CVE-2017-6684

Cisco Elastic Services Controller (ESC) contains an insecure default credentials vulnerability. An authenticated attacker could log in as the Linux admin user due to a default, weak, hard-coded password. Affected release: 21.0.0. The Cisco advisory notes there are no workarounds; it does not spec...

CVE-2016-6684

CVE-2016-6684 is documented in the 2016-10-01/10-05 Android vulnerability details as an Information disclosure vulnerability in kernel components. The CVE is associated with Android kernel components (internal bug 30148243) and affects Nexus devices including Nexus 5, 5X, 6, 6P, 9, Nexus Player, ...

Adobe Acrobat < 10.1.16 / 11.0.13 / 2015.006.30094 / 2015.009.20069 Multiple Vulnerabilities (APSB15-24)

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 10.1.16, 11.0.13, 2015.006.30094, or 2015.009.20069. It is, therefore, affected by multiple vulnerabilities. - The ANAuthenticateResource method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before...

openSUSE Security Update : rubygem-RedCloth (openSUSE-2015-457)

rubygem-RedCloth was updated to fix one security issue. The following vulnerability was fixed : CVE-2012-6684: A cross-site scripting XSS vulnerability allowed remote attackers to inject arbitrary web script or HTML via a javascript: URI boo912212 %NASLMINLEVEL 70300 C Tenable Network Security,...

[SECURITY] [DLA 167-1] redcloth security update

Package : redcloth Version : 4.2.2-1.1+deb6u1 CVE ID : CVE-2012-6684 Debian Bug : 774748 Kousuke Ebihara discovered that redcloth, a Ruby module used to convert Textile markup to HTML, did not properly sanitize its input. This allowed a remote attacker to perform a cross-site scripting attack by...

[SECURITY] [DSA 3168-1] ruby-redcloth security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3168-1 [email protected] http://www.debian.org/security/ Sebastien Delafond February 22, 2015 http://www.debian.org/security/faq -...

CVE-2012-6684

Cross-site scripting XSS vulnerability in the RedCloth library 4.2.9 for Ruby and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript: URI...

CVE-2012-6684

Cross-site scripting XSS vulnerability in the RedCloth library 4.2.9 for Ruby and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript: URI...

CVE-2012-6684

Cross-site scripting XSS vulnerability in the RedCloth library 4.2.9 for Ruby and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript: URI...

CVE-2012-6684

CVE-2012-6684 affects the RedCloth Ruby library (versions up to 4.2.9). The vulnerability arises because input is not properly sanitized, allowing a remote attacker to inject arbitrary JavaScript via a javascript: URI in Textile-to-HTML output, resulting in cross-site scripting (XSS). Public disc...

CVE-2014-6684

The CVE-2014-6684 entry concerns the MOL bringaPONT (aka hu.mol.bringapont) Android app version 1.1, which does not verify X.509 certificates from SSL servers. This weakness enables man-in-the-middle attackers to spoof legitimate servers and obtain sensitive information via a crafted certificate,...

CVE-2013-6684

Cisco WLC CVE-2013-6684 affects the web framework in Cisco Wireless LAN Controllers. The vulnerability stems from improper validation of configuration parameters, enabling remote authenticated users to cause a denial of service via a crafted HTTP request (Bug CSCuh81011). Public exploit code is n...

Barracuda Spam Firewall version detection

Binary data 6684.prm...

CVE-2012-6684 rubygem-RedCloth: XSS vulnerability

Cross-site scripting XSS vulnerability in the RedCloth library 4.2.9 for Ruby and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript: URI...

CVE-2008-6684

CVE-2008-6684 describes an unrestricted file upload vulnerability in editimage.php of the Apartment Search Script. An attacker can upload a file with an executable extension bearing a GIF header and then access the renamed file via a direct request to Elephant/Member_Admin/logo/ to execute arbitr...

Gentoo Security Advisory GLSA 200803-13 (vlc)

The remote host is missing updates announced in advisory GLSA 200803-13. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-6684

CVE-2007-6684 affects VideoLAN VLC 0.8.6d: the RTSP module can crash a remote host by processing a request without a Transport parameter, triggering a NULL pointer dereference (DoS). Gentoo GLSA 200803-13 recommends upgrading to VLC 0.8.6e; other entries corroborate the same issue. No exploit det...

CVE-2006-6684

The CVE-2006-6684 entry relates to a heap-based buffer overflow in Pedro Lineu Orso chetcpasswd prior to version 2.4. The vulnerability can be triggered by a long X-Forwarded-For HTTP header, allowing remote attackers to cause an application crash and, per the description, possibly execute arbitr...