CVE-2018-6690

Summary of CVE-2018-6690 (MACC): McAfee Application and Change Control (MACC) on Windows clients is affected by an improper access control flaw that enables an authenticated user to trigger execution of arbitrary code when transferring files from an external system via USB. The vulnerability affe...

CVE-2017-6690

The CVE-2017-6690 issue affects Cisco ASR 5000 Series Aggregated Services Routers running Cisco StarOS. Root cause: insufficient input validation in the file check operation. Impact: authenticated, remote attacker could overwrite or modify arbitrary files on an affected system. Affected releases ...

CVE-2016-6690

The sound driver in the kernel in Android before 2016-10-05 on Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, and Nexus Player devices allows attackers to cause a denial of service reboot via a crafted application, aka internal bug 28838221...

CVE-2016-6690

CVE-2016-6690 affects the Android kernel sound driver (sound card) on Nexus devices (Nexus 5, 5X, 6, 6P, Nexus Player) prior to 2016-10-05. Root cause: a flaw in the kernel sound driver allows a crafted application to trigger a denial of service, causing a reboot. Impact as described: device rebo...

Adobe Acrobat < 10.1.16 / 11.0.13 / 2015.006.30094 / 2015.009.20069 Multiple Vulnerabilities (APSB15-24)

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 10.1.16, 11.0.13, 2015.006.30094, or 2015.009.20069. It is, therefore, affected by multiple vulnerabilities. - The ANAuthenticateResource method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before...

Design/Logic Flaw

Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code via...

CVE-2015-6690

Use-after-free vulnerability in the popUpMenuEx method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to...

CVE-2015-6690

Technical details for CVE-2015-6690 are not publicly provided in the supplied documents; no affected products, exploits, or mitigations are specified here. Monitor official advisories for updates.

CVE-2014-6690

The InstaMessage - Instagram Chat aka com.futurebits.instamessage.free application 1.6.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6690

Affected software: InstaMessage – Instagram Chat (aka com.futurebits.instamessage.free), version 1.6.2 for Android. Root cause: the app does not verify X.509 certificates from SSL servers. Impact: MITM attackers could spoof legitimate servers and obtain sensitive information via a crafted certifi...

CVE-2008-6690

Technical details about CVE-2008-6690 are not publicly disclosed in the provided documents. No concrete affected products, root cause, or remediation are present here. Monitor for updates from CVE sources and connected advisories.

FreeBSD Ports: gallery2

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2007-6690

The Gallery Remote module in Menalto Gallery before 2.2.4 does not check permissions for unspecified GR commands, which has unknown impact and attack vectors...

CVE-2007-6690

CVE-2007-6690 affects the Gallery Remote module in Menalto Gallery prior to 2.2.4. The vulnerability stems from permission checks not being performed for unspecified GR commands, with both impact and attack vectors described as unknown in the sources. Gentoo GLSA 200802-04 and related advisories ...

CVE-2006-6690

rtehtmlarea/pi1/class.txrtehtmlareapi1.php in Typo3 4.0.0 through 4.0.3, 3.7 and 3.8 with the rtehtmlarea extension, and 4.1 beta allows remote authenticated users to execute arbitrary commands via shell metacharacters in the userUid parameter to...

CVE-2006-6690

CVE-2006-6690 affects TYPO3 with the rtehtmlarea extension (Typo3 4.0.0–4.0.3, 3.7–3.8, and 4.1 beta). The issue allows remote command execution via shell metacharacters in the userUid parameter to rtehtmlarea/htmlarea/plugins/SpellChecker/spell-check-logic.php (reported as a vulnerability enabli...

TYPO3 'spell-check-logic.php' 'userUid' Parameter Arbitrary Command Execution

The remote host is running TYPO3, an open source content management system written in PHP. The version of TYPO3 installed on the remote host fails to sanitize user-supplied input to the 'userUid' parameter before using it in the 'spell-check-logic.php' script to execute a command. An...