59 matches found
UBUNTU-CVE-2020-6080
An exploitable denial-of-service vulnerability exists in the resource allocation handling of Videolabs libmicrodns 0.1.0. When encountering errors while parsing mDNS messages, some allocated data is not freed, possibly leading to a denial-of-service condition via resource exhaustion. An attacker...
CVE-2020-6080
Vulnerability CVE-2020-6080 affects Videolabs libmicrodns 0.1.0. The issue is in mDNS message parsing/resource allocation handling, where errors during parsing can leave allocated data unfreed, enabling denial-of-service via resource exhaustion. The Arch Linux ASA-202004-24 describes multiple CVE...
CVE-2018-6080
Lack of access control checks in Instrumentation in Google Chrome prior to 65.0.3325.146 allowed a remote attacker who had compromised the renderer process to obtain memory metadata from privileged processes...
CVE-2018-6080
CVE-2018-6080 is an information-disclosure vulnerability in Google Chrome (Chromium base) where lack of access-control checks in Instrumentation allowed a renderer-compromised attacker to obtain memory metadata from privileged processes. The issue affects Chrome prior to 65.0.3325.146 and was cat...
CVE-2018-6080
Removed by vendor...
Security Bulletin: The WebAdmin context for WebSphere Message Broker Version 8 allows directory listings (CVE-2016-6080)
Summary The WebAdmin context for WebSphere Message Broker Version 8 allows directory listings. Vulnerability Details CVEID: CVE-2016-6080 DESCRIPTION: The WebAdmin context for WebSphere Message Broker allows directory listings, which could disclose sensitive information to the attacker. CVSS Base...
Debian DSA-4182-1 : chromium-browser - security update
Several vulnerabilities have been discovered in the chromium web browser. - CVE-2018-6056 lokihardt discovered an error in the v8 JavaScript library. - CVE-2018-6057 Gal Beniamini discovered errors related to shared memory permissions. - CVE-2018-6060 Omair discovered a use-after-free issue in...
Chromium: Information disclosure via "memory_instrumentation::mojom::Coordinator" interface in "resource_coordinator" service(CVE-2018-6080)
VULNERABILITY DETAILS The "memoryinstrumentation::mojom::Coordinator" mojo interface is exposed by the "resourcecoordinator" service, running under the browser process. The interface requires the "app" capability https://cs.chromium.org/chromium/src/services/resourcecoordinator/manifest.json?l=8,...
Important: Red Hat Security Advisory: chromium-browser security update
An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...
CVE-2013-6080
This CVE-2013-6080 entry is rejected/not used and does not represent an active vulnerability.
CVE-2017-6080
CVE-2017-6080 affects Zammad versions prior to 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1. Root cause: missing protection via HTTP Access-Control headers. Attack surface: cross-domain requests to the REST API for users with a valid session cookie, enabling disclosure of results. Impact ran...
CVE-2016-6080
The WebAdmin context for WebSphere Message Broker allows directory listings which could disclose sensitive information to the attacker...
CVE-2016-6080
CVE-2016-6080 affects WebSphere Message Broker (WebAdmin) on WebSphere Message Broker v8. The vulnerability allows directory listings via the WebAdmin context, potentially disclosing sensitive information. IBM’s security bulletin confirms the issue and provides a remediation: apply APAR IT16698 i...
Memory corruption
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6072, CVE-2015-6073, CVE-2015-6075, CVE-2015-607...
CVE-2015-6080
Microsoft Internet Explorer 11 is affected by a memory corruption vulnerability that enables remote code execution or a denial of service when loading a crafted web site. The advisory notes this is a separate issue from related CVEs (e.g., 2015-6068/6072/6073/etc.). Exploitation details are not p...
Microsoft Internet Explorer Memory Corruption (MS15-112: CVE-2015-6080)
A A use-after-free vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in manipulating CUListElement objects. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page. Successful exploitation could...
MS15-112: Cumulative Security Update for Internet Explorer (3104517)
The version of Internet Explorer installed on the remote host is missing Cumulative Security Update 3104517. It is, therefore, affected by multiple vulnerabilities, the majority of which are remote code execution vulnerabilities. An unauthenticated, remote attacker can exploit these issues by...
CVE-2014-6080
IBM Security Access Manager for Mobile 8.x and IBM Security Access Manager for Web 7.x/8.x are affected by CVE-2014-6080, an SQL injection vulnerability exploitable by remote authenticated attackers via unspecified vectors. The IBM security bulletin describes that an attacker could view, add, mod...
Joomla Component com_ionfiles File Disclosure (CVE-2008-6080)
An information disclosure vulnerability has been reported in Joomla Com Ionfiles. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...