40 matches found
CVE-2012-6718
CVE-2012-6718 affects the WordPress Sharebar plugin prior to version 1.2.2. The provided connected documents identify an cross-site scripting (XSS) vulnerability in that plugin, consistent across multiple sources, with variants described as XSS rather than the CSRF issues of CVE-2013-3491. The ro...
CVE-2017-6718
CVE-2017-6718 affects Cisco IOS XR Software: a privilege-escalation flaw in the CLI caused by incorrect permissions on binary files, enabling an authenticated, local attacker to gain root privileges. Affected release: 6.2.1.BASE. Fixed releases: 6.2.11.3i.ROUT, 6.2.1.29i.ROUT, 6.2.1.26i.ROUT. Exp...
UBUNTU-CVE-2016-6718
An elevation of privilege vulnerability in the Account Manager Service in Android 7.0 before 2016-11-01 could enable a local malicious application to retrieve sensitive information without user interaction. This issue is rated as Moderate because it is a local bypass of user interaction...
CVE-2016-6718
CVE-2016-6718 is an elevation-of-privilege issue in the Android 7.0 Account Manager Service. A local malicious app could bypass user interaction requirements and retrieve sensitive information without user consent. The root cause is a local bypass of interaction prompts within the Account Manager...
Adobe Acrobat < 10.1.16 / 11.0.13 / 2015.006.30094 / 2015.009.20069 Multiple Vulnerabilities (APSB15-24)
The version of Adobe Acrobat installed on the remote Windows host is a version prior to 10.1.16, 11.0.13, 2015.006.30094, or 2015.009.20069. It is, therefore, affected by multiple vulnerabilities. - The ANAuthenticateResource method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before...
Design/Logic Flaw
The CBSharedReviewSecurityDialog method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScrip...
Design/Logic Flaw
The CBSharedReviewCloseDialog method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript A...
Design/Logic Flaw
The ANAuthenticateResource method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript API...
Design/Logic Flaw
The CBBBRInvite method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript API execution...
CVE-2015-6718
The CVE-2015-6718 issue affects Adobe Acrobat/Reader on Windows and OS X, specifically: CBSharedReviewIfOfflineDialog vulnerability that bypasses JavaScript API execution restrictions. Affected versions include: Adobe Reader and Acrobat 10.x before 10.1.16; 11.x before 11.0.13; Acrobat/Reader DC ...
CVE-2014-6718
CVE-2014-6718 affects the Android app My Mobile Day (com.mymobileday) version 1.3. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and read sensitive information via a crafted certificate. Root cause is i...
CVE-2013-6718
The CVE-2013-6718 entry concerns IBM BladeCenter Advanced Management Module (AMM) with firmware 3.64B, 3.64C, and 3.64G. The vulnerability allows remote attackers to discover account names and passwords via an unspecified interface. Affected AMM configurations expose sensitive credentials, with i...
Mandriva Security Advisory MDVSA-2009:335 (ffmpeg)
The remote host is missing an update to ffmpeg announced via advisory MDVSA-2009:335. OpenVAS Vulnerability Test $Id: mdksa2009335.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:335 ffmpeg Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...
Mandriva Security Advisory MDVSA-2009:335 (ffmpeg)
The remote host is missing an update to ffmpeg announced via advisory MDVSA-2009:335. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...
CVE-2008-6718
CVE-2008-6718 affects U&M Software JustBookIt 1.0. An authentication flaw allows remote attackers to access multiple admin scripts (e.g., user_manual.php, user_config.php, user_kundnamn.php, user_kundlista.php, user_aktiva_kunder.php, database.php, possibly index.php) without admin authentication...
CVE-2007-6718
MPlayer, possibly 1.0rc1, allows remote attackers to cause a denial of service SIGSEGV and application crash via 1 a malformed MP3 file, as demonstrated by lol-mplayer.mp3; 2 a malformed Ogg Vorbis file, as demonstrated by lol-mplayer.ogg; 3 a malformed MPEG-1 file, as demonstrated by...
CVE-2007-6718
CVE-2007-6718 affects MPlayer (potentially 1.0rc1). The vulnerability allows remote denial of service through malformed media files: MP3, Ogg Vorbis, MPEG-1/2, MPEG-4 AVI, FLAC, Ogg Theora, WMV, and AAC, each capable of triggering a SIGSEGV and application crash. Several connected sources (e.g., ...
CVE-2007-6718
MPlayer, possibly 1.0rc1, allows remote attackers to cause a denial of service SIGSEGV and application crash via 1 a malformed MP3 file, as demonstrated by lol-mplayer.mp3; 2 a malformed Ogg Vorbis file, as demonstrated by lol-mplayer.ogg; 3 a malformed MPEG-1 file, as demonstrated by...
CVE-2006-6718
The CVE-2006-6718 issue involves the Allied Telesis AT-9000/24 Ethernet switch, where the admin account uses a default password, "manager". This enables remote attackers to perform unauthorized actions. The entry is accompanied by a CVSS v2 base score of 7.5 (HIGH) with network attack vector, no ...