Lucene search
+L

60 matches found

CVE
CVE
added 2021/11/02 10:35 p.m.91 views

CVE-2020-6492

CVE-2020-6492 affects Google Chrome via a Use-After-Free in ANGLE (before 83.0.4103.97). The underlying issue is a use-after-free in ANGLE that could allow a remote attacker to potentially escape the Chrome sandbox through a crafted HTML page. Affected component: ANGLE within Chrome; impact descr...

9.6CVSS9.2AI score0.00699EPSS
SaveExploits1References2Affected Software1
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.28 views

SUSE: Security Advisory (SUSE-SU-2015:0345-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS5.3AI score0.99999EPSS
SaveExploits8References2
OpenVAS
OpenVAS
added 2021/04/19 12:00 a.m.29 views

SUSE: Security Advisory (SUSE-SU-2014:1549-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS5.3AI score0.99999EPSS
SaveExploits8References2
ThreatPost
ThreatPost
added 2020/08/24 9:31 p.m.240 views

Google Fixes High-Severity Chrome Browser Code Execution Bug

The Google Chrome web browser has a high-severity vulnerability that could be used to execute arbitrary code, researchers say. The flaw has been fixed in the Chrome 85 stable channel, set to be rolled out to users this week. The flaw CVE-2020-6492 is a use-after-free vulnerability in the WebGL We...

4.3CVSS1.9AI score0.26869EPSS
SaveExploits6References7
CVE
CVE
added 2020/07/10 2:25 p.m.26 views

CVE-2012-6492

CVE-2012-6492 entry is rejected/not used per the Initial Description.

7.3AI score
SaveExploits0
CVE
CVE
added 2019/03/18 9:16 p.m.55 views

CVE-2019-6492

CVE-2019-6492 affects IObit Smart Defrag 6, specifically SmartDefragDriver.sys (version 2.0). The issue: a kernel-pool allocation made with user-defined bytes/size via IOCTL 0x9C401CC4 is never freed, allowing a kernel-pointer leak if the pool grows large. This description is supported by Red Hat...

5.5CVSS5.3AI score0.00459EPSS
SaveExploits1References1Affected Software1
NVD
NVD
added 2018/05/22 7:29 p.m.24 views

CVE-2018-6492

Persistent Cross-Site Scripting, and non-persistent HTML Injection in HP Network Operations Management Ultimate, version 2017.07, 2017.11, 2018.02 and in Network Automation, version 10.00, 10.10, 10.11, 10.20, 10.30, 10.40, 10.50. This vulnerability could be remotely exploited to allow persistent...

6.1CVSS5.2AI score0.01553EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2018/05/22 7:00 p.m.35 views

CVE-2018-6492 MFSBGN03806 rev.1 - HP Network Automation Software, Network Operations Management (NOM) Suite, Multiple Vulnerabilities

Persistent Cross-Site Scripting, and non-persistent HTML Injection in HP Network Operations Management Ultimate, version 2017.07, 2017.11, 2018.02 and in Network Automation, version 10.00, 10.10, 10.11, 10.20, 10.30, 10.40, 10.50. This vulnerability could be remotely exploited to allow persistent...

4.7CVSS6.9AI score0.01553EPSS
SaveExploits0References3
CVE
CVE
added 2018/05/22 7:00 p.m.58 views

CVE-2018-6492

CVE-2018-6492 : HP Network Operations Management Ultimate is vulnerable to persistent cross-site scripting and non-persistent HTML injection in versions 2017.07, 2017.11, 2018.02; HP Network Automation is affected in versions 10.00, 10.10, 10.11, 10.20, 10.30, 10.40, 10.50. The issue is a remote ...

6.1CVSS5.7AI score0.01553EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2017/03/05 8:59 p.m.19 views

CVE-2017-6492

SQL Injection was discovered in admprogram/modules/dates/datesfunction.php in Admidio 3.2.5. The POST parameter datcatid is concatenated into a SQL query without any input validation/sanitization...

