CVE-2013-6276

QNAP F_VioCard 2312 and F_VioGate 2308 are affected by hardcoded entries in authorized_keys. Active models are not affected; last affected model was EOL since 2010. Root cause: legacy authorization mechanism no longer used in active models. Mitigations include removing hardcoded keys (cited by PT...

CVE-2013-6276

QNAP FVioCard 2312 and FVioGate 2308 have hardcoded entries in authorizedkeys files. NOTE: 1. All active models are not affected. The last affected model was EOL since 2010. 2. The legacy authorization mechanism is no longer adopted in all active models...

CVE-2020-6276

SAP Business Objects Business Intelligence Platform bipodata (v4.2) is affected by a Cross-Site Scripting vulnerability due to insufficient encoding of user-controlled inputs. The issue arises in the WEB application, enabling an attacker to trigger client-side code execution. Root cause: lack of ...

Security Bulletin: NVIDIA SHIELD Tablet Security Update for a Media Server Vulnerability

NVIDIA SHIELD Tablet contains a vulnerability which may lead to denial of service or escalation of privileges Go to NVIDIA Product Security. Vulnerability Details The following section summarizes the potential vulnerability. The description uses CWE™ and the risk assessment follows CVSS...

Security Bulletin: NVIDIA SHIELD TV Security Updates for Multiple Vulnerabilities

NVIDIA SHIELD TV security updates for vulnerabilities that may lead to denial of service, information disclosure, or escalation of privileges Vulnerability Details The following sections summarize the potential vulnerabilities. Descriptions use CWE™ and risk assessments follow CVSS. CVE-2017-6282...

Out-of-bounds

NVIDIA mediaserver contains a vulnerability where it is possible a use after free malfunction can occur due to an incorrect bounds check which could enable unauthorized code execution and possibly lead to elevation of privileges. This issue is rated as high. Product: Android. Version: N/A. Androi...

CVE-2017-6276

CVE-2017-6276 affects NVIDIA mediaserver/OpenMax component (LIBNVMMLITE_VIDEO.SO). The issue is a use-after-free caused by referencing memory after it has been freed, leading to potential denial of service and possible elevation of privileges. NVIDIA’s NVIDIA SHIELD Tablet bulletin lists CVE-2017...

CVE-2016-6276

Citrix Linux Virtual Delivery Agent aka VDA, formerly Linux Virtual Desktop before 1.4.0 allows local users to gain root privileges via unspecified vectors...

CVE-2016-6276

CVE-2016-6276 affects Citrix Linux VDA (formerly Linux Virtual Desktop) prior to 1.4.0. A local attacker can escalate privileges to root via unspecified vectors. The vulnerability is addressed in version 1.4.0 and later; affected customers should upgrade to 1.4.0+ to mitigate. If exploiting detai...

CVE-2014-6276

schema.py in Roundup before 1.5.1 does not properly limit attributes included in default user permissions, which might allow remote authenticated users to obtain sensitive user information by viewing user details...

CVE-2014-6276

The CVE-2014-6276 entry corresponds to Roundup (web-based issue tracker) and affects versions before 1.5.1. The root cause is that schema.py does not properly restrict attributes in default user permissions, enabling remote authenticated users to view sensitive user details. Observed impact inclu...

[SECURITY] [DSA 3502-1] roundup security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3502-1 [email protected] https://www.debian.org/security/ Yves-Alexis Perez March 03, 2016 https://www.debian.org/security/faq -...

CVE-2015-6276

Cisco TelePresence IX5000 8.0.3 stores a private key for an X.509 certificate under the web root with insufficient access control, enabling remote attackers to obtain private keys and potentially decrypt traffic or impersonate the device. Cisco has released software updates addressing this certif...

CVE-2012-6276

Directory traversal vulnerability in the web-based management interface on the TP-LINK TL-WR841N router with firmware 3.13.9 build 120201 Rel.54965n and earlier allows remote attackers to read arbitrary files via the URL parameter...

CVE-2012-6276

CVE-2012-6276 concerns the TP-LINK TL-WR841N router. The vulnerability lies in the web-based management interface where a URL parameter is not properly sanitized, enabling a local file inclusion/directory traversal that could let an attacker read arbitrary files on the device. Affected firmware i...

CVE-2012-6276

Directory traversal vulnerability in the web-based management interface on the TP-LINK TL-WR841N router with firmware 3.13.9 build 120201 Rel.54965n and earlier allows remote attackers to read arbitrary files via the URL parameter...

Modicon FTP Default Account/Password Usage (SCADA)

Binary data 6276.prm...

Mac OS X 10.5.4 Update / Mac OS X Security Update 2008-004

The remote host is missing Mac OS X 10.5.4 Update / Mac OS X Security Update 2008-004. One or more of the following components are affected: Alias Manager CoreTypes c++filt Dock Launch Services Net-SNMP Ruby SMB File Server System Configuration Tomcat VPN WebKit OpenVAS Vulnerability Test Mac OS ...

CVE-2008-6276

Multiple SQL injection vulnerabilities in the User Karma module 5.x before 5.x-1.13 and 6.x before 6.x-1.0-beta1, a module for Drupal, allow remote authenticated administrators to execute arbitrary SQL commands via 1 a content type or 2 a voting API value...

CVE-2008-6276

CVE-2008-6276 describes SQL injection vulnerabilities in the Drupal module User Karma. Affected versions are 5.x before 5.x-1.13 and 6.x before 6.x-1.0-beta1. The flaws allow remote authenticated administrators to execute arbitrary SQL commands via either a content type or a voting API value. The...