CVE-2021-0654

Summary: CVE-2021-0654 affects Android Pixel launcher (CVE entry tied to Android kernel/TaskThumbnailView.java) with information disclosure from locked profiles due to a missing permission check in isRealSnapshot. Exploitation requires user interaction; local information disclosure is possible wi...

CVE-2020-0654

CVE-2020-0654 affects Microsoft OneDrive App for Android. A security feature bypass exists where an attacker could bypass passcode or fingerprint requirements by abusing how sharing links are handled. The issue is addressed by a security update that fixes the way the OneDrive Android app processe...

CVE-2019-0654

Technical details about CVE-2019-0654 are not publicly available in the provided documents. Monitor for updates from official advisories for affected products, impact, and fixes.

KLA11422 Multiple vulnerabilities in Microsoft Browsers

Multiple vulnerabilities were found in Microsoft Browsers. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, obtain sensitive information, gain privileges, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A memory...

CVE-2018-0654

Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote attackers to inject arbitrary web script or HTML via the modal for creating Wiki page...

CVE-2018-0654

GROWI (WESEEK) contains a Reflected XSS in the modal for creating a Wiki page affecting v3.1.11 and earlier. An attacker can inject arbitrary scripts, potentially affecting a logged-in user’s browser. Affected component is the Wiki page creation UI; root cause is input handling in the modal. Reme...

RHEL 7 : kernel-alt (RHSA-2018:0654)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:0654 advisory. The kernel-alt packages provide the Linux kernel version 4.x. The following packages have been upgraded to a later upstream version:...

CVE-2001-0654

...

CVE-2001-0654

CVE-2001-0654 is rejected and not used; it does not represent an active vulnerability entry.

Oracle Linux 6 : coreutils (ELSA-2017-0654)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-0654 advisory. - su: deny killing other processes with root privileges CVE-2017-2616 Tenable has extracted the preceding description block directly from the Oracle Linux...

UBUNTU-CVE-2016-0654

Unspecified vulnerability in Oracle MySQL 5.7.10 and earlier allows local users to affect availability via vectors related to InnoDB, a different vulnerability than CVE-2016-0656...

CVE-2016-0654

CVE-2016-0654 is described in connected documents as an unspecified vulnerability in the InnoDB subcomponent of Oracle MySQL Server, affecting 5.7.x releases prior to 5.7.11. The vulnerability is reported to allow local attackers to affect availability (DoS). The vulnerability is listed among mul...

CVE-2015-0654

Cisco IPS CVE-2015-0654 is a race condition in the TLS subsystem of MainApp on the management interface that can be exploited by remote attackers establishing numerous HTTPS sessions to cause the MainApp process to become unresponsive (DoS). Affected software is Cisco IPS Software prior to 7.3(3)...

CVE-2014-0654

The Cisco Context Directory Agent (CDA) is affected by CVE-2014-0654 due to insufficient validation of RADIUS accounting messages. A remote, unauthenticated attacker can replay crafted messages to modify the CDA cache. The vulnerability could affect the contents of the CDA cache; Cisco notes that...

GE Intelligent Platforms Proficy Cimplicity Multiple Vulnerabilities

Overview This advisory provides mitigation details for multiple vulnerabilities that impact GE Intelligent Platforms Proficy HMI/SCADA—CIMPLICITY. General Electric GE has addressed two vulnerabilities in GE Intelligent Platforms Proficy HMI/SCADA—CIMPLICITY: a directory transversal vulnerability...

CVE-2013-0654

CVE-2013-0654 affects GE Intelligent Platforms Proficy HMI/SCADA—CIMPLICITY (Proficy CIMPLICITY 4.01–8.0 and related CIMPLICITY Process Systems). The CimWebServer component (WebView CimWeb) mishandles input; an attacker sending a crafted packet to port 80/TCP could trigger directory traversal or ...

Mac OS X Multiple Vulnerabilities (2012-002)

This host is missing an important security update according to Mac OS X 10.6.8 Update/Mac OS X Security Update 2012-002. OpenVAS Vulnerability Test $Id: gbmacosxsu12-002.nasl 6521 2017-07-04 14:51:10Z cfischer $ Mac OS X Multiple Vulnerabilities 2012-002 Authors: Madhuri D Copyright: Copyright c...

Mac OS X Multiple Vulnerabilities (2012-002)

This host is missing an important security update according to Mac OS X 10.6.8 Update/Mac OS X Security Update 2012-002. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2012-0654

CVE-2012-0654 affects Apple Mac OS X prior to 10.7.4, where libsecurity during X.509 certificate processing can access uninitialized memory, allowing remote code execution or a denial-of-service (application crash). The vulnerability is addressed by Apple’s Security Update (HT5281) mentioned in t...

CVE-2012-0654

libsecurity in Apple Mac OS X before 10.7.4 accesses uninitialized memory locations during the processing of X.509 certificates, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted certificate...