61 matches found
CVE-2024-5496
Use after free in Media Session in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2023-5496
creationtimestamp| type| source ---|---|--- 2023-10-10 20:22:51+00:00| seen| https://t.me/cibsecurity/71986 2025-06-16 17:37:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18482...
CVE-2023-5496 Translator PoqDev Add-On Select Text cross site scripting
A vulnerability was found in Translator PoqDev Add-On 1.0.11 on Firefox. It has been rated as problematic. This issue affects some unknown processing of the component Select Text Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The complexity of an...
CVE-2023-5496
The CVE-2023-5496 entry concerns Translator PoqDev Add-On 1.0.11 for Firefox, where the Select Text Handler component is affected. The root cause is a cross-site scripting (XSS) vulnerability arising from unknown processing in the Select Text Handler, enabling remote initiation. Exploitation is d...
Debian DSA-5496-1 : firefox-esr - security update
The remote Debian 11 / 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5496 advisory. - Heap buffer overflow in WebP in Google Chrome prior to 116.0.5845.187 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page...
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : cloud-init vulnerability (USN-5496-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-5496-1 advisory. Mike Stroyan discovered that cloud-init could log password hashes when reporting schema failures. An attacker with access to these logs...
SUSE-SU-2020:0393-1 Security update for fontforge
This update for fontforge fixes the following issues: - CVE-2020-5395: Fixed a use-after-free in SFDGetFontMetaData bsc1160220. - CVE-2020-5496: Fixed a heap-based buffer overflow in Type2NotDefSplines bsc1160236...
openSUSE Security Update : fontforge (openSUSE-2020-89)
This update for fontforge fixes the following issues : - CVE-2020-5395: Fixed a use-after-free in SFDGetFontMetaData bsc1160220. - CVE-2020-5496: Fixed a heap-based buffer overflow in Type2NotDefSplines bsc1160236. This update was imported from the SUSE:SLE-15:Update update project. C Tenable...
SUSE SLED15 / SLES15 Security Update : fontforge (SUSE-SU-2020:0118-1)
This update for fontforge fixes the following issues : CVE-2020-5395: Fixed a use-after-free in SFDGetFontMetaData bsc1160220. CVE-2020-5496: Fixed a heap-based buffer overflow in Type2NotDefSplines bsc1160236. Note that Tenable Network Security has extracted the preceding description block...
SUSE-SU-2020:0118-1 Security update for fontforge
This update for fontforge fixes the following issues: - CVE-2020-5395: Fixed a use-after-free in SFDGetFontMetaData bsc1160220. - CVE-2020-5496: Fixed a heap-based buffer overflow in Type2NotDefSplines bsc1160236...
UBUNTU-CVE-2020-5496
FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines function in splinesave.c...
CVE-2020-5496
FontForge 20190801 is affected by a heap-based buffer overflow in Type2NotDefSplines() (splinesave.c) linked to CVE-2020-5496. Connected advisories confirm the issue across multiple distros, e.g., openSUSE openSUSE-2020:89, Debian DLA-3754-1, SUSE-SU-2020:0118-1, Mageia MGASA-2020-0057, and Gento...
CVE-2019-5496
Oncommand Insight versions prior to 7.3.5 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors...
CVE-2019-5496
Oncommand Insight versions prior to 7.3.5 are affected by CVE-2019-5496 due to missing HTTP security headers, which could allow an attacker to obtain sensitive information via unspecified vectors. The connected NVD entry lists CVSS scores (2.0/3.0) indicating network access with no authentication...
CVE-2018-5496
Data ONTAP operating in 7-Mode versions prior to 8.2.5P2 are susceptible to a vulnerability which discloses sensitive information to an unauthorized user...
CVE-2018-5496
CVE-2018-5496 affects Data ONTAP in 7-Mode versions prior to 8.2.5P2, where a vulnerability allows disclosure of sensitive information to an unauthorized user. The available sources indicate this issue impacts those specific 7-Mode releases, but the documents do not provide additional technical d...
FLIR Brickstream 3D+ - RTSP Stream Disclosure Vulnerability
Exploit for hardware platform in category web applications FLIR Systems FLIR Brickstream 3D+ Unauthenticated RTSP Stream Disclosure Vendor: FLIR Systems, Inc. Product web page: http://www.brickstream.com Affected version: Firmware: 2.1.742.1842 Api: 1.0.0 Node: 0.10.33 Onvif: 0.1.1.47 Summary: Th...
FLIR Systems FLIR Brickstream 3D+ Unauthenticated RTSP Stream Disclosure
FLIR Systems FLIR Brickstream 3D+ Unauthenticated RTSP Stream Disclosure Vendor: FLIR Systems, Inc. Product web page: http://www.brickstream.com Affected version: Firmware: 2.1.742.1842 Api: 1.0.0 Node: 0.10.33 Onvif: 0.1.1.47 Summary: The Brickstream line of sensors provides highly accurate,...
FLIR Brickstream 3D+ - RTSP Stream Disclosure
FLIR Brickstream 3D+ - RTSP Stream Disclosure FLIR Systems FLIR Brickstream 3D+ Unauthenticated RTSP Stream Disclosure Vendor: FLIR Systems, Inc. Product web page: http://www.brickstream.com Affected version: Firmware: 2.1.742.1842 Api: 1.0.0 Node: 0.10.33 Onvif: 0.1.1.47 Summary: The Brickstream...