57 matches found
Embedded Controller Update Vulnerability - US
Lenovo Security Advisory: LEN-27764 Potential Impact: Privilege escalation Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6171 Summary Description: A vulnerability was reported in older ThinkPad systems that could allow a user with administrative privileges or physical...
CVE-2018-6171
Use after free in Bluetooth in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension...
CVE-2018-6171
CVE-2018-6171 is a WebBluetooth use-after-free vulnerability in Google Chrome/Chromium before version 68.0.3440.75. The flaw occurs in the WebBluetooth implementation and could allow a remote attacker who convinces a user to install a malicious extension to read potentially sensitive information ...
Updated chromium-browser-stable packages fix security vulnerabilities
Chromium-browser 68.0.3440.106 fixes security issues: Multiple flaws were found in the way Chromium 67.0.3396.87 processes various types of web content, where loading a web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information...
FreeBSD : chromium -- multiple vulnerabilities (b9c525d9-9198-11e8-beba-080027ef1a23)
Google Chrome Releases reports : 42 security fixes in this release, including : - 850350 High CVE-2018-6153: Stack buffer overflow in Skia. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-06-07 - 848914 High CVE-2018-6154: Heap buffer overflow in WebGL. Reported by Omair on 2018-06-01 -...
openSUSE: Security Advisory for Chromium (openSUSE-SU-2018:2134-1)
The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2018-6171
Use after free in Bluetooth in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension...
CVE-2016-6171
Knot DNS before 2.3.0 allows remote DNS servers to cause a denial of service memory exhaustion and slave server crash via a large zone transfer for 1 DDNS, 2 AXFR, or 3 IXFR...
CVE-2016-6171
Knot DNS before 2.3.0 is vulnerable: a remote DNS server can cause memory exhaustion and a slave server crash via large zone transfers (DDNS, AXFR, IXFR). The impact is a denial of service. The issue has an upstream security fix; upgrades to the patched upstream release are recommended (upgrade t...
Fedora 25 : knot (2016-7f0fb9b38d)
fix build on big endian ---- new upstream release, security fix for CVE-2016-6171 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...
Fedora 24 : knot (2016-3479f8e060)
fix build on big endian ---- new upstream release, security fix for CVE-2016-6171 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...
Fedora 23 : knot (2016-66c0c2105b)
fix build on big endian ---- new upstream release, security fix for CVE-2016-6171 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...
CVE-2015-6171
creationtimestamp| type| source ---|---|--- 2015-12-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39025 2026-07-29 12:01:15+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-07-30 00:01:50+00:00| seen|...
CVE-2015-6171
CVE-2015-6171 concerns the Windows kernel vulnerability affecting Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, 8/8.1, Server 2012 Gold/R2, RT/8.1, and 10 1511, enabling local privilege elevation via a crafted application. The issue is a separate vulnerability from CVE-2015-6173 and CVE-2015-...
CVE-2014-6171
CVE-2014-6171 is an XSS flaw in IBM WebSphere Portal affecting 6.1.x, 7.0.x, 8.0.x, and 8.5.0 before CF04. The vulnerability allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Connected documents do not provide exploitation specifics or patch/version remediation det...
CVE-2014-6171
Cross-site scripting XSS vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 through 8.0.0.1 CF14, and 8.5.0 before CF04 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
CVE-2013-6171
checkpassword-reply in Dovecot before 2.2.7 performs setuid operations to a user who is authenticating, which allows local users to bypass authentication and access virtual email accounts by attaching to the process and using a restricted file descriptor to modify account information in the...
CVE-2013-6171
CVE-2013-6171 affects Dovecot up to version 2.2.6 (before 2.2.7). The vulnerability arises in the checkpassword-reply path, which performs setuid operations to a user who is authenticating. This can allow a local attacker to bypass authentication and access virtual email accounts by attaching to ...