48 matches found
CVE-2019-6268
RAD SecFlow-2 devices with Hardware 0202, Firmware 4.1.01.63, and U-Boot 2010.12 allow URIs beginning with /.. for Directory Traversal, as demonstrated by reading /etc/shadow...
RAD SecFlow-2 Path Traversal Vulnerability
RAD SecFlow-2 devices with Hardware 0202, Firmware 4.1.01.63, and U-Boot 2010.12 suffer from a directory traversal vulnerability. Exploit Title: Path traversal in RAD SecFlow-2 devices with Firmware 4.1.01.63 CVE: CVE-2019-6268 Exploit Author: Branko Milicevic RAD SecFlow-2 devices with Hardware...
RAD SecFlow-2 Path Traversal
Exploit Title: Path traversal in RAD SecFlow-2 devices with Firmware 4.1.01.63 Date: 3/2024 CVE: CVE-2019-6268 Exploit Author: Branko Milicevic RAD SecFlow-2 devices with Hardware 0202, Firmware 4.1.01.63, and U-Boot 2010.12 allow URIs beginning with /.. for Directory Traversal, as demonstrated b...
CVE-2023-6268
creationtimestamp| type| source ---|---|--- 2023-12-26 20:27:00+00:00| seen| https://t.me/ctinow/159447 2024-01-04 08:16:41+00:00| seen| https://t.me/ctinow/162827...
CVE-2023-6268
The JSON Content Importer WordPress plugin before 1.5.4 does not sanitise and escape the tab parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
CVE-2023-6268
The CVE-2023-6268 entry concerns the JSON Content Importer WordPress plugin prior to 1.5.4. Affected component: the tab parameter is not sanitized/escaped before being echoed in the page, causing a Reflected Cross-Site Scripting vulnerability. Impact described across sources as exploitable agains...
CVE-2023-6268 JSON Content Importer < 1.5.4 - Reflected XSS
The JSON Content Importer WordPress plugin before 1.5.4 does not sanitise and escape the tab parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
RHEL 9 : squid (RHSA-2023:6268)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:6268 advisory. Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fixes: SQUID-2023:...
Ubuntu: Security Advisory (USN-6268-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 20.04 LTS / 22.04 LTS / 23.04 : GStreamer Base Plugins vulnerabilities (USN-6268-1)
The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6268-1 advisory. It was discovered that GStreamer Base Plugins incorrectly handled certain FLAC image tags. A remote attacker could use this issue to...
CVE-2020-6268
CVE-2020-6268 affects SAP ERP EA-FINSERV versions 600–618, 800 and S4CORE versions 101–104. The issue is a Missing Authorization Check where an authenticated user can view and tamper with certain restricted data due to insufficient authorization validation. The CVE entry provides a high-level imp...
CVE-2018-6268
CVE-2018-6268 affects NVIDIA Tegra libnvmmlite_video.so, where a use-after-free can cause DoS or privilege escalation. Connected NVIDIA bulletins tie this to Jetson TX1/TX2 Linux for Tegra (L4T) and list R28.3 as the updated release to address multiple related flaws, including 2018-6268. Affected...
NVIDIA Graphics Driver Multiple Vulnerabilities (including fixes for Intel Speculative Side Channel Vulnerabilities) - US
Lenovo Security Advisory: LEN-16730 Potential Impact: Denial of service, possible escalation of privilege, exfiltration of privileged memory Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2017-5753, CVE-2017-6266, CVE-2017-6267, CVE-2017-6268, CVE-2017-6269, CVE-2017-6270,...
NVIDIA Windows GPU Display Driver 375.x / 384.x < 385.08 Multiple Vulnerabilities
NVIDIA GPU display driver vulnerabilities may lead to denial of service or possible escalation of privileges. To exploit these vulnerabilities an attacker would send a malicious request to an affected application or interact with an affected application. If successfully exploited, these...
CVE-2017-6268
NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape where a value passed from a user to the driver is not correctly validated and used as the index to an array which may lead to denial of service or possible escalation of...
CVE-2017-6268
NVIDIA Windows GPU Display Driver (nvlddmkm.sys) contains a vulnerability in the DxgkDdiEscape handler where a user-supplied value is not validated before being used as an array index, potentially causing denial of service or privilege escalation. Root cause: improper validation of user input pas...
CVE-2012-6268
This CVE entry is rejected and not used.
CVE-2016-6268
CVE-2016-6268 affects Trend Micro Smart Protection Server prior to build 2200 (2.5), prior to build 2106 (2.6), and prior to build 1330 (3.0). The vulnerability allows local web server users to execute arbitrary code with root privileges through a Trojan horse ".war" file placed in the Solr webap...
CVE-2015-6268
Cisco IOS XE before 2.2.3 on ASR 1000 devices is affected by CVE-2015-6268. The issue allows remote attackers to cause a denial of service by sending a crafted IPv4 UDP packet, triggering an Embedded Services Processor (ESP) crash and potentially a device reload. Root cause is tied to UDP packet ...