Symantec Management Console XSS/XXE Issues

SUMMARY Symantec has released an update to address two issues that were discovered in the Symantec Management Console. AFFECTED PRODUCTS Symantec Management Console --- CVE | Affected Versions | Remediation CVE-2017-6322 CVE-2017-6323 | Prior to ITMS 8.1 RU1, ITMS 8.0POSTHF6 & ITMS 7.6POSTHF7 |...

CVE-2016-6322

CVE-2016-6322 affects Red Hat QuickStart Cloud Installer (QCI). The issue is that /etc/qci/answers has world-readable permissions, enabling a local user to read the root password of the deployed system, which can lead to complete confidentiality/integrity/availability compromise of the deployed e...

CVE-2015-6322

CVE-2015-6322 affects Cisco AnyConnect Secure Mobility Client IPC channel. The vulnerability arises from missing source-path validation in IPC commands, allowing a local attacker to bypass access restrictions and move arbitrary files with elevated privileges. Affected products include AnyConnect ...

MS14-071: Vulnerability in Windows Audio Service Could Allow Elevation of Privilege (3005607)

The remote Windows host is affected by a vulnerability in the Windows Audio service component that allows privilege escalation. A remote attacker could exploit this vulnerability to elevate privileges but not execute code. C Tenable Network Security, Inc. include"compat.inc"; if description...

Microsoft Window Audio Service Privilege Escalation Vulnerability (3005607)

This host is missing an important security update according to Microsoft Bulletin MS14-071. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2014-6322

CVE-2014-6322 is a Windows Audio Service elevation-of-privilege vulnerability (MS14-071). Affects Windows Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, Windows 8/8.1, Server 2012/2012 R2, and Windows RT. Root cause involves the Windows Audio service components (audiosrv.dll, audioses.dll, audioks...

Microsoft Windows CVE-2014-6322 Remote Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a remote privilege-escalation vulnerability. An attacker can exploit this vulnerability to execute arbitrary code with elevated privileges. Technologies Affected Microsoft Windows 7 for 32-bit Systems SP1 Microsoft Windows 7 for x64-based Systems SP1...

CVE-2013-6322

IBM Sterling Order Management (Sterling Selling and Fulfillment Suite) is affected by CVE-2013-6322 as a reflected XSS in 8.0 before HF128 and 8.5 before HF93. The vulnerability allows remote authenticated users to inject scripts/HTML via unspecified vectors, potentially impacting data integrity....

openSUSE 10 Security Update : icu (icu-6322)

icu does not properly handle invalid byte sequences during Unicode conversion. Remote attackers could potentially exploit that to conduct conduct cross-site scripting XSS attacks CVE-2009-0153. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

CVE-2008-6322

CVE-2008-6322 concerns an SQL injection in index.cfm of the CFMSource CFMBlog. The vulnerability is exploitable via the categorynbr parameter, enabling remote attackers to execute arbitrary SQL commands. The issue is characterized with CVSS v2.0 base score 7.5 (HIGH) and network access with low a...

CVE-2008-6322

creationtimestamp| type| source ---|---|--- 2008-12-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7415...

CVE-2007-6322

CVE-2007-6322 affects xml2owl 0.1.1 where filedownload.php is vulnerable to a directory traversal via the file parameter (..), allowing remote attackers to read arbitrary files. The vulnerability is a path-traversal flaw reported in multiple sources (NVD entry and CVE record). The provided docume...