Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-6726-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6726-1 advisory. Pratyush Yadav discovered that the Xen network backend implementation in the Linux kernel did not properly handle zero length data request,...

CVE-2020-6726

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2020. Notes: none...

CVE-2020-6726

...

CVE-2020-6726

CVE-2020-6726 entry is rejected and not used.

CVE-2019-6726

The WP Fastest Cache plugin through 0.8.9.0 for WordPress allows remote attackers to delete arbitrary files because wppostratingsclearfastestcache and rmfolderrecursively in wpFastestCache.php mishandle ../ in an HTTP Referer header...

CVE-2019-6726

Summary: CVE-2019-6726 affects the WordPress plugin WP Fastest Cache ≤ 0.8.9.0. The vulnerability allows an unauthenticated, remote attacker to delete arbitrary files by abusing the HTTP Referer header in the functions wp_postratings_clear_fastest_cache and rm_folder_recursively in wpFastestCache...

WordPress Fastest Cache Plugin Arbitrary File Deletion (CVE-2019-6726)

An arbitrary file deletion vulnerability exists in WordPress Fastest Cache Plugin. A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted request to the target system...

WordPress WP Fastest Cache 0.8.9.0 Arbitrary File Deletion

The wordpress plugin "WP Fastest Cache" 0 suffered from an arbitrary file deletion bug. Description A successful attack allows an unauthenticated attacker to specify a path to a directory from which files and directories will be deleted recursively. The vulnerable code path extracts the path...

CVE-2017-6726

CVE-2017-6726 affects the CLI of Cisco Prime Network Gateway. The vulnerability allows an authenticated, local attacker to retrieve system process information, potentially leading to confidential information disclosure. Affected release noted: 4.2(1.0)P1. The issue stems from insufficient input/v...

CVE-2016-6726

Unspecified vulnerability in Qualcomm components in Android on Nexus 6 and Android One devices...

CVE-2016-6726

Technical details about CVE-2016-6726 are not provided in the supplied documents. The NVD record lists an unspecified vulnerability in Qualcomm components on Nexus 6/Android One. Monitor for updates.

CVE-2016-6726

Unspecified vulnerability in Qualcomm components in Android on Nexus 6 and Android One devices...

CVE-2014-6726

The CVE-2014-6726 entry concerns the Android app 30A (com.app30a) version 5.26.2. The vulnerability is that the application does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The pr...

BACnet/IP Protocol Detection (SCADA)

Binary data 6726.prm...

SuSE 10 Security Update : the Linux Kernel (i386) (ZYPP Patch Number 6726)

This update fixes a several security issues and various bugs in the SUSE Linux Enterprise 10 SP 2 kernel. The following security issues were fixed: CVE-2009-3939: A sysctl variable of the megaraidsas driver was worldwriteable, allowing local users to cause a denial of service or potential code...

CVE-2008-6726

Multiple directory traversal vulnerabilities in CMScout 2.06, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the bit parameter to 1 admin.php and 2 index.php, different vectors than CVE-2008-3415...

CVE-2008-6726

CVE-2008-6726 describes multiple directory traversal vulnerabilities in CMScout 2.06. When register_globals is enabled, an attacker can abuse a .. path in the bit parameter to admin.php or index.php to include and execute arbitrary local files. The issue is distinct from CVE-2008-3415. The provid...

CVE-2007-6726

CVE-2007-6726 refers to multiple XSS vulnerabilities in Dojo 0.4.1 and 0.4.2 as used in Apache Struts and other products. The issues allow remote injection of arbitrary script/HTML via vectors involving xip_client.html and xip_server.html in src/io/. The NVD entry lists a MEDIUM severity (CVSSv2:...

CVE-2008-6726

creationtimestamp| type| source ---|---|--- 2008-12-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7625...

CVE-2006-6726

The CVE affects inertianews 0.02 beta, where inertianews_main.php contains a PHP remote file inclusion vulnerability. An attacker can pass a URL in the inews_path parameter to include and execute remote PHP code on the server, enabling arbitrary code execution and potential impact to confidential...