38 matches found
CVE-2020-6724
CVE-2020-6724 is rejected/not used per description; this CVE entry does not represent an active vulnerability.
CVE-2019-6724
CVE-2019-6724 concerns the Barracuda VPN Client. The vulnerable component is the barracudavpn component in version prior to 5.0.2.7 for Linux, macOS, and OpenBSD, which runs as a privileged process and can allow an unprivileged local attacker to load a malicious library, resulting in arbitrary co...
CVE-2017-6724
CVE-2017-6724 concerns Cisco Prime Infrastructure Web Framework Code, where insufficient input validation allows an unauthenticated, remote attacker to perform a cross-site scripting (XSS) attack against a user of the web interface. Affected release noted as 3.1(0.0). The vulnerability is caused ...
CVE-2016-6724
CVE-2016-6724 details: A denial of service in the Android Input Manager Service could allow a local malicious app to cause the device to continually reboot. Affected: Android 4.x before 4.4.4; 5.0.x before 5.0.2; 5.1.x before 5.1.1; 6.x before 2016-11-01; 7.0 before 2016-11-01. Impact is a tempor...
Adobe Acrobat < 10.1.16 / 11.0.13 / 2015.006.30094 / 2015.009.20069 Multiple Vulnerabilities (APSB15-24)
The version of Adobe Acrobat installed on the remote Windows host is a version prior to 10.1.16, 11.0.13, 2015.006.30094, or 2015.009.20069. It is, therefore, affected by multiple vulnerabilities. - The ANAuthenticateResource method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before...
Design/Logic Flaw
The CBSharedReviewSecurityDialog method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScrip...
Design/Logic Flaw
The CBSharedReviewCloseDialog method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript A...
Design/Logic Flaw
The ANAuthenticateResource method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript API...
Design/Logic Flaw
The CBBBRInvite method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript API execution...
CVE-2015-6724
Technical details for CVE-2015-6724 are not publicly available in the provided connected documents; monitor for updates.
CVE-2014-6724
The affected software is the Android app Soap Making (package com.tapatalk.soapmakingforumcom), version 3.7.13. The root cause is lack of certificate validation for TLS/SSL connections, allowing MITM attackers to spoof servers and extract sensitive information via crafted certificates. Public ref...
CVE-2013-6724
CVE-2013-6724 affects IBM SPSS SamplePower for Windows v3.0.1 through FP1; the vulnerability resides in the vsflex8l ActiveX control (VSFlexGrid8.VSFlexGridL) with the ComboList/ColComboList data handling, allowing remote code execution via a crafted value. IBM notes a fix in SamplePower 3.0.1 FP...
SuSE 11.2 Security Update : quota (SAT Patch Number 6724)
The quota package was updated to fix an issue with tcpwrappers, where hosts.allow/deny files would have not been correctly honored. CVE-2012-3417 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...
CVE-2008-6724
Cross-site scripting XSS vulnerability in index.pl in Perl Nopaste 1.0 allows remote attackers to inject arbitrary web script or HTML via the language parameter. NOTE: some of these details are obtained from third party information...
CVE-2008-6724
CVE-2008-6724 is a cross-site scripting (XSS) vulnerability in index.pl of Perl Nopaste 1.0, allowing remote attackers to inject arbitrary web script or HTML through the language parameter. The available sources confirm the vulnerable component is index.pl in Perl Nopaste 1.0 and the issue is XSS...
CVE-2007-6724
Vidalia bundle before 0.1.2.18, when running on Windows, installs Privoxy with a configuration file config.txt or config that contains an insecure enable-remote-http-toggle setting, which allows remote attackers to bypass intended access restrictions and modify configuration...
CVE-2007-6724
Vidalia bundle prior to 0.1.2.18 on Windows installs Privoxy with a configuration file (config.txt or config) that contains an insecure enable-remote-http-toggle setting. This allows remote attackers to bypass intended access restrictions and modify the Privoxy configuration. Affected component: ...
