41 matches found
CVE-2020-6670
CVE-2020-6670 entry is rejected and does not represent an active vulnerability.
F5 Networks BIG-IP : vCMP vulnerability (K05765031)
vCMP hypervisors incorrectly expose the plaintext unit key for their vCMP guests on the file system.CVE-2019-6670 Impact An attacker may use this vulnerability to extract the master key of vCMP guests. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
CVE-2019-6670
CVE-2019-6670 affects F5 BIG-IP vCMP hypervisors. The vulnerability arises from a flaw that causes plaintext unit keys for vCMP guests to be exposed on the filesystem. Affected versions include BIG-IP 15.0.0–15.0.1, 14.1.0–14.1.2, 14.0.0–14.0.1, 13.1.0–13.1.3.1, 12.1.0–12.1.5, and 11.5.1–11.6.5. ...
CVE-2018-6670
External Entity Attack vulnerability in the ePO extension in McAfee Common UI CUI 2.0.2 allows remote authenticated users to view confidential information via a crafted HTTP request parameter...
CVE-2018-6670
The CVE-2018-6670 entry concerns McAfee Common UI (CUI) 2.0.2, specifically the ePO extension. The vulnerability is an External Entity Attack that allows remote authenticated users to view confidential information by sending a crafted HTTP request parameter. Supported documents confirm the affect...
CVE-2012-6670
DragonByte Technologies vbActivity for vBulletin is affected by multiple XSS vulnerabilities in versions prior to 3.0.1. The issue allows remote attackers to inject arbitrary web script or HTML via the reason parameter in actions/nominatemedal.php or actions/requestmedal.php. This is due to impro...
CVE-2017-6670
CVE-2017-6670 affects Cisco Unified Communications Domain Manager (CUCM) web-based GUI. The issue is an Open Redirect vulnerability caused by improper input validation of HTTP request parameters, allowing an unauthenticated, remote attacker to redirect users to a malicious web page. Affected rele...
ownCloud Authorization Bypass Vulnerability (Sep 2016) - Windows
ownCloud is prone to authorization bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud";...
ownCloud Authorization Bypass Vulnerability (Sep 2016) - Linux
ownCloud is prone to authorization bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud";...
CVE-2016-6670
Summary: CVE-2016-6670 affects Huawei S7700, S9300, S9700, and S12700 devices running software before V200R008C00SPC500. The root cause is the use of random numbers with insufficient entropy to generate self-signed certificates, enabling remote attackers to more easily recover private keys by exp...
Security Advisory - A Security Vulnerability of Using Insecure Random Numbers to Generate Self-signed Certificates in Huawei Products
Some Huawei products automatically generate self-signed certificates upon the first use. The random numbers used to generate these certificates are not random enough. Different devices' certificates may use the same random number consequently, which contains the risk of an attacker compromising t...
CVE-2015-6670
CVE-2015-6670 affects ownCloud server components prior to updates: 7.0.8, 8.0.x before 8.0.6, and 8.1.x before 8.1.1. The issue stems from improper ownership checks of calendars, allowing remote authenticated users to read arbitrary calendars via the calid parameter to apps/calendar/export.php. T...
[SECURITY] [DSA 3373-1] owncloud security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3373-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 18, 2015 https://www.debian.org/security/faq...
[SECURITY] [DSA 3373-1] owncloud security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3373-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 18, 2015 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3373-1] owncloud security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3373-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 18, 2015 https://www.debian.org/security/faq -...
Mageia: Security Advisory (MGASA-2015-0378)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for xen FEDORA-2015-6670
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2014-6670
CVE-2014-6670 affects the Android app “SingaporeMotherhood Forum” (com.tapatalk.singaporemotherhoodcomforum) version 3.6.6. The root cause is that the application does not verify X.509 certificates from SSL servers, allowing MITM attackers to spoof servers and obtain sensitive information via a c...
CVE-2008-6670
The CVE-2008-6670 entry describes an integer overflow in Vertex4 SunAge 1.08.1 and earlier. The vulnerability can be triggered remotely by sending a crafted UDP packet to port 27960, leading to a denial of service (crash). Documents do not provide actionable exploit details or a confirmed remedia...
