Cisco IOS Software Multicast Routing Denial of Service Vulnerabilities (cisco-sa-20160928-msdp)

Multiple vulnerabilities in the multicast subsystem of Cisco IOS Software could allow an unauthenticated, remote attacker to create a denial of service DoS condition. The issues are in IPv4 Multicast Source Discovery Protocol MSDP and IPv6 Protocol Independent Multicast PIM. SPDX-FileCopyrightTex...

CVE-2014-6392

The CVE-2014-6392 entry concerns an XSS vulnerability in the Facebook iOS apps: Facebook 14.0 and Messenger 10.0, exploitable via a crafted filename extension that is mishandled during MIME sniffing of chat traffic. The vendor disputes the impact, noting an interstitial warning is shown and the H...

CVE-2013-6392

CVE-2013-6392 affects the Genlock driver for the Linux kernel 3.x (Genlock, used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products). The issue is that genlock_dev_ioctl fails to properly initialize a data structure, enabling local users to read sensitive ...

Cisco Prime LAN Management Solution Remote Command Execution (CVE-2012-6392)

A remote command execution vulnerability exists in Cisco Prime LAN Management Solution. The vulnerability is due to use of non encrypted connection with the server. A successful exploitation would allow the attacker to execute commands, and send files...

rsh Excessive Trust Vulnerability

Added: 01/25/2013 CVE: CVE-1999-0515 Background The rsh service allows remote users, using an rsh client, to execute individual shell commands on an rsh server without the need for a password. The rsh process uses the .rhosts file to list trusted hosts those machines allowed to use the service...

rsh Excessive Trust Vulnerability

Added: 01/25/2013 CVE: CVE-1999-0515 Background The rsh service allows remote users, using an rsh client, to execute individual shell commands on an rsh server without the need for a password. The rsh process uses the .rhosts file to list trusted hosts those machines allowed to use the service...

rsh Excessive Trust Vulnerability

Added: 01/25/2013 CVE: CVE-1999-0515 Background The rsh service allows remote users, using an rsh client, to execute individual shell commands on an rsh server without the need for a password. The rsh process uses the .rhosts file to list trusted hosts those machines allowed to use the service...

CVE-2012-6392

CVE-2012-6392 affects Cisco Prime LAN Management Solution (LMS) 4.1 through 4.2.2 on Linux. The vulnerability arises because LMS does not properly validate authentication and authorization requests in TCP sessions, allowing remote attackers to execute arbitrary commands via a crafted session (por...

CVE-2008-6392

CVE-2008-6392 describes an SQL injection vulnerability in the Z1Exchange component, specifically in showads.php, allowing remote attackers to execute arbitrary SQL commands via the id parameter . The vulnerability is characterized by the ability to manipulate the database through user-supplied in...

CVE-2008-6392

creationtimestamp| type| source ---|---|--- 2008-12-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32633...

CVE-2007-6392

CVE-2007-6392 is an SQL injection vulnerability in DWdirectory 2.1 and earlier. The flaw allows remote attackers to execute arbitrary SQL commands via the search parameter to the /search URI. The connected documents confirm affected software (DWdirectory 2.1 and earlier) and the underlying cause ...

CVE-2006-6392

The CVE-2006-6392 entry describes a directory traversal vulnerability in index.php of plx Web Studio (aka plxWebDev) plx Pay 3.2 and earlier. A remote attacker can use a .. in the read parameter to include and execute arbitrary local files and to access user credentials and other sensitive inform...

MS:16B867D6-6392-415E-95CC-00C60E645C09

...