CVE-2020-6738

CVE-2020-6738 entry is rejected/not used; this candidate does not represent an active vulnerability.

CVE-2019-6738

CVE-2019-6738 affects Bitdefender SafePay 23.0.10.34. The flaw lies in TIScript processing during the launch method, where a user-supplied string is not properly validated before it is used to execute a system call. This allows remote code execution in the context of the current process, requirin...

Security Bulletin: Cross-site scripting in Oauth (CVE-2013-6738)

Summary Cross-site scripting in Oauth Vulnerability Details CVE ID: CVE-2013-6738 DESCRIPTION: OAuth /authorize endpoint will return an invalid query param in the response. This allows a script to be injected in the response. CVSS: CVSS Base Score: 4.3 CVSS Temporal Score: See for the current sco...

Google Nexus Qualcomm Crypto Engine Driver Privilege Escalation Vulnerability(CVE-2016-6738)

No description provided by source. https://github.com/jiayy/androidvulnpoc-exp/tree/master/EXP-CVE-2016-6738...

CVE-2017-6738

Cisco IOS and IOS XE SNMP subsystem contains multiple buffer overflow vulnerabilities that could allow an authenticated, remote attacker to execute arbitrary code or cause a reload via crafted SNMP packets over IPv4/IPv6. Affected are SNMP versions 1–3; for SNMPv2c/earlier, attacker needs the rea...

CVE-2017-6738

The Simple Network Management Protocol SNMP subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these...

SNMP Remote Code Execution Vulnerabilities in Cisco IOS Software (cisco-sa-20170629-snmp)

The Simple Network Management Protocol SNMP subsystem of Cisco IOS Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these vulnerabilities by...

CVE-2016-6738

An elevation of privilege vulnerability in the Qualcomm crypto engine driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process...

CVE-2016-6738

CVE-2016-6738 is an elevation of privilege vulnerability in the Qualcomm crypto engine driver for Android. The issue could allow a local malicious application to execute arbitrary code in the kernel context, requiring initial compromise of a privileged process. The description and related records...

CVE-2013-6738

CVE-2013-6738 is an XSS vulnerability in IBM SmartCloud Analytics Log Analysis (OAuth endpoint) and in IBM WebSphere Application Server OAuth functionality. The initial entry states that IBM SmartCloud Analytics Log Analysis 1.1 and 1.2 prior to 1.2.0.0-CSI-SCALA-IF0003 can be exploited to inject...

Fedora Update for thunderbird-lightning FEDORA-2012-6738

Check for the Version of thunderbird-lightning OpenVAS Vulnerability Test Fedora Update for thunderbird-lightning FEDORA-2012-6738 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

pyftpdlib FTP Server Information Disclosure Vulnerability

This host is running pyftpdlib FTP server and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbpyftpdlibinfodiscvuln.nasl 7573 2017-10-26 09:18:50Z cfischer $ pyftpdlib FTP Server Information Disclosure Vulnerability Authors: Sooraj KS Copyright: Copyright c 201...

CVE-2007-6738

CVE-2007-6738 affects pyftpdlib prior to 0.1.1. The PASV command uses a non-random port value, enabling remote attackers to infer the number of in‑progress data connections by reading the response. Impact is information disclosure. Mitigation: upgrade to 0.1.1 or later (per the cited descriptions...

CVE-2008-6738

CVE-2008-6738 affects MyShoutPro 1.2. The vulnerability enables remote attackers to bypass authentication and gain administrative access by setting the admin_access cookie to 1, effectively elevating privileges via the web session management mechanism. The CVSS data indicates network exposure wit...

CVE-2008-6738

creationtimestamp| type| source ---|---|--- 2008-06-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5845...

CVE-2006-6738

The CVE-2006-6738 entry concerns PHP remote file inclusion in statistic.php of cwmCounter 5.1.1 and earlier. The underlying issue is that an attacker can pass a URL in the path parameter, enabling remote PHP code execution on the affected system. The NVD entry assigns a base CVSSv2 score of 6.8 (...