Videolabs libmicrodns 0.1.0 resource allocation denial-of-service vulnerabilities

Summary Multiple exploitable denial-of-service vulnerabilities exist in the resource allocation handling of Videolabs libmicrodns 0.1.0. When encountering errors while parsing mDNS messages, some allocated data is not freed, possibly leading to a denial-of-service condition via resource exhaustio...

CVE-2012-6079

CVE-2012-6079 affects the WordPress plugin W3 Total Cache prior to version 0.9.2.5. The described issue allows an attacker to retrieve sensitive cached database information by guessing or accessing hash keys, effectively disclosing data from the cache layer remotely. This vulnerability is documen...

CVE-2012-6079

W3 Total Cache before 0.9.2.5 exposes sensitive cached database information which allows remote attackers to download this information via their hash keys...

Fedora 28 : qt5-qtwebengine (2018-b844991a97)

A QtWebEngine security update backporting security fixes from Chromium 65 up to 65.0.3325.146. The backports have been forward-ported from QtWebEngine 5.9.5 LTS. This update fixes the following security issues : - CVE-2017-15429 - CVE-2018-6033 claimed fixed in 5.10.1, but the fix was incomplete...

CVE-2018-6079

CVE-2018-6079 describes an information disclosure in WebGL within Google Chrome versions prior to 65.0.3325.146, allowing a remote attacker to leak cross-origin data via a crafted HTML page. Affected software is Google Chrome (WebGL implementation in Chrome’s rendering engine). The root cause is ...

Exploit CVE-2017-6079 - Blind Command Injection In Edgewater Edgemarc Devices

This exploit was developed based on the technical description by depthsecurity https://depthsecurity.com/blog/cve-2017-6079-blind-command-injection-in-edgewater-edgemarc-devices Description The HTTP web-management application on Edgewater Networks Edgemarc appliances has a hidden page that allows...

Debian DSA-4182-1 : chromium-browser - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2018-6056 lokihardt discovered an error in the v8 JavaScript library. - CVE-2018-6057 Gal Beniamini discovered errors related to shared memory permissions. - CVE-2018-6060 Omair discovered a use-after-free issue in...

Important: Red Hat Security Advisory: chromium-browser security update

An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

CVE-2017-6079

The HTTP web-management application on Edgewater Networks Edgemarc appliances has a hidden page that allows for user-defined commands such as specific iptables routes, etc., to be set. You can use this page as a web shell essentially to execute commands, though you get no feedback client-side fro...

CVE-2017-6079

CVE-2017-6079 affects Edgewater Networks Edgemarc (EdgeMarc) appliances. The HTTP web-management interface exposes a hidden page that allows user-defined commands (such as iptables rules) to be executed via a web shell-like mechanism; the flaw is described as a blind command-injection vulnerabili...

CVE-2016-6079

IBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privileges. IBM APARs: IV88658, IV87981, IV88419, IV87640, IV88053...

CVE-2016-6079

IBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privileges. IBM APARs: IV88658, IV87981, IV88419, IV87640, IV88053...

CVE-2016-6079

CVE-2016-6079 affects IBM AIX 5.3, 6.1, 7.1 and 7.2 (and VIOS), with a local privilege escalation in the lquerylv component that could grant root privileges to a locally authenticated user. Root cause details are not fully disclosed in the initial description, but IBM AIX Security Advisory lquery...

hertz.com XSS vulnerability

Vulnerable URL: http://www.hertz.com/rentacar/abouthertz/index.jsp?targetPage=';alertOPENBUGBOUNTY;htc.config=// Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6079 VIP website status:| Yes Check hertz.com SSL...

CVE-2016-6079

creationtimestamp| type| source ---|---|--- 2016-11-04 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40710...

Memory corruption

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6068, CVE-2015-6072, CVE-2015-6073, CVE-2015-607...

Memory corruption

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6072, CVE-2015-6073, CVE-2015-6075, CVE-2015-607...

CVE-2015-6079

CVE-2015-6079 concerns Microsoft Internet Explorer 11 memory corruption vulnerability that enables remote code execution or denial of service via a crafted web site. The connected CNVD/NVD entries describe a memory corruption flaw in IE11 (and related components) leading to arbitrary code executi...

MS15-112: Cumulative Security Update for Internet Explorer (3104517)

The version of Internet Explorer installed on the remote host is missing Cumulative Security Update 3104517. It is, therefore, affected by multiple vulnerabilities, the majority of which are remote code execution vulnerabilities. An unauthenticated, remote attacker can exploit these issues by...

Microsoft Internet Explorer Memory Corruption (MS15-112: CVE-2015-6079)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory that has been deleted. A remote attacker can exploit this issue by enticing a target victim to open a specially...