CVE-2020-5874

CVE-2020-5874 affects BIG-IP APM virtual servers. In certain conditions, specially crafted requests may disrupt the Traffic Management Microkernel (TMM), enabling a DoS on the data plane when OpenID Connect is used. Affected releases include BIG-IP APM: 15.0.0–15.0.1.2, 14.1.0–14.1.2.3, and 14.0....

F5 Networks BIG-IP : BIG-IP APM virtual server vulnerability (K46901953)

In certain circumstances, an attacker sending specifically crafted requests to aBIG-IP APM virtual server may cause a disruption of service provided by the Traffic Management MicrokernelTMM. CVE-2020-5874 Impact An attacker may be able to perform a denial-of-service DoS attack on a BIG-IP system ...

openSUSE: Security Advisory for chromium (openSUSE-SU-2019:2152-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2019-5874

Insufficient filtering in URI schemes in Google Chrome on Windows prior to 77.0.3865.75 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

CVE-2019-5874

Insufficient filtering in URI schemes in Google Chrome on Windows prior to 77.0.3865.75 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

CVE-2019-5874

The connected Debian/Fedora entries confirm CVE-2019-5874 is a Chromium/Chrome vulnerability related to insufficient filtering in external URI handling. Root cause: inadequate filtering of URI schemes in chrome's navigation logic, allowing a crafted HTML page to bypass navigation restrictions. Im...

Debian: Security Advisory (DSA-4562-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 31 : chromium (2019-9a5e81214f)

Chromium update to 77.0.3865.120. For the upstream announcement see https://chromereleases.googleblog.com/2019/10/stable-channel-update-fo r-desktop.html. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...

openSUSE Security Update : chromium (openSUSE-2019-2153)

This update for chromium fixes the following issues : Security issues fixed : - CVE-2019-5870: Fixed a use-after-free in media. boo1150425 - CVE-2019-5871: Fixed a heap overflow in Skia. boo1150425 - CVE-2019-5872: Fixed a use-after-free in Mojo boo1150425 - CVE-2019-5874: Fixed a behavior that...

Google Chrome Security Updates (stable-channel-update-for-desktop-2019-09) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

CVE-2018-5874

While parsing an mp4 file, a stack-based buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear...

CVE-2018-5874

The CVE-2018-5874 issue is a stack-based buffer overflow occurring in the MP4 parser of Qualcomm Snapdragon components: Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear. The root cause is a parsing-time overflow in the MP4 handling, with the impact described as potential arbitrary cod...

CVE-2018-5874

While parsing an mp4 file, a stack-based buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear...

CVE-2017-5874

CSRF exists on D-Link DIR-600M Rev. Cx devices before v3.05ENB01beta20170306. This can be used to bypass authentication and insert XSS sequences or possibly have unspecified other impact...

CVE-2017-5874

CVE-2017-5874 affects D-Link DIR-600M Rev. Cx before v3.05ENB01_beta_20170306. A CSRF flaw exists that can bypass authentication and lead to potentially malicious actions, including insertion of XSS payloads and changing critical settings. Public sources (NVD/CNVD/PRION/PT Security/Exploit-DB) co...

D-Link DIR-600M - Cross-Site Request Forgery

D-Link DIR-600M - Cross-Site Request Forgery Exploit Title:D-link wireless router DIR-600M – Cross-Site Request Forgery CSRF vulnerability Google Dork:N/A Date: 07/02/2017 Exploit Author:Ajay S. Kulal www.twitter.com/ajaykulal Vendor Homepage:dlink.com Software Link:N/A Version:Hardware version: ...

Siemens SIMATIC NET PC-Software Denial-of-Service Vulnerability

OVERVIEW Siemens has identified a denial-of-service vulnerability in SIMATIC NET PC-Software. Vladimir Dashchenko and Sergey Temnikov from Kaspersky Labs reported this issue directly to Siemens. Siemens has produced a new version to mitigate this vulnerability. This vulnerability could be exploit...

CVE-2015-5874

CVE-2015-5874 affects CoreText in iOS (pre-9) and the iTunes desktop app (pre-12.3). A crafted font file can cause remote code execution or memory corruption. Affected components: CoreText processing; the issue is exploitable via crafted font data delivered remotely. Remediation per documents: up...

CVE-2014-5874

Summary: CVE-2014-5874 affects the SplashID Android app (com.splashidandroid) version 7.2.2. The root cause is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The co...

CVE-2013-5874

CVE-2013-5874 concerns an unspecified vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (versions 11.5.10.2, 12.0.6, 12.1.3, 12.2.2) that allows local users to affect confidentiality via unknown vectors related to Logging. Exploitation details are not pro...