K55102452: TMM vulnerability CVE-2017-6140

Security Advisory Description Undisclosed sequence of packets sent to Virtual Servers with client or server SSL profiles using AES-GCM cipher suites may cause disruption of data plane services. CVE-2017-6140 This vulnerability affects the following BIG-IP platforms: 2000s, 2200s, 4000s, 4200v,...

SUSE CVE-2018-6140

Allowing the chrome.debugger API to attach to Web UI pages in DevTools in Google Chrome prior to 67.0.3396.62 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension...

Mageia: Security Advisory (MGASA-2018-0268)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-6140

SQL injection vulnerability exists in the password reset functionality of OS4Ed openSIS 7.3. The passwordstfemail parameter in the password reset page /opensis/ResetUserInfo.php is vulnerable to SQL injection. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2020-6140

SQL injection vulnerability exists in the password reset functionality of OS4Ed openSIS 7.3. The passwordstfemail parameter in the password reset page /opensis/ResetUserInfo.php is vulnerable to SQL injection. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2020-6140

CVE-2020-6140 affects OS4Ed openSIS 7.3. Multiple SQL injection vulnerabilities exist in the password reset flow (ResetUserInfo.php) via parameters such as password_stf_email , uname , and username_stf_email . Root cause described as lack of input sanitization in the reset logic, enabling arbitra...

CVE-2019-6140

Forcepoint Email Security 8.4.x and 8.5.x are affected by a configuration issue that leaves the product vulnerable if the hybrid registration process is not completed. The CVE-2019-6140 entry is described as a high-severity configuration flaw (CVSS v3.1: 9.8, CRITICAL) with the impact stated as p...

CVE-2018-6140

CVE-2018-6140 affects Google Chrome’s debugger extension API: before 67.0.3396.62, a crafted Chrome Extension could bypass restrictions and lead to arbitrary code execution if a user installs the malicious extension. The issue is tied to the debugger extension API in DevTools. Remediation in the ...

openSUSE: Security Advisory for Chromium (openSUSE-SU-2018:2055-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

RHEL 6 : chromium-browser (RHSA-2018:1815)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2018:1815 advisory. Chromium is an open-source web browser, powered by WebKit Blink. This update upgrades Chromium to version 67.0.3396.62. Security Fixes:...

Security update for chromium (important)

This update for chromium to version 66.0.3359.181 fixes the following issues: The following security issues were fixed boo1095163: CVE-2018-6123: Use after free in Blink. CVE-2018-6124: Type confusion in Blink. CVE-2018-6125: Overly permissive policy in WebUSB. CVE-2018-6126: Heap buffer overflow...

Google Chrome < 67.0.3396.62 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 67.0.3396.62. It is, therefore, affected by multiple vulnerabilities as referenced in the 201805stable-channel-update-for-desktop58 advisory. - Allowing the chrome.debugger API to attach to Web UI pages in DevTools in...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 67 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 67.0.3396.62 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming...

CVE-2017-6140

CVE-2017-6140 affects BIG-IP platforms (LTM, AAM, AFM, Analytics, ASM, DNS, GTM, PEM) across 11.x–13.x ranges. An undisclosed sequence of packets sent to Virtual Servers with client or server SSL profiles using AES-GCM cipher suites may disrupt data plane services. The issue is documented by F5 a...

CVE-2016-6140

CVE-2016-6140 affects SAP TREX 7.10 Revision 63. Remote attackers can write arbitrary files via RFC-Gateway vectors, linked to SAP Security Note 2203591. The issue enables file write with network access and no authentication required, with high/critical impact on confidentiality, integrity, and a...

CVE-2015-6140

The CVE-2015-6140 entry concerns Microsoft Internet Explorer 11 and Microsoft Edge. A memory corruption vulnerability can be triggered by a crafted web site, allowing remote code execution or memory corruption that could lead to a denial of service. The linked OpenVAS note references a missing Mi...

Microsoft Internet Explorer Memory Corruption (MS15-124: CVE-2015-6140)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory that has been deleted. A remote attacker can exploit this issue by enticing a target victim to open a specially...

Microsoft Internet Explorer and Edge CVE-2015-6140 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. They can then execute arbitrary code in the context of the currently logged-in user. Faile...

CVE-2014-6140

IBM Endpoint Manager for Mobile Devices (TEM/Mobile Device Management) components including Enrollment and Apple iOS Management Extender, Self-Service Portal, Admin Portal, and Trusted Service Provider are affected. The root cause is that TEM uses static secret_token values across all installatio...

IBM Endpoint Manager For Mobile Devices Code Execution Vulnerability

During a penetration test, RedTeam Pentesting discovered that several IBM Endpoint Manager Components are based on Ruby on Rails and use static secrettoken values. With these values, attackers can create valid session cookies containing marshalled objects of their choosing. This can be leveraged ...