arbitrary code execution vulnerability exists in Android versions 5.x prior to 5.1.1 LMY48X and 6.0 prior to 2015. It allows remote attackers to execute arbitrary code...
Elasticsearch Directory Traversal Vulnerability
Elasticsearch is the Netherlands Elasticsearch company's set of open source distributed RESTful search engine built on Lucene , it is mainly used in cloud computing , and supports the use of JSON over HTTP for data indexing . A directory traversal vulnerability exists in Elasticsearch versions...
ALPINE-CVE-2014-9636
unzip 6.0 allows remote attackers to cause a denial of service out-of-bounds read or write and crash via an extra field with an uncompressed size smaller than the compressed field size in a zip archive that advertises STORED method compression...
CVE-2015-0436
Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 6.0 and 6.1 allows remote attackers to affect confidentiality via unknown vectors related to Login...
UBUNTU-CVE-2014-8139
Heap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command...
CVE-2014-2057
Multiple cross-site scripting XSS vulnerabilities in ownCloud before 6.0.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
UBUNTU-CVE-2013-7077
Cross-site scripting XSS vulnerability in the Backend User Administration Module in TYPO3 6.0.x before 6.0.12 and 6.1.x before 6.1.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2011-2958
Multiple cross-site scripting XSS vulnerabilities in Ecava IntegraXor before 3.60 Build 4080 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2009-1607
creationtimestamp| type| source ---|---|--- 2009-05-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8618...
CVE-2009-0450
creationtimestamp| type| source ---|---|--- 2009-02-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7975 2009-08-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9360...
WebPortal CMS 0.6.0 - index.php SQL Injection
WebPortal CMS 0.6.0 - index.php SQL Injection !/usr/bin/perl -w WebPortal CMS If we select an inesistent id of a mod, it'll try to include it. So we have a warning error with the hash!. use LWP::UserAgent; if @ARGV new or die "-LWP::UserAgent error.\n"; $b-agent'Mozilla/4.0 compatible; MSIE 7.0;...
PT-2007-3877 · Pfa · Pfa Cms
Name of the Vulnerable Software and Affected Versions: pfa CMS version 6.0 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the repinc parameter in the index.php file. However, it's noted that $repinc is set to a constant value before use, which disputes t...
CVE-2006-6222
Stack-based buffer overflow in the NetBackup bpcd daemon bpcd.exe in Symantec Veritas NetBackup 5.0 before 5.0MP7, 5.1 before 5.1MP6, and 6.0 before 6.0MP4 allows remote attackers to execute arbitrary code via a long request with a malformed length prefix...
PT-2004-1313 · Microsoft · Msn Messenger
Name of the Vulnerable Software and Affected Versions: Microsoft MSN Messenger versions 6.0 through 6.1 Description: The issue allows remote attackers to read arbitrary files due to improper handling of certain requests. Recommendations: For Microsoft MSN Messenger versions 6.0 through 6.1, at th...
