75 matches found
ROOT-OS-DEBIAN-12-CVE-2023-6039 CVE-2023-6039 in linux - Patched by Root
Root has patched CVE-2023-6039 in the linux package for Root:Debian:12. Multiple fixed versions available...
SUSE SLED15: libreoffice / libreoffice-base / libreoffice-base-drivers-firebird / etc (SUSE-SU-2026:3140-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3140-1 advisory. Update to LibreOffice 26.2.5.1. Security issues fixed: - CVE-2026-4430: out-of-bounds write via crafted OOXML...
Security update for libreoffice
This update for libreoffice fixes the following issues: Update to LibreOffice 26.2.5.1. Security issues fixed: CVE-2026-4430: out-of-bounds write via crafted OOXML documents with mismatched encryption salt parameters bsc1264357. CVE-2026-6039: denial of service via specially crafted DXF polyline...
Linux Distros Unpatched Vulnerability : CVE-2026-6039
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibreOffice can import drawings in the DXF format used by CAD software. A heap buffer overflow existed when importing a DXF polyline. The point count taken from...
ECHO-FD8A-6039-C2C3
Bulletin has no description...
Linux Distros Unpatched Vulnerability : CVE-2018-6039
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient data validation in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user cross-origin data via a...
CVE-2025-6039
creationtimestamp| type| source ---|---|--- 2025-07-07 15:14:18+00:00| seen| Telegram/PW3Jv0LvM8ZoRLikixTRughEUhK3M9n4d76XOr9xi3hug...
CVE-2025-6039
The ProcessingJS for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'pjs4wp' shortcode in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2025-6039 ProcessingJS for WordPress <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
The ProcessingJS for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'pjs4wp' shortcode in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2025-6039
CVE-2025-6039 affects the ProcessingJS for WordPress plugin. The vulnerability is a Stored Cross-Site Scripting (XSS) via the plugin’s pjs4wp shortcode in all versions up to and including 1.2.2. With authenticated access at contributor level or higher , an attacker can inject scripts that execute...
WordPress ProcessingJS for WordPress plugin <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by johska in WordPress Plugin ProcessingJS for WordPress versions = 1.2.2...
CVE-2024-6039
A vulnerability, which was classified as critical, was found in Feng Office 3.11.1.2. Affected is an unknown function of the component Workspaces. The manipulation of the argument dim leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the publi...
CVE-2024-6039
creationtimestamp| type| source ---|---|--- 2025-04-11 21:02:23+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lmkw4c3ryk27...
Linux Distros Unpatched Vulnerability : CVE-2023-6039
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free flaw was found in lan78xxdisconnect in drivers/net/usb/lan78xx.c in the network sub- component, net/usb/lan78xx in the Linux Kernel. This flaw...
ManageEngine Eventlog Analyzer Managed Hosts Administrator Credential Disclosure
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rexml/document' class MetasploitModule 'ManageEngine Eventlog Analyzer Managed Hosts Administrator Credential Disclosure', 'Description' = %q ManageEngine...
CVE-2024-6039
A vulnerability, which was classified as critical, was found in Feng Office 3.11.1.2. Affected is an unknown function of the component Workspaces. The manipulation of the argument dim leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the publi...
CVE-2024-6039 Feng Office Workspaces sql injection
A vulnerability, which was classified as critical, was found in Feng Office 3.11.1.2. Affected is an unknown function of the component Workspaces. The manipulation of the argument dim leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the publi...
CVE-2024-6039 Feng Office Workspaces sql injection
A vulnerability, which was classified as critical, was found in Feng Office 3.11.1.2. Affected is an unknown function of the component Workspaces. The manipulation of the argument dim leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the publi...
CVE-2024-6039
CVE-2024-6039 affects Feng Office 3.11.1.2 in the Workspaces component. The vulnerability stems from improper handling of the dim argument, leading to a SQL injection that can be triggered remotely. Public exploit info is noted in multiple sources. Impact is described as critical in the CVE recor...
Ubuntu: Security Advisory (USN-6706-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...