74 matches found
CVE-2018-6556
lxc-user-nic when asked to delete a network interface will unconditionally open a user provided path. This code path may be used by an unprivileged user to check for the existence of a path which they wouldn't otherwise be able to reach. It may also be used to trigger side effects by causing a...
UBUNTU-CVE-2018-6556
lxc-user-nic when asked to delete a network interface will unconditionally open a user provided path. This code path may be used by an unprivileged user to check for the existence of a path which they wouldn't otherwise be able to reach. It may also be used to trigger side effects by causing a...
CVE-2018-6556
lxc-user-nic when asked to delete a network interface will unconditionally open a user provided path. This code path may be used by an unprivileged user to check for the existence of a path which they wouldn't otherwise be able to reach. It may also be used to trigger side effects by causing a...
Check_MK Agent for Linux 1.2.3i < 1.2.5i3 Arbitrary File Disclosure
The version of CheckMK running on the remote web server is 1.2.3i prior to 1.2.5i3. It is, therefore, affected by a flaw due to the /var/lib/checkmkagent/job directory creating temporary files with insufficiently secure permissions. A local attacker can exploit this issue by creating a symbolic...
CVE-2017-6556
Cross-site scripting XSS vulnerability in CMS Made Simple CMSMS 2.1.6 allows remote authenticated users to inject arbitrary web script or HTML via the "adminpage sitesetting General Settings globalmetadata" field...
CVE-2017-6556
CMS Made Simple (CMSMS) 2.1.6 is affected by a cross-site scripting (XSS) vulnerability that allows remote authenticated users to inject arbitrary script/HTML via the adminpage > sitesetting > General Settings > globalmetadata field. The issue stems from inadequate input validation in th...
CVE-2015-6556
Symantec Endpoint Encryption (SEE) up to version 11.0 is affected by CVE-2015-6556 due to EACommunicatorSrv.exe in the Framework Service allowing an authenticated remote user to trigger a memory dump and access credentials stored on the client. The issue is documented with a low CVSS v2 base scor...
CVE-2014-6556
Technical details about CVE-2014-6556 are not publicly available in the provided connected documents. Monitor for updates.
CVE-2012-6556
CVE-2012-6556 describes multiple cross-site scripting (XSS) vulnerabilities in the FirstLastNames plugin 1.1.1 for Vanilla Forums. The issue enables remote attackers to inject arbitrary web script or HTML via the (1) User/FirstName or (2) User/LastName parameter on the edit user page. The NVD ent...
CVE-2012-6556
Multiple cross-site scripting XSS vulnerabilities in the FirstLastNames plugin 1.1.1 for Vanilla Forums allow remote attackers to inject arbitrary web script or HTML via the 1 User/FirstName or 2 User/LastName parameter to the edit user page. NOTE: some of these details are obtained from third...
CVE-2012-6556
creationtimestamp| type| source ---|---|--- 2012-05-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18912...
CVE-2008-6556
cgi-bin/webutil.pl in The Puppet Master WebUtil 2.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the whois command...
CVE-2008-6556
CVE-2008-6556 affects The Puppet Master WebUtil 2.3 via cgi-bin/webutil.pl . The vulnerability allows remote attackers to execute arbitrary commands by supplying shell metacharacters in the whois parameter. The root cause is improper handling of user-supplied input in the whois command, enabling ...
CVE-2006-6556
The CVE-2006-6556 entry affects EyeOS (EyeHome function in apps/eyeHome.eyeapp/aplic.php) prior to 0.9.3-3. An attacker can remotely upload and execute arbitrary code by using dangerous file extensions that are not all lowercase, which bypasses the input cleansing step. This results in remote cod...