62 matches found
ECHO-3090-21D0-6081
Bulletin has no description...
Konica Bizhub Multifunction Printers Insufficiently Protected Credentials (CVE-2025-6081)
An authenticated attacker can disclose the password of a configured external service. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504862; scriptversion"1.2"; scriptsetattributeattribute:"pluginmodificationdate", value:"2026/02/20"; scriptcveid"CVE-2025-6081";...
Linux Distros Unpatched Vulnerability : CVE-2018-6081
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XSS vulnerabilities in Interstitials in Google Chrome prior to 65.0.3325.146 allowed an attacker who convinced a user to install a malicious extension or open...
Pass-Back Attack vulnerability in Konica Minorta bizhub series
Overview Konica Minorta bizhub series provided by Konica Minolta, Inc. contains the following vulnerability. Vulnerability that could allow a Pass-Back Attack CWE-522 - CVE-2025-6081 Konica Minolta, Inc. reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. Impact...
CVE-2025-6081
Insufficiently Protected Credentials in LDAP in Konica Minolta bizhub 227 Multifunction printers version GCQ-Y3 or earlier allows an attacker can reconfigure the target device to use an external LDAP service controlled by the attacker. If an LDAP password is set on the target device, the attacker...
CVE-2025-6081
creationtimestamp| type| source ---|---|--- 2025-07-01 04:09:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/20003...
CVE-2025-6081
CVE-2025-6081 affects Konica Minolta bizhub 227 MFPs (firmware GCQ-Y3 or earlier). The issue enables a pass-back attack by reconfiguring the device to use an external LDAP server controlled by an attacker, which can lead to capturing plaintext LDAP credentials when the device authenticates to tha...
CVE-2025-6081 Pass-back attack in Konica Minolta bizhub 227 multifunctional printers
Insufficiently Protected Credentials in LDAP in Konica Minolta bizhub 227 Multifunction printers version GCQ-Y3 or earlier allows an attacker can reconfigure the target device to use an external LDAP service controlled by the attacker. If an LDAP password is set on the target device, the attacker...
CVE-2025-6081 Pass-back attack in Konica Minolta bizhub 227 multifunctional printers
Insufficiently Protected Credentials in LDAP in Konica Minolta bizhub 227 Multifunction printers version GCQ-Y3 or earlier allows an attacker can reconfigure the target device to use an external LDAP service controlled by the attacker. If an LDAP password is set on the target device, the attacker...
CVE-2024-6081
creationtimestamp| type| source ---|---|--- 2025-02-11 02:19:27+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulu5zfpl2h...
CVE-2020-6081
An exploitable code execution vulnerability exists in the PLCTask functionality of 3S-Smart Software Solutions GmbH CODESYS Runtime 3.5.14.30. A specially crafted network request can cause remote code execution. An attacker can send a malicious packet to trigger this vulnerability...
CVE-2023-6081
creationtimestamp| type| source ---|---|--- 2024-02-12 17:21:59+00:00| seen| https://t.me/ctinow/183273 2024-02-15 14:51:23+00:00| seen| https://t.me/ctinow/185569 2025-05-06 21:21:39+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15229...
CVE-2023-6081
The chartjs WordPress plugin through 2023.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2023-6081
CVE-2023-6081 affects the WordPress Chart.js plugin āenigma-chartjsā up to version 2023.2. The vulnerability arises from insufficient sanitization/escaping of certain settings, potentially enabling Stored Cross-Site Scripting by high-privilege users (e.g., Editor) even when unfiltered_html is dis...
CVE-2023-6081 Chart.js for WordPress <= 2023.2 - Editor+ Stored Cross-Site Scripting in New Chart
The chartjs WordPress plugin through 2023.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
WordPress enigma chart.js Plugin <= 2023.2 is vulnerable to Cross Site Scripting (XSS)
Software enigma chart.js Type Plugin Vulnerable versions = 2023.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-6081 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 92966ae6d3fe Credits Asif Nawaz Minhas & Serge...
Ubuntu: Security Advisory (USN-6191-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 16.04 ESM / 18.04 LTS : Linux kernel vulnerabilities (USN-6081-1)
The remote Ubuntu 16.04 ESM / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6081-1 advisory. Jordy Zomer and Alexandra Sandulescu discovered that the Linux kernel did not properly implement speculative execution barriers in usercopy...
SUSE CVE-2018-6081
XSS vulnerabilities in Interstitials in Google Chrome prior to 65.0.3325.146 allowed an attacker who convinced a user to install a malicious extension or open Developer Console to inject arbitrary scripts or HTML via a crafted HTML page...
MoinMoin Multiple vulnerable to directory traversal
Multiple directory traversal vulnerabilities in the 1 twikidraw action/twikidraw.py and 2 anywikidraw action/anywikidraw.py actions in MoinMoin before 1.9.6 allow remote authenticated users with write permissions to overwrite arbitrary files via unspecified vectors. NOTE: this can be leveraged wi...