44 matches found
MINI-6VF2-6397-7W2Q
Bulletin has no description...
MINI-RJ34-HFPR-6397
Bulletin has no description...
CVE-2025-6397
creationtimestamp| type| source ---|---|--- 2026-02-03 13:17:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdxh4df6xi2o...
CVE-2025-6397
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Ankara Hosting Website Design Website Software allows Reflected XSS. This issue affects Website Software: through 03022026. NOTE: The vendor was contacted early about this disclosure but did...
MiracleLinux 9 : dmidecode-3.3-7.el9.1 (AXSA:2023-6397:01)
The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2023-6397:01 advisory. dmidecode: dump-bin to overwrite a local file CVE-2023-30630 Tenable has extracted the preceding description block directly from the MiracleLinux security...
ECHO-B617-DBC5-6397
Bulletin has no description...
CVE-2024-6397
creationtimestamp| type| source ---|---|--- 2024-07-11 07:01:38+00:00| seen| https://t.me/cvedetector/630...
CVE-2024-6397 InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.44 - Authentication Bypass to Admin
The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 0.1.0.44. This is due to insufficient verification of the API key. This makes it possible for unauthenticated attackers to log in as any existing...
WordPress InstaWP Connect Plugin <= 0.1.0.44 is vulnerable to Privilege Escalation
Software InstaWP Connect Type Plugin Vulnerable versions = 0.1.0.44 Fixed in 0.1.0.45 OWASP Top 10 A1: Broken Access Control Classification Privilege Escalation CVE CVE-2024-6397 Patch priority High CVSS severity High 9.8 Developer InstaWP PSID c8289fd0efb9 Credits Truoc Phan Required privilege...
CVE-2023-6397
creationtimestamp| type| source ---|---|--- 2024-02-20 03:31:42+00:00| seen| https://t.me/ctinow/188067 2024-02-20 03:31:56+00:00| seen| https://t.me/ctinow/188076 2024-02-21 07:43:34+00:00| seen| https://t.me/arpsyndicate/3740...
CVE-2023-6397
A null pointer dereference in Zyxel ATP series firmware 4.32–5.37 Patch 1 and USG FLEX series firmware 4.50–5.37 Patch 1, within the Anti-Malware feature, can allow a LAN-based attacker to cause DoS by sending a crafted RAR file to a LAN-side host. Affected products: Zyxel ATP and USG FLEX. Impac...
SUSE CVE-2020-6397
Inappropriate implementation in sharing in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof security UI via a crafted HTML page...
Mageia: Security Advisory (MGASA-2020-0123)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for chromium (FEDORA-2020-39e0b8bd14)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2020-6397
Inappropriate implementation in sharing in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof security UI via a crafted HTML page...
CVE-2020-6397
CVE-2020-6397 is described as an insecure sharing implementation in Google Chrome/Chromium that allows a remote attacker to spoof the security UI via a crafted HTML page. Public records among connected sources confirm this as a content spoofing issue in the sharing component of Chromium/Chrome up...
CVE-2020-6397
Inappropriate implementation in sharing in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof security UI via a crafted HTML page...
Stable Channel Update for Desktop
The Chrome team is delighted to announce the promotion of Chrome 80 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 80.0.3987.87 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming...
Google Chrome < 80.0.3987.87 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 80.0.3987.87. It is, therefore, affected by multiple vulnerabilities as referenced in the 202002stable-channel-update-for-desktop advisory. - Insufficient data validation in streams in Google Chrome prior to 80.0.3987.8...
Joomla com_PictureCalendarForJoomla Component Directory Traversal (CVE-2018-6397)
A directory traversal vulnerability exists in Joomla compicturecalendarforjoomla Component. Successful exploitation of this vulnerability would allow a remote attacker to view arbitrary files from the affected system...