64 matches found
CVE-2023-6166
creationtimestamp| type| source ---|---|--- 2023-12-26 20:26:58+00:00| seen| https://t.me/ctinow/159445 2024-01-02 23:16:46+00:00| seen| https://t.me/ctinow/162081...
CVE-2023-6166
The CVE-2023-6166 entry corresponds to the Quiz Maker WordPress plugin prior to version 6.4.9.5, which does not escape generated URLs in attributes, enabling Reflected Cross-Site Scripting. Affected component: Quiz Maker WordPress plugin (pre-6.4.9.5). Root cause: lack of URL escaping in output a...
CVE-2023-6166 Quiz Maker < 6.4.9.5 - Reflected Cross-Site Scripting
The Quiz Maker WordPress plugin before 6.4.9.5 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting...
Ubuntu 16.04 ESM / 18.04 ESM : libcap2 vulnerability (USN-6166-2)
The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-6166-2 advisory. USN-6166-1 fixed a vulnerability in libcap2. This update provides the corresponding update for Ubuntu 14.04 ESM, Ubuntu 16.04 ESM and Ubuntu 18.04 ESM...
Ubuntu 20.04 LTS / 22.04 LTS / 23.04 : libcap2 vulnerabilities (USN-6166-1)
The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6166-1 advisory. David Gstir discovered that libcap2 incorrectly handled certain return codes. An attacker could possibly use this issue to cause...
RHEL 8 : thunderbird (RHSA-2022:6166)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:6166 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 91.13.0. Security Fixes: Mozilla:...
Mageia: Security Advisory (MGASA-2018-0343)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-6166
A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.15, allows authenticated users with basic access to export settings and change maintenance-mode themes...
CVE-2020-6166
CVE-2020-6166 (WordPress Minimal Coming Soon & Maintenance Mode) affects the plugin versions up to 2.15. The flaw allows any authenticated user with at least basic access to export plugin settings or change the maintenance-page theme via insecure permissions. Technical details from connected sour...
CVE-2019-6166
CVE-2019-6166 affects Lenovo Service Bridge prior to version 4.1.0.1. The connected records identify a cross‑site request forgery vulnerability in Lenovo Service Bridge and specify that upgrading to version 4.1.0.1 or later mitigates the issue. The exact exploitation details, affected components/...
Lenovo Service Bridge Vulnerabilities - Lenovo Support US
No description provided...
CVE-2018-6166
Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name...
CVE-2018-6166
Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name...
CVE-2018-6166
CVE-2018-6166: Google Chrome (Omnibox/URL Formatter) contains a URL spoofing vulnerability due to incorrect handling of confusable characters, enabling domain spoofing via IDN homographs. Affects Chrome up to 68.0.3440.75; fixed in 68.0.3440.75 (Chromium) with security updates across distribution...
Updated chromium-browser-stable packages fix security vulnerabilities
Chromium-browser 68.0.3440.106 fixes security issues: Multiple flaws were found in the way Chromium 67.0.3396.87 processes various types of web content, where loading a web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information...
FreeBSD : chromium -- multiple vulnerabilities (b9c525d9-9198-11e8-beba-080027ef1a23)
Google Chrome Releases reports : 42 security fixes in this release, including : - 850350 High CVE-2018-6153: Stack buffer overflow in Skia. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-06-07 - 848914 High CVE-2018-6154: Heap buffer overflow in WebGL. Reported by Omair on 2018-06-01 -...
openSUSE: Security Advisory for Chromium (openSUSE-SU-2018:2134-1)
The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2018-6166
Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name...
CVE-2017-6166
The CVE-2017-6166 issue affects multiple F5 BIG-IP components (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, WebSafe) on versions 12.0.0–12.1.1, where the Traffic Management Microkernel (TMM) may crash while processing fragmented packets via a virtual server with a FastL4 profile...