CVE-2017-6001

Race condition in kernel/events/core.c in the Linux kernel before 4.9.7 allows local users to gain privileges via a crafted application that makes concurrent perfeventopen system calls for moving a software group into a hardware context. NOTE: this vulnerability exists because of an incomplete fi...

CVE-2017-6001

CVE-2017-6001 is a Linux kernel race condition in the perf_events subsystem. The initial description notes a race between concurrent perf_event_open calls for moving a software group into a hardware context, allowing local privilege escalation and tied to an incomplete fix for CVE-2016-6786. Conn...

CVE-2017-6001

Race condition in kernel/events/core.c in the Linux kernel before 4.9.7 allows local users to gain privileges via a crafted application that makes concurrent perfeventopen system calls for moving a software group into a hardware context. NOTE: this vulnerability exists because of an incomplete fi...

CVE-2016-6001

IBM Forms Experience Builder could be susceptible to a server-side request forgery SSRF from the application design interface allowing for some information disclosure of internal resources...

CVE-2016-6001

IBM Forms Experience Builder is affected by CVE-2016-6001 (SSRF) in versions 8.5, 8.5.1, and 8.6. The vulnerability arises from server-side requests initiated from the application design interface, allowing information disclosure of internal resources. Remediation is available: upgrade to IBM For...

CVE-2014-6001

CVE-2014-6001 affects the Android gewara (com.gewara) app version 5.2.3, where the code does not verify X.509 certificates from SSL servers. This root cause allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The entry notes a moderate i...

CVE-2013-6001

SQL injection vulnerability in the Space function in Cybozu Garoon before 3.7 SP1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-6001

Cybozu Garoon CVE-2013-6001 affects the Space function in Cybozu Garoon 3.7 and earlier. The vulnerability is an SQL injection that can be exploited by a user who can log in and is authenticated, allowing arbitrary SQL commands to be executed in the product’s database via unspecified vectors. Rem...

CVE-2008-6001

The CVE-2008-6001 entry applies to ADN Forum before or at version 1.0b. A flaw in index.php lets remote attackers bypass authentication and obtain sysop privileges by manipulating a fpusuario cookie constructed with an initial sysop: string, a user-supplied password field, and a trailing :sysop:0...

CVE-2008-6001

creationtimestamp| type| source ---|---|--- 2008-09-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6557...

CVE-2007-6001

Multiple cross-site scripting XSS vulnerabilities in index.php in Bandersnatch 0.4 allow remote attackers to inject arbitrary web script or HTML via the 1 func or 2 date parameter, or the jid parameter in a 3 log or 4 user action, a different vulnerability than CVE-2007-3910...

CVE-2007-6001

CVE-2007-6001 concerns Bandersnatch 0.4. The connected documents confirm multiple cross-site scripting (XSS) vulnerabilities in index.php, exploitable via parameters (func, date, jid) in actions (log, user). Root cause is improper handling of user-supplied input leading to script/HTML injection. ...