139 matches found
Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-5116-2)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5116-2 advisory. It was discovered that a race condition existed in the Atheros Ath9k WiFi driver in the Linux kernel. An attacker could possibly use this to...
Ubuntu: Security Advisory (USN-5116-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-5116-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5116-1 advisory. It was discovered that a race condition existed in the Atheros Ath9k WiFi driver in the Linux kernel. An attacker could possibly use this to...
SUSE: Security Advisory (SUSE-SU-2016:2303-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-5116
CVE-2020-5116 is rejected/not used; this CVE ID does not represent an active vulnerability entry.
CVE-2010-5116
This CVE entry is rejected and not an active vulnerability.
CVE-2013-5116
CVE-2013-5116 affects the Android Evernote app prior to 5.5.1. The vulnerability allows password changes via aone‑click setup introduced by an ADB‑backups backdoor, enabling an attacker with physical access to extract a password reset URL from a backup and reset the user’s password without authen...
CVE-2019-5116
CVE-2019-5116 is a SQL injection vulnerability in YouPHPTube 7.6, present in the authenticated portion of the application. The TALOS/YouPHPTube advisory describes an exploitable flaw in the /objects/videoAddNew.json.php endpoint (parameter categories_id) that can exfiltrate database information (...
CVE-2018-5116
The CVE-2018-5116 entry concerns Mozilla Firefox prior to version 58.0 where WebExtensions with the ActiveTab permission can access cross-origin frames within the active tab, allowing malicious extensions to inject and interact with frames from arbitrary origins and bypass same-origin expectation...
CVE-2018-5116
WebExtensions with the "ActiveTab" permission are able to access frames hosted within the active tab even if the frames are cross-origin. Malicious extensions can inject frames from arbitrary origins into the loaded page and then interact with them, bypassing same-origin user expectations with th...
Ubuntu: Security Advisory (USN-3544-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mozilla Firefox < 58 Multiple Vulnerabilities (macOS)
The version of Mozilla Firefox installed on the remote macOS or Mac OS X host is prior to 58. It is, therefore, affected by multiple vulnerabilities, some of which allow code execution and potentially exploitable crashes. C Tenable Network Security, Inc. include'compat.inc'; if description...
Google Chrome V8 Type confusion (CVE-2017-5116)
A type confusion vulnerability exists in Google Chrome V8 Engine. The vulnerability is due to a race condition. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted web page. Successful exploitation could allow an attacker to execute arbitrary cod...
Google Awards Record $112,500 Bounty for Android Exploit Chain
Prolific bug hunter Guang Gong has earned the highest-ever payout for a vulnerability in the history of Google’s Android Security Rewards program, which began in 2015. He earned a combined $112,500 for the disclosure of an Android exploit chain impacting Google’s Pixel handset that could allow an...
CVE-2017-5116
creationtimestamp| type| source ---|---|--- 2018-01-18 08:28:32+00:00| published-proof-of-concept| https://t.me/R0Crew/386 2018-01-18 09:29:09+00:00| published-proof-of-concept| https://t.me/antichat/660 2018-01-18 10:32:09+00:00| published-proof-of-concept| https://t.me/br0wsec/23 2018-01-22...
Fedora 27 : chromium (2017-109f8db088)
Update to 61.0.3163.100. Security fix for CVE-2017-5111, CVE-2017-5112, CVE-2017-5113, CVE-2017-5114, CVE-2017-5115, CVE-2017-5116, CVE-2017-5117, CVE-2017-5118, CVE-2017-5119, CVE-2017-5120, CVE-2017-5121, CVE-2017-5122 Note that Tenable Network Security has extracted the preceding description...
CVE-2017-17410
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...
Design/Logic Flaw
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...