KLA11822 Use after free vulnerability in Google Chrome

Use after free vulnerability was found in Google Chrome. Malicious users can exploit this vulnerability to cause denial of service, bypass security restrictions. Original advisories Stable Channel Update for Desktop Related products Google-Chrome CVE list CVE-2020-6509 high Solution Update to the...

Google Chrome < 83.0.4103.116 Vulnerability

The version of Google Chrome installed on the remote Windows host is prior to 83.0.4103.116. It is, therefore, affected by a vulnerability as referenced in the 202006stable-channel-update-for-desktop22 advisory. - Use after free in extensions in Google Chrome prior to 83.0.4103.116 allowed an...

Stable Channel Update for Desktop

The stable channel has been updated to 83.0.4103.116 for Windows, Mac, and Linux, which will roll out over the coming days/weeks. Security Fixes and Rewards Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain...

vmoller.dk Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1158403 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

CVE-2018-17658

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2018-17658

CVE-2018-17658 affects Foxit Reader 9.2.0.9297 and earlier, where the vulnerability stems from improper handling of the host object’s respose property and a lack of validating object existence before operations. This allows remote code execution in the context of the current process and requires ...

CVE-2019-6509

CVE-2019-6509 affects creditease-sec insight (through 2018-09-11). The vulnerability lies in depart_delete within srcpm/app/admin/views.py, which allows Cross-Site Request Forgery (CSRF). The available sources confirm the CSRF weakness but do not specify affected versions, exact exploit condition...

CVE-2019-6509

An issue was discovered in creditease-sec insight through 2018-09-11. departdelete in srcpm/app/admin/views.py allows CSRF...

CVE-2007-6509

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/windows/appian/appianbpm.rb 2025-02-06 03:13:38+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:08:27+00:00| seen|...

Synology Router Manager (SRM) Denial of Service Vulnerability

Synology Router Manager SRM is a software for configuring and managing Synology routers from Synology. A security vulnerability exists in SYNO.Core.PortForwarding.Rule in versions of SRM prior to 1.1.4-6509. A remote attacker could exploit this vulnerability to cause a denial of service memory...

CVE-2017-12077

Uncontrolled Resource Consumption vulnerability in SYNO.Core.PortForwarding.Rules in Synology Router Manager SRM before 1.1.4-6509 allows remote authenticated attacker to exhaust the memory resources of the machine, causing a denial of service attack...

CVE-2013-6509

CVE-2013-6509 is rejected/not used and does not represent an active vulnerability entry.

CVE-2013-6509

...

CVE-2017-6509

CVE-2017-6509 affects Smith0r/burgundy-cms prior to 2017-03-06, with a reflected XSS vulnerability in admin/components/menu/views/menuitems.php (id parameter). The available sources explicitly describe the flaw as a reflected XSS, allowing an attacker-controlled id parameter to be reflected in th...

SUSE SLED12 / SLES12 Security Update : wireshark (SUSE-SU-2016:2453-1)

wireshark was updated to version 1.12.13 to fix the following issues : - CVE-2016-6504: wireshark: NDS dissector crash bnc991012 - CVE-2016-6505: wireshark: PacketBB dissector could divide by zero bnc991013 - CVE-2016-6506: wireshark: WSP infinite loop bnc991015 - CVE-2016-6507: wireshark: MMSE...

SUSE SLES11 Security Update : wireshark (SUSE-SU-2016:2212-1)

This update to wireshark 1.12.13 fixes the following issues : - CVE-2016-6504: wireshark: NDS dissector crash bsc991012 - CVE-2016-6505: wireshark: PacketBB dissector could divide by zero bsc991013 - CVE-2016-6506: wireshark: WSP infinite loop bsc991015 - CVE-2016-6507: wireshark: MMSE infinite...

wireshark-cli: denial of service

CVE-2016-6505 denial of service It may be possible to make Wireshark crash by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file. - CVE-2016-6506 denial of service It may be possible to make Wireshark consume excessive CPU resources by...

[SECURITY] [DSA 3648-1] wireshark security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3648-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 12, 2016 https://www.debian.org/security/faq -...

Wireshark 2.0.x < 2.0.5 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 2.0.5. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.0.5 advisory. - CORBA IDL dissectors could crash on 64-bit Windows. It may be possible to make Wireshark crash by injecting a...