Virtuozzo Hybrid Infrastructure 6.1 Update 1 Hotfix 3 (6.1.1-44)

This update provides important security fixes. Vulnerability id: VSTOR-88638 A security fix for CVE-2024-6387. Other security and stability fixes for OpenSSH...

[ASA-202407-1] openssh: authentication bypass

Arch Linux Security Advisory ASA-202407-1 ========================================= Severity: High Date : 2024-07-01 CVE-ID : CVE-2024-6387 Package : openssh Type : authentication bypass Remote : Yes Link : https://security.archlinux.org/AVG-2855 Summary ======= The package openssh before version...

CVE-2023-6387 Incorrect buffer parsing in Bluetooth LE sample code may lead to buffer overflow

A potential buffer overflow exists in the Bluetooth LE HCI CPC sample application in the Gecko SDK which may result in a denial of service or remote code execution...

CVE-2023-6387

The CVE-2023-6387 issue is in Silicon Labs Gecko SDK, specifically the Bluetooth LE HCI CPC sample application. The core problem is a potential buffer overflow in the sample code, which could lead to denial of service or remote code execution. Impact is rated HIGH (CVSS 3.1: AV:A, AC:H, PR:N, UI:...

Ubuntu 18.04 ESM / 20.04 LTS : Linux kernel vulnerabilities (USN-6387-1)

The remote Ubuntu 18.04 ESM / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6387-1 advisory. Jana Hofmann, Emanuele Vannacci, Cedric Fournet, Boris Kopf, and Oleksii Oleksenko discovered that some AMD processors could leak stale data...

Mageia: Security Advisory (MGASA-2020-0123)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for chromium (FEDORA-2020-39e0b8bd14)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] [DSA 4638-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4638-1 [email protected] https://www.debian.org/security/ Michael Gilbert March 10, 2020 https://www.debian.org/security/faq -...

CVE-2020-6387

Out of bounds write in WebRTC in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted video stream...

DEBIAN-CVE-2020-6387

Out of bounds write in WebRTC in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted video stream...

CVE-2020-6387

CVE-2020-6387 is an out-of-bounds write in WebRTC’s video timing extension within Chromium-based Chrome prior to 80.0.3987.87. The bug occurs during Forward Error Correction processing when clearing certain RTP extensions (video timing); the code clears six bytes at a fixed offset without verifyi...

CVE-2020-6387

Out of bounds write in WebRTC in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted video stream...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 80 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 80.0.3987.87 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming...

Google Chrome < 80.0.3987.87 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 80.0.3987.87. It is, therefore, affected by multiple vulnerabilities as referenced in the 202002stable-channel-update-for-desktop advisory. - Insufficient data validation in streams in Google Chrome prior to 80.0.3987.8...

CVE-2018-6387

The CVE-2018-6387 entry affects the iBall iB-WRA150N router (version 1.2.6 build 110401 Rel.47776n). The underlying issue is hardcoded credentials across multiple accounts: admin for the admin account, support for the support account, and user for the user account. This vulnerability enables an a...

CVE-2016-6387

...

CVE-2016-6387

This CVE entry is rejected/not used and does not represent an active vulnerability.

CVE-2017-6387

CVE-2017-6387 affects radare2 version 1.2.1; the dex_loadcode function in libr/bin/p/bin_dex.c allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted DEX file. No further exploit details or patches are provided in the connected documents.

CVE-2015-6387

The CVE-2015-6387 entry refers to a cross-site scripting (XSS) vulnerability in Cisco UCS Central Software (version 1.3(0.1)). The root cause is insufficient input validation in the web interface, allowing an unauthenticated/remote attacker to inject arbitrary script or HTML via a crafted URL. Im...

MantisBT 1.2.x < 1.2.18 Multiple Vulnerabilities

According to its version number, the MantisBT application hosted on the remote web server is 1.2.x prior to 1.2.18. It is, therefore, affected by the following vulnerabilities : - Multiple input-validation errors exist that could allow cross-site scripting attacks. CVE-2014-7146, CVE-2014-8986,...