40 matches found
Ubuntu 20.04 LTS / 22.04 LTS / 23.10 : libvirt vulnerabilities (USN-6734-1)
The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6734-1 advisory. Alexander Kuznetsov discovered that libvirt incorrectly handled certain API calls. An attacker could possibly use this issue to cause...
CVE-2020-6734
CVE-2020-6734 entry is rejected/not used per the Initial Description.
CVE-2019-6734
This CVE (CVE-2019-6734) concerns Foxit PhantomPDF/Reader components vulnerable via the JavaScript setInterval handling, leading to a use-after-free condition that can disclose memory content. Affected products are Foxit PhantomPDF (and Foxit Reader per CNVD/PRION references) with unspecified exa...
CVE-2017-6734
A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of an affected device, related to the Guest Portal. More Information:...
CVE-2017-6734
CVE-2017-6734 concerns a cross-site scripting (XSS) vulnerability in the Cisco Identity Services Engine (ISE) web-based management interface, specifically related to the Guest Portal. An authenticated remote attacker could exploit insufficient validation of user-supplied input to execute arbitrar...
CVE-2016-6734
An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which...
Privilege escalation
An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which...
CVE-2016-6734
CVE-2016-6734 concerns the NVIDIA GPU driver on Android. The issue is an elevation of privilege that could allow a local malicious app to execute arbitrary code in the kernel context. Affected environment is Android platforms prior to the 2016-11-05 security patch level. The underlying impact is ...
CVE-2015-6734
Cross-site scripting XSS vulnerability in contrib/cssgen.php in the GeSHi, as used in the SyntaxHighlightGeSHi extension and MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-6734
CVE-2015-6734 is a cross-site scripting vulnerability in contrib/cssgen.php of GeSHi used by MediaWiki. Affected are MediaWiki versions: <1.23.10, 1.24.x <1.24.3, and 1.25.x
CVE-2014-6734
The CVE-2014-6734 entry concerns the Android app Wine Making (com.gcspublishing.winemakingtalk) version 3.7.15. The vulnerability is a failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certif...
CVE-2013-6734
CVE-2013-6734 affects IBM WebSphere eXtreme Scale Client versions 7.1.0.x–8.6.0.4 (and WebSphere DataPower XC10 Appliance) where cached HTTP session data can be read by another user when sharing the same web container. The underlying issue is improper isolation of cached data, enabling informatio...
CVE-2007-6734
NWFTPD.nlm before 5.08.07 in the FTP server in Novell NetWare 6.5 SP7 does not properly implement the FTPREST.TXT NOREMOTE restriction, which allows remote authenticated users to access directories outside of the home server via unspecified vectors...
CVE-2007-6734
The vulnerability CVE-2007-6734 affects NWFTPD.nlm before 5.08.07 in the NetWare 6.5 SP7 FTP server. The issue is improper implementation of the FTPREST.TXT NOREMOTE restriction, potentially allowing remote authenticated users to access directories outside the home server via unspecified vectors....
CVE-2008-6734
Directory traversal vulnerability in Public/index.php in Keller Web Admin CMS 0.94 Pro allows remote attackers to include and execute arbitrary local files via a .. dot dot in the action parameter...
CVE-2008-6734
CVE-2008-6734 affects Keller Web Admin CMS 0.94 Pro. A directory traversal vulnerability exists in Public/index.php that lets an attacker cause local file inclusion via a .. in the action parameter, potentially enabling arbitrary code execution. The linked records confirm the issue and affected c...
CVE-2008-6734
creationtimestamp| type| source ---|---|--- 2008-06-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5940 2008-06-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5956...
CVE-2006-6734
CVE-2006-6734 describes a cross-site scripting (XSS) vulnerability in Minh Nguyen Duong Obie Website Mini Web Shop 2.1.c. The issue allows remote attackers to inject arbitrary web script or HTML via the catname parameter to modules/viewcategory.php. Connected records corroborate the same product ...