CVE-2024-6734 itsourcecode Tailoring Management System templateadd.php sql injection

A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been classified as critical. This affects an unknown part of the file templateadd.php. The manipulation of the argument title/msg leads to sql injection. It is possible to initiate the attack remotely. The exploit h...

Ubuntu: Security Advisory (USN-6734-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 24.04 LTS. : libvirt vulnerabilities (USN-6734-2)

The remote Ubuntu 24.04 LTS. host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6734-2 advisory. USN-6734-1 fixed vulnerabilities in libvirt. This update provides the corresponding updates for Ubuntu 24.04 LTS. Tenable has extracted the preceding...

Ubuntu 20.04 LTS / 22.04 LTS / 23.10 : libvirt vulnerabilities (USN-6734-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6734-1 advisory. Alexander Kuznetsov discovered that libvirt incorrectly handled certain API calls. An attacker could possibly use this issue to cause...

CVE-2020-6734

...

CVE-2020-6734

CVE-2020-6734 entry is rejected/not used per the Initial Description.

CVE-2019-6734

This CVE (CVE-2019-6734) concerns Foxit PhantomPDF/Reader components vulnerable via the JavaScript setInterval handling, leading to a use-after-free condition that can disclose memory content. Affected products are Foxit PhantomPDF (and Foxit Reader per CNVD/PRION references) with unspecified exa...

CVE-2017-6734

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of an affected device, related to the Guest Portal. More Information:...

CVE-2017-6734

CVE-2017-6734 concerns a cross-site scripting (XSS) vulnerability in the Cisco Identity Services Engine (ISE) web-based management interface, specifically related to the Guest Portal. An authenticated remote attacker could exploit insufficient validation of user-supplied input to execute arbitrar...

CVE-2016-6734

An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which...

Privilege escalation

An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which...

CVE-2016-6734

CVE-2016-6734 concerns the NVIDIA GPU driver on Android. The issue is an elevation of privilege that could allow a local malicious app to execute arbitrary code in the kernel context. Affected environment is Android platforms prior to the 2016-11-05 security patch level. The underlying impact is ...

CVE-2015-6734

Cross-site scripting XSS vulnerability in contrib/cssgen.php in the GeSHi, as used in the SyntaxHighlightGeSHi extension and MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-6734

CVE-2015-6734 is a cross-site scripting vulnerability in contrib/cssgen.php of GeSHi used by MediaWiki. Affected are MediaWiki versions: <1.23.10, 1.24.x <1.24.3, and 1.25.x

CVE-2014-6734

The CVE-2014-6734 entry concerns the Android app Wine Making (com.gcspublishing.winemakingtalk) version 3.7.15. The vulnerability is a failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certif...

CVE-2013-6734

CVE-2013-6734 affects IBM WebSphere eXtreme Scale Client versions 7.1.0.x–8.6.0.4 (and WebSphere DataPower XC10 Appliance) where cached HTTP session data can be read by another user when sharing the same web container. The underlying issue is improper isolation of cached data, enabling informatio...

CVE-2007-6734

NWFTPD.nlm before 5.08.07 in the FTP server in Novell NetWare 6.5 SP7 does not properly implement the FTPREST.TXT NOREMOTE restriction, which allows remote authenticated users to access directories outside of the home server via unspecified vectors...

CVE-2007-6734

The vulnerability CVE-2007-6734 affects NWFTPD.nlm before 5.08.07 in the NetWare 6.5 SP7 FTP server. The issue is improper implementation of the FTPREST.TXT NOREMOTE restriction, potentially allowing remote authenticated users to access directories outside the home server via unspecified vectors....

CVE-2008-6734

Directory traversal vulnerability in Public/index.php in Keller Web Admin CMS 0.94 Pro allows remote attackers to include and execute arbitrary local files via a .. dot dot in the action parameter...

CVE-2008-6734

CVE-2008-6734 affects Keller Web Admin CMS 0.94 Pro. A directory traversal vulnerability exists in Public/index.php that lets an attacker cause local file inclusion via a .. in the action parameter, potentially enabling arbitrary code execution. The linked records confirm the issue and affected c...