CVE-2020-6685

...

CVE-2020-6685

CVE-2020-6685 is rejected/not used and does not represent an active vulnerability entry.

CVE-2012-6685

creationtimestamp| type| source ---|---|--- 2020-02-19 18:52:16+00:00| seen| https://t.me/cibsecurity/9934...

UBUNTU-CVE-2012-6685

Nokogiri before 1.5.4 is vulnerable to XXE attacks...

CVE-2012-6685

Nokogiri prior to 1.5.4 is vulnerable to XML External Entity (XXE) attacks. The issue arises in the XML parsing path (XXE) and is documented under CVE-2012-6685. Exploitation details are not provided beyond the XXE description. Affected software: Nokogiri (Ruby library). Root cause: XXE in XML pr...

CVE-2019-6685

CVE-2019-6685 affects F5 BIG-IP iRules manager. Vulnerable versions include 15.0.0–15.0.1.1, 14.1.0–14.1.2.2, 14.0.0–14.0.1, 13.1.0–13.1.3.1, 12.1.0–12.1.5, and 11.5.2–11.6.5.1. A user with access to edit iRules can create iRules that lead to elevation of privilege, configuration modification, an...

CVE-2007-6685

Unspecified vulnerability in the Publish XP module Menalto Gallery before 2.2.4 allows attackers to create albums and upload files via unknown vectors...

CVE-2017-6685

CVE-2017-6685 affects Cisco Ultra Services Framework Staging Server. The issue arises from weak, hard-coded admin credentials, allowing an authenticated remote attacker with access to the management network to log in as an admin. The Cisco advisory states there are no workarounds; mitigation requ...

CVE-2016-6685

Technical details for CVE-2016-6685 are not publicly provided in the supplied connected documents. Monitor for updates. The entry notes a kernel information disclosure on Nexus 6P but lacks specifics on root cause, affected components, remediation, or exploit status.

Adobe Acrobat < 10.1.16 / 11.0.13 / 2015.006.30094 / 2015.009.20069 Multiple Vulnerabilities (APSB15-24)

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 10.1.16, 11.0.13, 2015.006.30094, or 2015.009.20069. It is, therefore, affected by multiple vulnerabilities. - The ANAuthenticateResource method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before...

Memory corruption

Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory...

CVE-2014-6685

CVE-2014-6685: Tsushima Travel Guide (Android app 1.9) does not verify X.509 certificates, enabling MITM attackers to spoof SSL servers and obtain sensitive data. Affected component is the app’s SSL certificate verification logic; root cause is lack of certificate validation. Exploitation details...

CVE-2013-6685

The CVE-2013-6685 issue affects Cisco Unified IP Phone models 8961, 9951, and 9971. Root cause: weak permissions on memory block devices, enabling a local attacker to gain privileges by mounting a device that contains a setuid file in its filesystem. Impact: local privilege elevation on affected ...

CVE-2012-6685 rubygem-nokogiri: XML eXternal Entity (XXE) flaw

Nokogiri before 1.5.4 is vulnerable to XXE attacks...

CVE-2008-6685

The CVE-2008-6685 entry concerns Frontend Filemanager (air_filemanager) 0.6.1 and earlier TYPO3 extension. It describes an unspecified vulnerability that allows remote attackers to execute arbitrary commands via unknown vectors. The available sources confirm the affected software and the remote c...

FreeBSD Ports: gallery2

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2007-6685

CVE-2007-6685 affects the Publish XP module of Menalto Gallery prior to 2.2.4. The description states an unspecified vulnerability that lets an attacker create albums and upload files via unknown vectors. Remediation per connected sources is to upgrade to Gallery 2.2.4 or newer (e.g., Gallery 2.2...

CVE-2006-6685

Heap-based buffer overflow in Pedro Lineu Orso chetcpasswd 2.3.3 allows local users to cause a denial of service application crash and possibly execute arbitrary code via a long REMOTEADDR environment variable. NOTE: The provenance of this information is unknown; the details are obtained solely...

CVE-2006-6685

CVE-2006-6685 describes a heap-based buffer overflow in chetcpasswd 2.3.3 by Pedro Lineu Orso, exploited via a long REMOTE_ADDR environment variable. The vulnerability allows local users to cause an application crash (DoS) and may allow arbitrary code execution. The provided documents do not spec...