95 matches found
Google Chrome < 67.0.3396.62 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 67.0.3396.62. It is, therefore, affected by multiple vulnerabilities as referenced in the 201805stable-channel-update-for-desktop58 advisory. - Allowing the chrome.debugger API to attach to Web UI pages in DevTools in...
Stable Channel Update for Desktop
The Chrome team is delighted to announce the promotion of Chrome 67 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 67.0.3396.62 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming...
CVE-2016-6126
IBM Kenexa LMS on Cloud (versions 13.1–13.2.4) is affected by CVE-2016-6126 due to inadequate input validation that allows remote attackers to traverse directories via crafted URLs containing /.. sequences, enabling viewing arbitrary system files. The issue is a directory traversal in the web ser...
CVE-2015-6126
CVE-2015-6126 is a local elevation-of-privilege vulnerability in the Pragmatic General Multicast (PGM) protocol implementation in Windows. The root cause is a race condition that can lead to references to memory that has already been freed (use-after-free), enabling a logged-in attacker to gain p...
Microsoft Windows PGM Protocol CVE-2015-6126 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to gain elevated privileges on a targeted system. Technologies Affected Microsoft Windows 10 for 32-bit Systems Microsoft Windows 10 for x64-based Systems Microsoft Window...
MS15-133: Security Update for Windows PGM to Address Elevation of Privilege (3116130)
The remote Windows host is missing a security update. It is, therefore, affected by an elevation of privilege vulnerability in the Pragmatic General Multicast PGM protocol, installed with the MSMQ service, due to a race condition that can result in references being made to already freed memory. A...
CVE-2013-6126
CVE-2013-6126 is rejected and not used; this entry does not represent an active vulnerability.
CVE-2014-6126
CVE-2014-6126 is an XSS vulnerability affecting IBM WebSphere Portal 8.5.0 before CF03, allowing remote attackers to inject arbitrary script/HTML via unspecified vectors. The connected Nessus entry confirms the CVE among multiple issues in CF03, but the provided documents do not specify exploit d...
CVE-2008-6126
CVE-2008-6126 affects moziloCMS 1.10.2 and earlier. The vulnerability is a directory traversal in moziloCMS via a .. in the file parameter to download.php and the page parameter to index.php, enabling remote reading of arbitrary files. Affected components: download.php and index.php within mozilo...
CVE-2007-6126
Multiple cross-site scripting XSS vulnerabilities in project alumni 1.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the year parameter to 1 xml/index.php; or 2 the year parameter to view.page.inc.php, which is reachable through a view action to the top-level...
CVE-2007-6126
CVE-2007-6126 affects Project Alumni versions 1.0.9 and earlier. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary scripts via the year parameter in (1) xml/index.php and (2) view.page.inc.php, reachable through a view action to index.php. The...
