CVE-2024-0406

creationtimestamp| type| source ---|---|--- 2024-02-01 19:01:53+00:00| seen| https://t.me/ctinow/177740 2025-01-14 14:03:14+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lfpg4tm6kb2j 2025-01-14 14:34:04+00:00| seen|...

CVE-2024-0406

A flaw was discovered in the mholt/archiver package. This flaw allows an attacker to create a specially crafted tar file, which, when unpacked, may allow access to restricted files or directories. This issue can allow the creation or overwriting of files with the user's or application's privilege...

Moderate: Red Hat Security Advisory: protobuf-c security update

An update for protobuf-c is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...

RHEL 8 : protobuf-c (RHSA-2024:0406)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:0406 advisory. The protobuf-c packages provide C bindings for Google's Protocol Buffers. Security Fixes: protobuf-c: unsigned integer overflow in parserequiredmembe...

Malicious code in wlwz-2312-0406 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb1ce379f0e2430b4fed538c5cc3943af828a049e42c2d022493dcd80875aa5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Important Photon OS Security Update - PHSA-2023-4.0-0406

Updates of 'linux-rt', 'openssl', 'linux-aws', 'linux-secure' packages of Photon OS have been released...

SUSE CVE-2015-0406

Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality and availability via unknown vectors related to Deployment...

CVE-2023-0406

creationtimestamp| type| source ---|---|--- 2023-01-19 20:22:28+00:00| seen| https://t.me/cibsecurity/56733 2025-04-03 17:35:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10282...

CVE-2023-0406

The CVE-2023-0406 case concerns the modoboa/modoboa project, where a Cross-Site Request Forgery (CSRF) vulnerability affects versions prior to 2.0.4. The available connected records consistently identify the issue as a CSRF in the GitHub repository modoboa/modoboa and describe the functional impa...

CVE-2023-0406 Cross-Site Request Forgery (CSRF) in modoboa/modoboa

Cross-Site Request Forgery CSRF in GitHub repository modoboa/modoboa prior to 2.0.4...

Important Photon OS Security Update - PHSA-2022-3.0-0406

Updates of 'vim', 'python-lxml', 'curl' packages of Photon OS have been released...

CVE-2022-0406

creationtimestamp| type| source ---|---|--- 2022-04-03 22:26:55+00:00| seen| https://t.me/cibsecurity/40072...

CVE-2022-0406 Improper Authorization in janeczku/calibre-web

Improper Authorization in GitHub repository janeczku/calibre-web prior to 0.6.16...

CVE-2022-0406

CVE-2022-0406 affects janeczku/calibre-web (Calibre-Web) prior to 0.6.16, with an improper authorization flaw in shelf order handling. The root cause cited: shelf.py order_shelf path does not verify user permissions before processing POST data, allowing low-privilege users to edit the sort order ...

Mageia: Security Advisory (MGASA-2014-0184)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2017-0406)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-0406

CVE-2021-0406 is associated with MediaTek’s cameraisp on Android 10 and 11, where a missing bounds check can cause an out-of-bounds write. The flaw enables local escalation of privileges to System level with no user interaction required. Affected component: cameraisp image processor; root cause: ...

CVE-2021-0406

In cameraisp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS0547141...

CVE-2020-0406

CVE-2020-0406 affects Android 11 via the libmpeg2dec component. The issue is an out-of-bounds write caused by a missing bounds check in libmpeg2dec, enabling local privilege escalation if triggered with certain parameters; exploitation requires user interaction and does not require prior executio...

RHEL 7 : containernetworking-plugins (RHSA-2020:0406)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:0406 advisory. The Container Network Interface CNI project consists of a specification and libraries for writing plug- ins for configuring network interfac...