79 matches found
Oracle Linux 8 : firefox (ELSA-2022-6175)
The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-6175 advisory. 91.13.0-1.0.1 - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 91.13.0-1 - Update to 91.13...
Mageia: Security Advisory (MGASA-2018-0343)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
FreeBSD : tt-rss -- multiple vulnerabilities (2eec1e85-faf3-11ea-8ac0-4437e6ad11c4)
tt-rss project reports : The cachedurl feature mishandles JavaScript inside an SVG document. imgproxy in plugins/afproxyhttp/init.php mishandles $REQUEST'url' in an error message. It does not validate all URLs before requesting them. Allows remote attackers to execute arbitrary PHP code via a...
CVE-2020-6175
Citrix SD-WAN vulnerability CVE-2020-6175 affects Citrix SD-WAN 10.2.x prior to 10.2.6 and 11.0.x prior to 11.0.3, caused by Missing SSL Certificate Validation in management traffic. This leads to information disclosure via a potential man-in-the-middle attack on management interfaces. Remediatio...
CVE-2020-6175 - Citrix SD-WAN Security Update
Description of Problem An information disclosure vulnerability has been identified in the Citrix SD-WAN Appliance. This vulnerability could allow an unauthenticated attacker to perform a man-in-the-middle attack against management traffic. The vulnerability has been assigned the following CVE...
CVE-2019-6175
CVE-2019-6175 affects Lenovo System Update prior to 5.07.0088. The issue allows writing configuration files to non‑standard locations, leading to a Denial of Service. Affected component: Lenovo System Update (Lenovo PS500271 advisories confirm the vulnerability and recommend upgrading to version ...
System Update Vulnerability - Lenovo Support US
No description provided...
System Update Vulnerability - US
Lenovo Security Advisory: LEN-28093 Potential Impact:: Denial of Service Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6175 Summary Description: A denial of service vulnerability was reported in Lenovo System Update that could allow configuration files to be written t...
CVE-2018-6175
Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name...
CVE-2018-6175
Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name...
CVE-2018-6175
CVE-2018-6175 concerns Google Chrome URL handling: an incorrect handling of confusable characters in the Omnibox/URL Formatter allows domain spoofing via IDN homographs in Chrome versions before 68.0.3440.75. Public sources (Debian/DLA entries) indicate this vulnerability was addressed by upgradi...
Updated chromium-browser-stable packages fix security vulnerabilities
Chromium-browser 68.0.3440.106 fixes security issues: Multiple flaws were found in the way Chromium 67.0.3396.87 processes various types of web content, where loading a web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information...
FreeBSD : chromium -- multiple vulnerabilities (b9c525d9-9198-11e8-beba-080027ef1a23)
Google Chrome Releases reports : 42 security fixes in this release, including : - 850350 High CVE-2018-6153: Stack buffer overflow in Skia. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-06-07 - 848914 High CVE-2018-6154: Heap buffer overflow in WebGL. Reported by Omair on 2018-06-01 -...
openSUSE: Security Advisory for Chromium (openSUSE-SU-2018:2134-1)
The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2012-6175
CVE-2012-6175 is rejected/not used and does not represent an active vulnerability entry.
CVE-2016-6175
Eval injection vulnerability in php-gettext 1.0.12 and earlier allows remote attackers to execute arbitrary PHP code via a crafted plural forms header...
CVE-2016-6175
Eval injection vulnerability in php-gettext 1.0.12 and earlier allows remote attackers to execute arbitrary PHP code via a crafted plural forms header...
CVE-2016-6175
The vulnerability CVE-2016-6175 affects php-gettext up to version 1.0.12, where eval injection in the plural forms header allows remote attackers to execute arbitrary PHP code. Exploitation is evidenced by an in-the-wild exploit (Exploit-DB entry) and multiple security feeds. The issue is caused ...