Debian dsa-6084 : libc-ares-dev - security update

The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6084 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6084-1 [email protected] https://www.debian.org/security/...

CVE-2024-6084 itsourcecode Pool of Bethesda Online Reservation System uploadImage unrestricted upload

A vulnerability has been found in itsourcecode Pool of Bethesda Online Reservation System up to 1.0 and classified as critical. Affected by this vulnerability is the function uploadImage of the file /admin/modroom/controller.php?action=add. The manipulation of the argument image leads to...

CVE-2023-6084

CVE-2023-6084 affects Tongda OA 2017 up to 11.9. Affected code path: general/vehicle/checkup/delete.php (reports indicate manipulation of the VU_ID argument leads to SQL injection). Documents consistently describe public disclosure of the exploit and recommend upgrading to version 11.10 to addres...

Ubuntu: Security Advisory (USN-6191-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2018-0268)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Rockwell Automation 1794-AENT Flex I/O Series B

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Rockwell Automation Equipment: 1794-AENT Flex I/O Series B Vulnerabilities: Classic Buffer Overflow 2. RISK EVALUATION Successful exploitation of these vulnerabilities could crash the device being...

CVE-2020-6084

An exploitable denial of service vulnerability exists in the ENIP Request Path Logical Segment functionality of Allen-Bradley Flex IO 1794-AENT/B 4.003. A specially crafted network request can cause a loss of communications with the device resulting in denial-of-service. An attacker can send a...

CVE-2020-6084

CVE-2020-6084 affects Allen-Bradley Flex IO 1794-AENT/B (Series B) with firmware 4.003, and is tied to the ENIP Request Path Logical Segment. A remote attacker can send an Electronic Key Segment with fewer bytes than required by the Key Format Table, causing the device to fault and stop remote co...

CVE-2018-6084

CVE-2018-6084 affects Google Chrome on macOS prior to 66.0.3359.117. The underlying issue is unsafe/insufficiently sanitized use of Distributed Objects by the Google Updater, allowing a local attacker to execute arbitrary code via an executable file. Connected sources corroborate the macOS Update...

Google Chrome < 66.0.3359.117 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 66.0.3359.117. It is, therefore, affected by multiple vulnerabilities as referenced in the 201804stable-channel-update-for-desktop advisory. - Insufficiently sanitized distributed objects in Updater in Google Chrome on...

CVE-2018-6084

Insufficiently sanitized distributed objects in Updater in Google Chrome on macOS prior to 66.0.3359.117 allowed a local attacker to execute arbitrary code via an executable file...

CVE-2018-6084

creationtimestamp| type| source ---|---|--- 2018-03-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44307...

CVE-2013-6084

CVE-2013-6084 is rejected/not used and does not represent an active vulnerability entry.

CVE-2013-6084

...

CVE-2016-6084

CVE-2016-6084 affects IBM BigFix Platform shipped with IBM Endpoint Manager for Software Use Analysis v2.2. A vulnerability allows an attacker on the local network to crash the BES server by sending a specially crafted XMLSchema request. The IBM security bulletin notes the impact as a crash of th...

CVE-2015-6084

CVE-2015-6084 relates to a memory corruption vulnerability in Microsoft Internet Explorer 10 and 11 (and associated Edge variants in some records) that allows remote attackers to execute arbitrary code or cause a denial of service by visiting a crafted website. The connected documents corroborate...

MS15-112: Cumulative Security Update for Internet Explorer (3104517)

The version of Internet Explorer installed on the remote host is missing Cumulative Security Update 3104517. It is, therefore, affected by multiple vulnerabilities, the majority of which are remote code execution vulnerabilities. An unauthenticated, remote attacker can exploit these issues by...

Gentoo Security Advisory GLSA 201405-21

Gentoo Linux Local Security Checks GLSA 201405-21 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Fedora Update for icu FEDORA-2015-6084

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-6084

CVE-2014-6084 affects IBM Security Access Manager for Mobile (8.0 line) and IBM Security Access Manager for Web (7.x before 7.0.0 FP10 and 8.x before 8.0.1). Root cause: use of weak SSL ciphers enables information disclosure via network sniffing. Impact: partial confidentiality loss of transmitte...