101 matches found
CVE-2023-6206
The black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking delay on permission prompts. It was possible to use this fact to surprise users by luring them to click where the permission grant button would be about to appear. This vulnerability affects Firefox 12...
CVE-2023-6206
CVE-2023-6206 is described across connected sources as a clickjacking-related issue tied to the fullscreen transition in Mozilla Firefox and Thunderbird. The vulnerability affects Firefox versions older than 120, Firefox ESR older than 115.5.0, and Thunderbird older than 115.5.0. The issue is dis...
Mozilla Thunderbird < 115.5.0
The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 115.5.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-52 advisory. - On some systemsdepending on the graphics settings and driversit was possible to force an out-of-bounds...
Fedora 38 : firefox (2023-c908110b8a)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-c908110b8a advisory. - Updated to latest upstream 120.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...
Mozilla Firefox < 120.0
The version of Firefox installed on the remote macOS or Mac OS X host is prior to 120.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-49 advisory. - Memory safety bugs present in Firefox 119. Some of these bugs showed evidence of memory corruption and we...
Ubuntu 22.04 LTS : Linux kernel (OEM) vulnerabilities (USN-6206-1)
The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6206-1 advisory. Hangyu Hua discovered that the Flower classifier implementation in the Linux kernel contained an out-of- bounds write vulnerability. An attacker could us...
RHEL 8 : systemd (RHSA-2022:6206)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:6206 advisory. The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive...
Oracle Linux 8 : systemd (ELSA-2022-6206)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-6206 advisory. 239-58.0.1.4 - Disable unprivileged BPF by default Orabug: 32870980 - backport upstream pstore tmpfiles patch Orabug: 31420486 - udev rules: fix memory hot add...
CVE-2020-6206
SAP Cloud Platform Integration for Data Services, version 1.0, allows user inputs to be reflected as error or warning massages. This could mislead the victim to follow malicious instructions inserted by external attackers, leading to Cross Site Request Forgery...
CVE-2020-6206
CVE-2020-6206 affects SAP Cloud Platform Integration for Data Services 1.0. The issue is that user inputs can be reflected as error or warning messages, which could mislead victims into following malicious instructions and enable Cross-Site Request Forgery. The connected records confirm this CSRF...
CVE-2019-6206
CVE-2019-6206 affects Apple iOS (Keyboard component). The Apple security content for iOS 12.1.3 documents a vulnerability where password autofill may resume after cancellation, with the underlying issue attributed to state management. Root cause: improper state handling in the Keyboard autofill f...
CVE-2018-6206
In Max Secure Anti Virus 19.0.3.019,, the driver file MaxProtector32.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x220011...
CVE-2018-6206
In Max Secure Anti Virus 19.0.3.019,, the driver file MaxProtector32.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x220011...
CVE-2018-6206
CVE-2018-6206 affects Max Secure Anti Virus 19.0.3.019, where the driver MaxProtector32.sys fails to validate input values from IOCTL 0x220011. This local vulnerability can cause a denial of service (BSOD) and may have unspecified additional impact. Documented in multiple sources (NVD/Red Hat/CNV...
decolar.com XSS vulnerability
Vulnerable URL: https://www.decolar.com/?source=%3C/script%3E%3Csvg/onload%3Dconfirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6206 VIP website status:| Yes Coordinated Disclosure Timeline...
CVE-2012-6206
CVE-2012-6206 is rejected and does not represent an active vulnerability entry.
CVE-2016-6206
Huawei AR3200 routers running software before V200R007C00SPC600 are affected by an input‑validation vulnerability that allows remote attackers to cause a denial of service or execute arbitrary code via a crafted packet. Root cause is a validation flaw in the device’s handling of malformed packets...
CVE-2017-6206
creationtimestamp| type| source ---|---|--- 2017-03-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41662...
CVE-2017-6206
CVE-2017-6206 affects multiple D-Link DGS-1510 Websmart switches (models DGS-1510-28XMP/28X/52X/52/28P/28/20) with firmware prior to 1.31.B003. The issue enables unauthenticated information disclosure via unspecified vectors, impacting confidentiality (per CVSS). The NVD entry lists network acces...