CVE-2018-14299

CVE-2018-14299 affects Foxit Reader prior to 9.2.0.9097, due to a Line annotations processing flaw that allows use-after-free; remote code execution is possible with attacker-controlled document elements and user interaction. Exploitation is described in multiple advisories (ZDI-18-759, CNVD-2018...

CVE-2015-6215

CVE-2015-6215 is rejected; this CVE ID does not represent an active vulnerability entry.

CVE-2012-6215

CVE-2012-6215 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2015-6215

...

CVE-2015-4186

The diagnostics subsystem in the administrative web interface on Cisco Virtualization Experience aka VXC Client 6215 devices with firmware 11.227.4 allows local users to gain privileges for OS command execution via a crafted option value, aka Bug ID CSCug54412...

Input validation

The diagnostics subsystem in the administrative web interface on Cisco Virtualization Experience aka VXC Client 6215 devices with firmware 11.227.4 allows local users to gain privileges for OS command execution via a crafted option value, aka Bug ID CSCug54412...

CVE-2015-4186

The CVE affects Cisco Virtualization Experience Client 6215 devices running firmware 11.2(27.4). The diagnostics subsystem of the administrative web interface does not properly sanitize input passed to a diagnostics option, enabling an authenticated, local attacker to execute arbitrary OS command...

CVE-2015-4186

The diagnostics subsystem in the administrative web interface on Cisco Virtualization Experience aka VXC Client 6215 devices with firmware 11.227.4 allows local users to gain privileges for OS command execution via a crafted option value, aka Bug ID CSCug54412...

Cisco Virtualization Experience Client 6215 Devices Command Injection Vulnerability

A vulnerability in the diagnostics portion of the administrative web interface of Cisco Virtualization Experience VXC Client 6215 devices could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system with elevated privileges. The vulnerability is du...

CVE-2014-6215

Cross-site scripting XSS vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 before 7.0.0.2 CF29, 8.0.0 through 8.0.0.1 CF14, and 8.5.0 before CF03 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

CVE-2013-6215

HP Universal Configuration Management Database (CMDB) Integration Service vulnerability CVE-2013-6215 affects Integration Service components in HP UCMDB v10.01 and v10.10. The issue allows remote code execution via unknown vectors, reported as ZDI-CAN-1977. HP has provided patches to resolve the ...

Fedora Update for mozvoikko FEDORA-2011-6215

Check for the Version of mozvoikko OpenVAS Vulnerability Test Fedora Update for mozvoikko FEDORA-2011-6215 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

CVE-2008-6215

Cross-site scripting XSS vulnerability in cadenaofertasext.php in Venalsur Booking Centre Booking System for Hotels Group allows remote attackers to inject arbitrary web script or HTML via the OfertaID parameter...

CVE-2008-6215

CVE-2008-6215 is an XSS vulnerability in the PHP file cadena_ofertas_ext.php of the Venalsur Booking Centre Booking System for Hotels Group. The issue allows remote attackers to inject arbitrary web script or HTML through the OfertaID parameter. The NVD entry lists a CVSS v2 base score of 4.3 (ME...

CVE-2008-6215

creationtimestamp| type| source ---|---|--- 2008-10-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6876...

CVE-2008-4428

creationtimestamp| type| source ---|---|--- 2008-08-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6215 2008-08-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6231 2009-02-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8105...

CVE-2007-6215

CVE-2007-6215 involves Web-MeetMe 3.0.3, where the PHP script play.php is vulnerable to directory traversal via user-supplied inputs in the roomNo and possibly bookid parameters. This can allow remote attackers to read arbitrary files on the server, exposing partial confidentiality (per the cited...

CVE-2006-6215

CVE-2006-6215 affects Wallpaper Website (Wallpaper Complete Website) versions 1.0.09 and earlier. The vulnerability is Multiple SQL injection flaws in process.php (login or password parameters) and in dlwallpaper.php (wallpaperid parameter) that allow remote attackers to execute arbitrary SQL com...