CVE-2024-0606

An attacker could execute unauthorized script on a legitimate site through UXSS using window.open by opening a javascript URI leading to unauthorized actions within the user's loaded webpage. This vulnerability affects Focus for iOS 122...

CVE-2024-0606

An attacker could execute unauthorized script on a legitimate site through UXSS using window.open by opening a javascript URI leading to unauthorized actions within the user's loaded webpage. This vulnerability affects Focus for iOS 122...

CVE-2024-0606

CVE-2024-0606 affects Mozilla Focus for iOS before version 122. The issue is a UXSS vulnerability where an attacker can execute unauthorized scripts on a legitimate site by opening a javascript: URI via window.open(), leading to unauthorized actions within the user’s loaded webpage. Connected sou...

Critical Photon OS Security Update - PHSA-2023-3.0-0606

Updates of 'linux-aws', 'kube-bench', 'nginx-ingress', 'linux', 'nodejs', 'linux-secure', 'linux-esx', 'linux-rt', 'nxtgn-openssl', 'ntp' packages of Photon OS have been released...

Splunk Enterprise 8.1.0 < 8.1.14, 8.2.0 < 8.2.11, 9.0.0 < 9.0.5 (SVD-2023-0606)

The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2023-0606 advisory. - In Splunk Enterprise versions below 9.1.0.2, 9.0.5.1, and 8.2.11.2, an attacker can inject American National Standards...

SUSE CVE-2021-0606

In drmsyncobjhandletofd of drmsyncobj.c, there is a possible use after free due to incorrect refcounting. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

Oracle Linux 8 : thunderbird (ELSA-2023-0606)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-0606 advisory. 102.7.1-2.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 102.7.1-2 - Update to 102.7.1 build2 Tenable has extracted...

RHEL 8 : thunderbird (RHSA-2023:0606)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:0606 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.7.1. Security Fixes: Mozilla: Revocati...

CVE-2023-0606

Cross-site Scripting XSS - Reflected in GitHub repository ampache/ampache prior to 5.5.7...

UBUNTU-CVE-2023-0606

Cross-site Scripting XSS - Reflected in GitHub repository ampache/ampache prior to 5.5.7...

CVE-2023-0606 Cross-site Scripting (XSS) - Reflected in ampache/ampache

Cross-site Scripting XSS - Reflected in GitHub repository ampache/ampache prior to 5.5.7...

CVE-2023-0606 Cross-site Scripting (XSS) - Reflected in ampache/ampache

Cross-site Scripting XSS - Reflected in GitHub repository ampache/ampache prior to 5.5.7...

CVE-2023-0606

CVE-2023-0606 is a reflected Cross-site Scripting (XSS) vulnerability in the Ampache web application, occurring in ampache/ampache prior to version 5.5.7. The issue arises from how URL-specific parameters can be manipulated to execute script in a victim’s browser. Several connected sources descri...

CVE-2023-0606 Cross-site Scripting (XSS) - Reflected in ampache/ampache

Cross-site Scripting XSS - Reflected in GitHub repository ampache/ampache prior to 5.5.7...

Ransom.Conti MVID-2022-0606 Code Execution

Discovery / credits: Malvuln John Page aka hyp3rlinx c 2022 Original source: https://malvuln.com/advisory/eedd1cfc7acd012bbec464aebc679ee4.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Ransom.Conti Vulnerability: Code Execution Description: Conti looks for and executes DLLs ...

CVE-2022-0606

Use after free in ANGLE in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2022-0606

Use after free in ANGLE in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2022-0606

Use after free in ANGLE in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2022-0606

Use after free in ANGLE in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2022-0606

CVE-2022-0606 is a Use-after-Free in ANGLE affecting Google Chrome prior to 98.0.4758.102. The vulnerability could allow a remote attacker to cause heap corruption via a crafted HTML page. Affected component is ANGLE within Chrome/Chromium. The fix was released in Chrome 98.0.4758.102 (stable cha...