61 matches found
MINI-V3FG-6263-QH2C
Bulletin has no description...
EUVD-2007-5739
Malware in sbrugna...
CVE-2023-6263
An issue was discovered by IPVM team in Network Optix NxCloud before 23.1.0.40440. It was possible to add a fake VMS server to NxCloud by using the exact identification of a legitimate VMS server. As result, it was possible to retrieve authorization headers from legitimate users when the legitima...
Linux Distros Unpatched Vulnerability : CVE-2016-6263
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The stringpreputf8nfkcnormalize function in lib/nfkc.c in libidn before 1.33 allows context-dependent attackers to cause a denial of service out-of-bounds read...
CGA-6263-3393-PRQ6
Bulletin has no description...
CVE-2024-6263 WP Lightbox 2 <= 3.0.6.6 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
The WP Lightbox 2 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title’ parameter in all versions up to, and including, 3.0.6.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access...
CVE-2024-6263 WP Lightbox 2 <= 3.0.6.6 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
The WP Lightbox 2 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title’ parameter in all versions up to, and including, 3.0.6.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access...
WordPress WP Lightbox 2 Plugin <= 3.0.6.6 is vulnerable to Cross Site Scripting (XSS)
Software WP Lightbox 2 Type Plugin Vulnerable versions = 3.0.6.6 Fixed in 3.0.6.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-6263 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 8a2088ef7bb8 Credits Webbernaut Required...
RHEL 7 : libidn (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libidn: Out-of-bounds read when reading zero byte as input CVE-2016-6262 - The idnatoascii4i function in...
RHEL 5 : libidn (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libidn: Out-of-bounds read when reading zero byte as input CVE-2016-6262 - The idnatoascii4i function in...
CVE-2023-6263
An issue was discovered by IPVM team in Network Optix NxCloud before 23.1.0.40440. It was possible to add a fake VMS server to NxCloud by using the exact identification of a legitimate VMS server. As result, it was possible to retrieve authorization headers from legitimate users when the legitima...
CVE-2023-6263 Server Spoofing Vulnerability in NxCloud
An issue was discovered by IPVM team in Network Optix NxCloud before 23.1.0.40440. It was possible to add a fake VMS server to NxCloud by using the exact identification of a legitimate VMS server. As result, it was possible to retrieve authorization headers from legitimate users when the legitima...
CVE-2023-6263
The vulnerability CVE-2023-6263 affects Network Optix NxCloud prior to 23.1.0.40440. An attacker could add a fake VMS server by using the exact identification of a legitimate VMS server, allowing retrieval of authorization headers from legitimate users when their client connects to the fake VMS s...
Ubuntu: Security Advisory (USN-6263-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 : OpenJDK vulnerabilities (USN-6263-1)
The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6263-1 advisory. Motoyasu Saburi discovered that OpenJDK incorrectly handled special characters in file name parameters. An...
K25353544: libidn vulnerability CVE-2016-6263
Security Advisory Description The stringpreputf8nfkcnormalize function in lib/nfkc.c in libidn before 1.33 allows context-dependent attackers to cause a denial of service out-of-bounds read and crash via crafted UTF-8 data. CVE-2016-6263 Impact This vulnerability may allow attackers to cause a...
Mageia: Security Advisory (MGASA-2016-0269)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Advisory ROSA-SA-2021-1873
Software: libidn 1.28 OS: Cobalt 7.9 CVE-ID: CVE-2015-2059 CVE-Crit: MEDIUM CVE-DESC: The stringpreputf8toucs4 function in libin prior to 1.31, used in jabberd2, allows context-sensitive attackers to read system memory and possibly exert other undefined influence via invalid UTF-8 characters in a...
SUSE: Security Advisory (SUSE-SU-2016:2079-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-6263
CVE-2020-6263 affects SAP NetWeaver AS Java when standalone clients connect via P4 Protocol. Affected components include SAP-JEECOR (7.00, 7.01), SERVERCOR (7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50), and CORE-TOOLS (7.00–7.50). The root cause is that, for operations requiring user identity, authe...