153 matches found
F5 Networks BIG-IP : BIG-IP Configuration utility vulnerability (K29280193)
When authenticated administrative users run commands in the Traffic Management User Interface TMUI, also referred to as the BIG-IP Configuration utility, restrictions on allowed commands may not be enforced. CVE-2019-6597 Impact BIG-IP and Enterprise Manager This vulnerability allows a privilege...
CVE-2018-6597
The CVE-2018-6597 entry describes a privilege-escalation issue on the Alcatel A30 running TCL/5046G/MICKEY6US:7.0. A user with physical access can obtain a root shell via ADB due to modifications that allow root command execution. Specifically, modifying read-only properties by an app as the syst...
CVE-2013-6597
This CVE-2013-6597 entry is rejected and not associated with an active vulnerability.
CVE-2017-6597
A vulnerability in the local-mgmt CLI command of the Cisco Unified Computing System UCS Manager, Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to perform a command injection attack. More...
CVE-2017-6597
The CVE-2017-6597 issue affects Cisco UCS Manager and Cisco Firepower 4100 NGFW / 9300 Security Appliance. Affected component: local-mgmt CLI command. Root cause: insufficient input validation in the CLI leading to a command injection when an authenticated, local attacker supplies crafted argumen...
CVE-2016-6597
CVE-2016-6597 affects Sophos Mobile Control’s EAS Proxy (before 6.2.0). When Lotus Traveler is enabled, it allows a remote attacker to access arbitrary web-resources from the backend mail system via an Open Reverse Proxy. This is triggered by a crafted request to the EAS Proxy, exposing backend r...
CVE-2014-6597
CVE-2014-6597 affects the Oracle PeopleSoft PeopleTools component (Oracle PeopleSoft Products 8.52, 8.53, 8.54). The vulnerability is linked to the PIA Core Technology and allows remote authenticated users to affect integrity. The connected documents provide no explicit exploit details or remedia...
CVE-2012-6597
The CVE affects Palo Alto Networks PAN-OS pre-3.1.11 and pre-4.0.9 (specifically PAN-OS 3.1.x before 3.1.11 and 4.0.x before 4.0.9). The underlying issue is a denial-of-service via a crafted command sent to the CLI, exploitable by remote authenticated users to crash the management server. Remedia...
CVE-2008-6597
PHCDownload 1.1 is affected by a cross-site scripting (XSS) vulnerability in upload/install/index.php, exploitable via the step parameter. The issue allows remote attackers to inject arbitrary web script or HTML. Affected component is PHCDownload 1.1; root cause is improper handling of the step p...
CVE-2007-6597
CVE-2007-6597 concerns multiple XSS vulnerabilities in IPortalX prior to Build 033. The affected components are the web endpoints forum/login_user.asp and blogs.asp , with vulnerable parameters KW , SF (forum/login_user.asp) and Date (blogs.asp). Root cause is cross-site scripting that could allo...
CVE-2006-6597
CVE-2006-6597 affects HyperAccess 8.4. An argument-injection vulnerability lets user-assisted remote attackers run arbitrary vbscript and commands via the /r option in a telnet:// URI configured to use hawin32.exe. The NVD entry assigns a CVSSv2 base score of 6.8 (Network, Medium complexity, no a...