35 matches found
Cross site request forgery (csrf)
/LoadFrame in Zoho ManageEngine AD Manager Plus build 6590 - 6613 allows attackers to conduct URL Redirection attacks via the src parameter, resulting in a bypass of CSRF protection, or potentially masquerading a malicious URL as trusted...
CVE-2017-6590
An issue was discovered in network-manager-applet aka network-manager-gnome in Ubuntu 12.04 LTS, 14.04 LTS, 16.04 LTS, and 16.10. A local attacker could use this issue at the default Ubuntu login screen to access local files and execute arbitrary commands as the lightdm user. The exploitation...
CVE-2017-6590
CVE-2017-6590 concerns network-manager-applet (network-manager-gnome) on Ubuntu 12.04 LTS, 14.04 LTS, 16.04 LTS, and 16.10. A local attacker can log in at the default lightdm screen, access local files, and execute arbitrary commands as the lightdm user by exploiting a UI permission flaw when con...
DLL Loading Issue in Symantec Enterprise Products
SUMMARY Symantec has released updates to address a DLL loading issue in Symantec IT Management Suite ITMS, Symantec Ghost Solution Suite GSS, Symantec Encryption Desktop SED, and Symantec Endpoint Virtualization SEV. AFFECTED PRODUCTS Symantec IT Management Suite 8.0 --- CVE | Affected Versions |...
Oracle VirtualBox Multiple Vulnerabilities (Feb 2015) - Linux
Oracle VirtualBox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...
CVE-2014-6590
CVE-2014-6590 is a Local privilege/availability impact vulnerability in Oracle VM VirtualBox, affecting VirtualBox before 4.3.20 due to issues in the VMSVGA virtual graphics device. The CVE entry explicitly ties the issue to the VMSVGA component and notes it is a distinct issue from CVE-2014-6588...
CVE-2014-6590
Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.20 allows local users to affect integrity and availability via vectors related to VMSVGA virtual graphics device, a different vulnerability than CVE-2014-6588, CVE-2014-6589,...
Palo Alto Networks PAN-OS < 4.0.8 Multiple Vulnerabilities
The remote host is running a version of Palo Alto Networks PAN-OS prior to 4.0.8. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists due to overly verbose error messages. An attacker can exploit this vulnerability by sending specially crafted...
CVE-2012-6590
The CVE-2012-6590 entry affects Palo Alto Networks PAN-OS 4.0.x prior to 4.0.8. The vulnerability is an information-disclosure issue where the web-based management UI may leak verbose error information to remote attackers through specially crafted input. Affected component: the PAN-OS web managem...
CVE-2008-6590
LightNEasy has directory traversal flaws in version 1.2.2 (and possibly SQLite 1.2.2) where a crafted .. in the page parameter to index.php or LightNEasy.php allows remote attackers to read arbitrary files. Root cause appears to be inadequate validation of the page parameter, enabling traversal t...
CVE-2008-6590
creationtimestamp| type| source ---|---|--- 2008-04-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5452...
CVE-2007-6590
CVE-2007-6590 is rejected/not used; duplicate of CVE-2008-2809; references removed.
CVE-2006-6590
CVE-2006-6590: PHP remote file inclusion in AR Memberscript, specifically in usercp_menu.php, allows an attacker to supply a URL via the script_folder parameter to execute arbitrary PHP code. The NVD entry lists a CVSS v2 base score of 7.5 (HIGH) with network vector and low attack complexity, no ...