CVE-2013-6602

CVE-2013-6602 is rejected/not used and does not represent an active vulnerability entry.

CVE-2013-6602

...

CVE-2017-6602

The CVE-2017-6602 issue affects Cisco UCS Manager CLI, Cisco Firepower 4100 Series NGFW, and Cisco Firepower 9300 Security Appliance. Root cause: insufficient input validation in the CLI that allows a locally authenticated attacker to inject commands. Impact: command injection with read/write acc...

CVE-2016-6602

CVE-2016-6601 and CVE-2016-6602 affect ZOHO WebNMS Framework 5.2 and 5.2 SP1. CVE-2016-6601 is a local file inclusion in the file download path (servlets/FetchFile) allowing reading arbitrary files via a .. in fileName. CVE-2016-6602 describes weak obfuscation storing passwords in WEB-INF/conf/se...

Nexus Security Bulletin - October 2015Stay organized with collectionsSave and categorize content based on your preferences.

We have released a security update to Nexus devices through an over-the-air OTA update as part of our Android Security Bulletin Monthly Release process. The Nexus firmware images have also been released to the Google Developer site. Builds LMY48T or later such as LMY48W and Android M with Securit...

CVE-2015-6602

libutils in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a 1 MP3 or 2 MP4 file, as demonstrated by an attack against use of libutils by libstagefright in Android 5.x...

CVE-2015-6602

libutils in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a 1 MP3 or 2 MP4 file, as demonstrated by an attack against use of libutils by libstagefright in Android 5.x...

CVE-2015-6602

CVE-2015-6602 concerns libutils in Android up to version 5.1.1 LMY48M. A crafted metadata payload in MP3/MP4 files can trigger memory corruption and remote code execution via the mediaserver pathway (through libstagefright). The issue is categorized as a Remote Code Execution vulnerability and is...

Stagefright Bug 2.0 — One Billion Android SmartPhones Vulnerable to Hacking

Attention Android users! More than 1 Billion Android devices are vulnerable to hackers once again – Thanks to newly disclosed two new Android Stagefright vulnerabilities. Yes, Android Stagefright bug is Back… …and this time, the flaw allows an attacker to hack Android smartphones just by tricking...

Stagefright2

Meet Stagefright 2.0, a set of two vulnerabilities that manifest when processing specially crafted MP3 audio or MP4 video files. The first vulnerability in libutils impacts almost every Android device since version 1.0 released in 2008. We found methods to trigger that vulnerability in devices...

CVE-2014-6602

CVE-2014-6602 affects Microsoft Asha OS on the Nokia Asha 501 (MS Mobile) v14.0.4. The vulnerability allows physically proximate attackers to bypass the lock-screen by tapping the SOS option, then the Green Call option, enabling reading/modifying contacts or dialing numbers. The connected documen...

Palo Alto Networks PAN-OS < 3.1.10 / 4.x < 4.0.4 Multiple Command Injections

The remote host is running a version of Palo Alto Networks PAN-OS prior to 3.1.10 / 4.0.4. It is, therefore, affected by multiple command injection vulnerabilities : - A vulnerability exists that allows an unauthenticated user to inject commands as root on the device. CVE-2012-6593 /...

CVE-2012-6602

CVE-2012-6602 affects Palo Alto Networks PAN-OS before 3.1.10 and 4.x before 4.0.4. The device-management CLI allows remote authenticated users to inject arbitrary shell commands, enabling arbitrary command execution via the CLI. Root cause: command injection in the management interface. Impact a...

CVE-2007-6602

CVE-2007-6602 describes a SQL injection in NoseRub, affecting version 0.5.2 and earlier. The vulnerability occurs in the login script via the username field and targets the code path in app/models/identity.php . Root cause is improper handling of user input leading to arbitrary SQL execution by r...

CVE-2006-6602

CVE-2006-6602 affects explorer.exe in Microsoft Windows XP SP2 (Windows Explorer 6.00.2900.2180). A user-assisted remote attacker can cause a denial of service by presenting a crafted WMV file. Affected component: Windows Explorer. The connected documents provide the vulnerability description and...

CVE-2020-6602

CVE-2020-6602 entry is rejected/not used and does not represent an active vulnerability.