9CVSS7.4AI score0.01356EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2017/03/05 8:00 p.m.29 views

CVE-2017-6492

SQL Injection was discovered in admprogram/modules/dates/datesfunction.php in Admidio 3.2.5. The POST parameter datcatid is concatenated into a SQL query without any input validation/sanitization...

7.4AI score0.01356EPSS
SaveExploits1References2
CVE
CVE
added 2017/03/05 8:00 p.m.49 views

CVE-2017-6492

The CVE-2017-6492 entry concerns Admidio 3.2.5, where a SQL Injection vulnerability exists in adm_program/modules/dates/dates_function.php. The POST parameter dat_cat_id is directly concatenated into a SQL query without input validation or sanitization, enabling potential attacker-controlled quer...

9CVSS7.3AI score0.01356EPSS
SaveExploits1References2Affected Software1
UbuntuCve
UbuntuCve
added 2017/01/12 11:59 p.m.21 views

CVE-2016-6492

The MT6573FDVTSetRegHW function in camerafdvt.c in the MediaTek driver for Linux allows local users to gain privileges via a crafted application that makes an MT6573FDVTIOCTSETFDCONFCMD IOCTL call...

9.3CVSS7.1AI score0.01131EPSS
SaveExploits2References2
CVE
CVE
added 2017/01/12 11:00 p.m.64 views

CVE-2016-6492

CVE-2016-6492: In MediaTek's Linux driver, MT6573FDVT_SetRegHW (camera_fdvt.c) allows local privilege escalation via MT6573FDVTIOC_T_SET_FDCONF_CMD ioctl. The issue stems from input handling: code copies user data into a local buffer with copy_from_user, testing pREGIO->u4Count length without ...

9.3CVSS7.6AI score0.01131EPSS
SaveExploits2References4Affected Software1
RedhatCVE
RedhatCVE
added 2016/08/03 12:18 p.m.33 views

CVE-2016-6492

The MT6573FDVTSetRegHW function in camerafdvt.c in the MediaTek driver for Linux allows local users to gain privileges via a crafted application that makes an MT6573FDVTIOCTSETFDCONFCMD IOCTL call...

9.3CVSS6.1AI score0.01131EPSS
SaveExploits2References1
Packet Storm
Packet Storm
added 2016/07/31 12:00 a.m.66 views

MediaTek Driver Privilege Escalation

Details ======= Product: MTK platform:MT6595 -- MT6797 Security Risk: High CVE ID: CVE-2016-6492 Credit: unLimit Security Group Introduction ============ 1...

0.7AI score0.01131EPSS
SaveExploits2
NVD
NVD
added 2015/10/28 10:59 a.m.23 views

CVE-2015-6492

Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote attackers to cause a denial of service memory corruption and device crash via a crafted HTTP request...

7.8CVSS6.8AI score0.0448EPSS
SaveExploits0References1
CVE
CVE
added 2015/10/28 10:00 a.m.77 views

CVE-2015-6492

Rockwell Automation’s MicroLogix 1100 and 1400 PLCs are affected by CVE-2015-6492, which allows a remote attacker to cause a denial of service via a crafted HTTP request. Affected devices: MicroLogix 1100 hardware Series B with firmware version 14.000 or earlier (B FRN 15.000 mitigation) and Micr...

7.8CVSS7AI score0.0448EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2015/10/28 10:00 a.m.30 views

CVE-2015-6492

Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote attackers to cause a denial of service memory corruption and device crash via a crafted HTTP request...

6.8AI score0.0448EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2014/12/01 12:00 a.m.54 views

SuSE 11.3 Security Update : IBM Java (SAT Patch Number 9992)

java-160-ibm has been updated to version 1.6.0sr16.2 to fix 18 security issues. These security issues has been fixed : - Unspecified vulnerability in Oracle Java SE 6u81. CVE-2014-3065 - The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding,...

10CVSS6.3AI score0.99999EPSS
SaveExploits8References43
Rows per page
Query Builder