47 matches found
Cisco Nexus Series Switches CLI Command Injection (CVE-2017-6649)
A vulnerability in the CLI of Cisco NX-OS System Software 7.1 through 7.3 running on Cisco Nexus Series Switches could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments. An attacker could...
Mageia: Security Advisory (MGASA-2014-0037)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-6649
creationtimestamp| type| source ---|---|--- 2021-02-08 18:39:28+00:00| seen| https://t.me/cibsecurity/23213...
CVE-2020-6649
CVE-2020-6649 affects FortiIsolator 2.0.1 and earlier. Insufficient session expiration could let an attacker reuse unexpired admin session IDs to gain admin privileges if the session ID is obtained (as noted in Fortinet advisory FG-IR-20-011). Affected version lineage: FortiIsolator 2.0.1 and bel...
CVE-2012-6649
The CVE-2012-6649 affects WordPress WP GPX Maps Plugin 1.1.21 and is caused by an improper/unrestricted file upload, enabling remote attackers to execute arbitrary PHP code on the server. Impact: remote code execution with web‑server context; vulnerability is tied to the wp-gpx-maps plugin. Remed...
CVE-2019-6649
F5 BIG-IP 15.0.0, 14.1.0-14.1.0.6, 14.0.0-14.0.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, 11.6.0-11.6.4, and 11.5.1-11.5.9 and Enterprise Manager 3.1.1 may expose sensitive information and allow the system configuration to be modified when using non-default ConfigSync settings...
CVE-2019-6649
F5 BIG-IP 15.0.0, 14.1.0-14.1.0.6, 14.0.0-14.0.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, 11.6.0-11.6.4, and 11.5.1-11.5.9 and Enterprise Manager 3.1.1 may expose sensitive information and allow the system configuration to be modified when using non-default ConfigSync settings...
CVE-2019-6649
CVE-2019-6649 affects F5 BIG-IP (and Enterprise Manager) configurations using non-default ConfigSync settings. Affected versions include BIG-IP 12.1.x, 11.5.x–11.6.x, 13.0.x–13.1.x, 14.0.x, 14.1.x, 15.0.0 and Enterprise Manager 3.1.1. The issue allows exposure of sensitive information and the abi...
CVE-2017-6649
A vulnerability in the CLI of Cisco NX-OS System Software 7.1 through 7.3 running on Cisco Nexus Series Switches could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments. An attacker could...
CVE-2017-6649
CVE-2017-6649 concerns Cisco NX-OS System Software CLI on Cisco Nexus Series Switches. The vulnerability arises from insufficient input validation of command arguments in the CLI, allowing an authenticated, local attacker to inject crafted arguments and read or write arbitrary files outside the i...
CVE-2015-6649
The CVE-2015-6649 entry is rejected/not used and does not represent an active vulnerability entry.
CVE-2016-6649
EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 are affected by multiple command injection vulnerabilities where a malicious administrator with configuration privileges may bypass the user interface and escalate his privileges to root...
CVE-2016-6649
EMC RecoverPoint and RecoverPoint for Virtual Machines are affected by multiple command injection vulnerabilities in versions prior to 4.4.1.1 and 5.0 respectively. A malicious administrator with configuration privileges can bypass the UI and escalate to root privileges. Root cause: command injec...
CVE-2014-6649
The CVE concerns the MyBroadband Tapatalk Android app (3.9.22) failing to verify X.509 certificates when connecting to SSL servers, enabling potential man‑in‑the‑middle attackers to spoof servers and exfiltrate sensitive data. The available records confirm the vulnerable component (Android app), ...
SuSE Update for chromium openSUSE-SU-2014:0243-1 (chromium)
Check for the Version of chromium OpenVAS Vulnerability Test $Id: gbsuse201402431.nasl 8044 2017-12-08 08:32:49Z santu $ SuSE Update for chromium openSUSE-SU-2014:0243-1 chromium Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This...
chromium to 32.0.1700.102 (important)
Chromium was updated to version 32.0.1700.102: Stable channel update: - Security Fixes: CVE-2013-6649: Use-after-free in SVG images CVE-2013-6650: Memory corruption in V8 and 12 other fixes - Other: Mouse Pointer disappears after exiting full-screen mode Drag and drop files into Chromium may not...
[SECURITY] [DSA 2862-1] chromium-browser security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2862-1 [email protected] http://www.debian.org/security/ Michael Gilbert February 16, 2014 http://www.debian.org/security/faq -...
Debian DSA-2862-1 : chromium-browser - several vulnerabilities
Several vulnerabilities have been discovered in the chromium web browser. - CVE-2013-6641 Atte Kettunen discovered a use-after-free issue in Blink/Webkit form elements. - CVE-2013-6643 Joao Lucas Melo Brasio discovered a Google account information disclosure issue related to the one-click sign-on...
[SECURITY] [DSA 2862-1] chromium-browser security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2862-1 [email protected] http://www.debian.org/security/ Michael Gilbert February 16, 2014 http://www.debian.org/security/faq -...