32 matches found
PaperCut NG < 24.1.9 / 25.x < 25.0.10 Race Condition (CVE-2026-6180)
The version of PaperCut NG installed on the remote Windows host is prior to 24.1.9 or 25.x prior to 25.0.10. It is, therefore, affected by a vulnerability: - A race condition exists in PaperCut NG/MF when processing badge-swipe data from certain HP multifunction devices. Under specific network...
CVE-2026-6180
creationtimestamp| type| source ---|---|--- 2026-05-05 11:19:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml42vmaprd2v 2026-05-05 14:35:15+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3ml4fubobns2c...
Debian: Security Advisory (DSA-6180-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DSA-6180-1 ruby-rack - security update
Bulletin has no description...
MiracleLinux 8 : open-vm-tools-12.1.5-2.el8.ML.1 (AXSA:2023-6180:06)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6180:06 advisory. open-vm-tools: authentication bypass vulnerability in the vgauth module CVE-2023-20867 Tenable has extracted the preceding description block directly from th...
ECHO-6180-7667-AC17
Bulletin has no description...
CVE-2024-6180 EventON <= 2.2.15 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting and Plugin Settings Updates
The EventON plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'eventonimportsettings' ajax action in all versions up to, and including, 2.2.15. This makes it possible for unauthenticated attackers to update plugin settings, including...
GHSA-PJRJ-H4FG-6GM4 tokio-boring vulnerable to resource exhaustion via memory leak
Impact The tokio-boring library in version 4.0.0 is affected by a memory leak issue that can lead to excessive resource consumption and potential DoS by resource exhaustion. The setexdata function used by the library did not deallocate memory used by pre-existing data in memory each time after...
CVE-2023-6180 Resource exhaustion via memory leak in tokio-boring
The tokio-boring library in version 4.0.0 is affected by a memory leak issue that can lead to excessive resource consumption and potential DoS by resource exhaustion. The setexdata function used by the library did not deallocate memory used by pre-existing data in memory each time after completin...
CVE-2023-6180
The CVE-2023-6180 issue affects the tokio-boring library v4.0.0, where set_ex_data does not deallocate memory after completing a TLS connection, causing a memory leak and potential DoS via resource exhaustion as connections accumulate. The practical impact is increased resource usage per TLS hand...
CVE-2023-6180 Resource exhaustion via memory leak in tokio-boring
The tokio-boring library in version 4.0.0 is affected by a memory leak issue that can lead to excessive resource consumption and potential DoS by resource exhaustion. The setexdata function used by the library did not deallocate memory used by pre-existing data in memory each time after completin...
Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM : VLC media player vulnerabilities (USN-6180-1)
The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6180-1 advisory. It was discovered that VLC could be made to read out of bounds when decoding image files. If a user were tricked into...
Oracle Linux 8 : rsync (ELSA-2022-6180)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-6180 advisory. 3.1.3-14.3 - Resolves: 2111174 - remote arbitrary files write inside the directories of connecting peers Tenable has extracted the preceding description block...
CVE-2019-6180
A stored cross-site scripting XSS vulnerability was reported in Lenovo XClarity Administrator LXCA versions prior to 2.5.0 that could allow an administrative user to cause JavaScript code to be stored in LXCA which may then be executed in the user's web browser. The JavaScript code is not execute...
LXCA and LXCI Insufficient Input Validation - Lenovo Support US
No description provided...
CVE-2018-6180
CVE-2018-6180 describes an authentication bypass in the Online Voting System 1.0 where an unauthenticated user can set an arbitrary password for other accounts via the profile section. The root cause is a flaw that allows password updates based on an incremental identifier without validating the ...
Online Voting System - Authentication Bypass Exploit
Exploit for php platform in category web applications Exploit Title: Online Voting System - Authentication Bypass Vendor Homepage: http://themashabrand.com Software Link: http://themashabrand.com/p/votin Demo: http://localhost/Onlinevoting Version: 1.0 Category: Webapps Exploit Author: Giulio Com...
How to deploy Veeam Service Provider Console Communication Agent in Unattended Mode
Challenge Some deployment scenarios may require that the Veeam Service Provider Console Communication Agent is deployed via Windows PowerShell in the silent mode. Solution Run Windows PowerShell as administrator and execute following command with correct values for Tenant's username in VACTENANT=...