CVE-2026-6194

creationtimestamp| type| source ---|---|--- 2026-04-13 18:17:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjfhzlygy22h 2026-04-13 19:19:04+00:00| published-proof-of-concept| Telegram/61DYlWTca6IkcTFpN2RYBtwr9MKXFEKysLP63-1xRoUERI 2026-04-13 20:18:53+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2023-6194

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Eclipse Memory Analyzer versions 0.7 to 1.14.0, report definition XML files are not filtered to prohibit document type definition DTD references to external...

CVE-2023-6194

In Eclipse Memory Analyzer versions 0.7 to 1.14.0, report definition XML files are not filtered to prohibit document type definition DTD references to external entities. This means that if a user chooses to use a malicious report definition XML file containing an external entity reference to...

Oracle Linux 9 : podman (ELSA-2024-6194)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-6194 advisory. 4.9.4-10.0.1 - Fixes issue of podman execvp error while using podmansh Orabug: 36073625 - Improved saving remote build context to tarfile in Podman...

CVE-2018-6194

creationtimestamp| type| source ---|---|--- 2024-06-22 09:27:44+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/33...

CVE-2024-6194 itsourcecode Tailoring Management System editmeasurement.php sql injection

A vulnerability, which was classified as critical, was found in itsourcecode Tailoring Management System 1.0. Affected is an unknown function of the file editmeasurement.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has...

CentOS 8 : thunderbird (CESA-2023:6194)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2023:6194 advisory. - VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding. CVE-2023-44488 - It was possible for certain browser prompts a...

CVE-2023-6194

In Eclipse Memory Analyzer versions 0.7 to 1.14.0, report definition XML files are not filtered to prohibit document type definition DTD references to external entities. This means that if a user chooses to use a malicious report definition XML file containing an external entity reference to...

CVE-2023-6194

CVE-2023-6194 affects Eclipse Memory Analyzer (versions 0.7 to 1.14.0). The issue arises because report definition XML files do not filter references to external entities in DTDs, allowing a malicious report file to cause the tool to access external files or URLs defined via a DTD when generating...

RHEL 8 : thunderbird (RHSA-2023:6194)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:6194 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.4.1. Security Fixes: Mozilla:...

Ubuntu 22.04 LTS : Linux kernel (OEM) vulnerabilities (USN-6194-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6194-1 advisory. Hangyu Hua discovered that the Flower classifier implementation in the Linux kernel contained an out-of- bounds write vulnerability. An attacker could us...

CVE-2019-6194

CVE-2019-6194 is an XML External Entity (XXE) processing vulnerability in Lenovo XClarity Administrator (LXCA) versions prior to 2.6.6 that could lead to information disclosure. Connected Lenovo advisories confirm the affected product (LXCA) and the fix: upgrade to LXCA 2.6.6 or later. The vulner...

Lenovo XClarity Administrator (LXCA) Vulnerabilities - Lenovo Support US

No description provided...

Lenovo XClarity Administrator (LXCA) Vulnerabilities - Lenovo Support US

Lenovo Security Advisory: LEN-29477 Potential Impact: Information disclosure, code execution Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6193, CVE-2019-6194, CVE-2019-19757 Summary Description: CVE-2019-6193: An information disclosure vulnerability was reported in...

CVE-2018-6194

The CVE-2018-6194 entry describes a Cross-Site Scripting (XSS) vulnerability in WordPress Splashing Images plugin (wp-splashing-images) versions before 2.1.1. The flaw is in admin/partials/wp-splashing-admin-sidebar.php where the search parameter is echoed directly into the value attribute of an ...

WordPress Splashing Images 2.1 Cross Site Scripting / PHP Object Injection

Product: WordPress Splashing Images Plugin - https://wordpress.org/plugins/wp-splashing-images/ Vendor: Studio Espresso Tested version: 2.1 CVE ID: CVE-2018-6194 :: CVE description :: A cross-site scripting XSS vulnerability in admin/partials/wp-splashing-admin-sidebar.php in the...

CVE-2012-6194

...

CVE-2015-6194

...

UBUNTU-CVE-2017-6194

The relocs function in libr/bin/p/binbflt.c in radare2 1.2.1 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted binary file...

CVE-2017-6194

CVE-2017-6194 affects radare2 1.2.1, where the relocs function in libr/bin/p/bin_bflt.c permits a remote attacker to trigger a heap-based buffer overflow via a crafted binary, causing a denial of service (application crash) and potentially other impact. The connected CNVD/CNVD-derived entries cor...