Lucene search
+L

59 matches found

UbuntuCve
UbuntuCve
added 2020/07/22 5:15 p.m.19 views

CVE-2020-6526

Inappropriate implementation in iframe sandbox in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

6.5CVSS6.9AI score0.01709EPSS
SaveExploits0References1
CVE
CVE
added 2020/07/22 4:16 p.m.304 views

CVE-2020-6526

CVE-2020-6526 affects Google Chrome before 84.0.4147.89. An inappropriate implementation in the iframe sandbox could allow a remote attacker to bypass navigation restrictions via a crafted HTML page. Public references in Debian and FreeBSD advisories align with a fixed version around 84.0.4147.89...

6.5CVSS6.7AI score0.01709EPSS
SaveExploits0References11Affected Software1
Debian CVE
Debian CVE
added 2020/07/22 4:16 p.m.23 views

CVE-2020-6526

Inappropriate implementation in iframe sandbox in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

6.5CVSS7.4AI score0.01709EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2020/07/21 12:0 a.m.42 views

openSUSE Security Update : chromium (openSUSE-2020-1021)

This update for chromium fixes the following issues : - Update to 84.0.4147.89 boo1174189 : - Critical CVE-2020-6510: Heap buffer overflow in background fetch. - High CVE-2020-6511: Side-channel information leakage in content security policy. - High CVE-2020-6512: Type Confusion in V8. - High...

9.6CVSS7.9AI score0.1132EPSS
SaveExploits13References27
Tenable Nessus
Tenable Nessus
added 2020/07/14 12:0 a.m.59 views

Google Chrome < 84.0.4147.89 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 84.0.4147.89. It is, therefore, affected by multiple vulnerabilities as referenced in the 202007stable-channel-update-for-desktop advisory. - Heap buffer overflow in WebAudio in Google Chrome prior to 84.0.4147.89 allowed...

9.6CVSS8.1AI score0.1132EPSS
SaveExploits13References73
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.29 views

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1488)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.3AI score0.06267EPSS
SaveExploits12References2
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.36 views

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2016-1026)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.3AI score0.00643EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.59 views

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1532)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS8.2AI score0.30052EPSS
SaveExploits23References2
Check Point Advisories
Check Point Advisories
added 2019/07/07 12:0 a.m.50 views

dnaTools dnaLIMS DNA Sequencer Command Injection (CVE-2017-6526)

...

10CVSS2.5AI score0.574EPSS
SaveExploits9
OSV
OSV
added 2019/04/15 12:31 p.m.4 views

CVE-2019-6526

Moxa IKS-G6824A series Versions 4.5 and prior, EDS-405A series Version 3.8 and prior, EDS-408A series Version 3.8 and prior, and EDS-510A series Version 3.8 and prior use plaintext transmission of sensitive data, which may allow an attacker to capture sensitive data such as an administrative...

9.8CVSS7.3AI score
SaveExploits0References1
CVE
CVE
added 2019/04/12 8:11 p.m.53 views

CVE-2019-6526

CVE-2019-6526 affects Moxa IKS-G6824A (v5.6 and prior) and EDS-405A/408A/510A (v3.8 and prior). The root cause is plaintext transmission of sensitive data, enabling potential capture of credentials such as an administrative password. Remediation per sources: apply firmware patches and consider co...

9.8CVSS9.3AI score0.00989EPSS
SaveExploits0References1Affected Software1
Circl
Circl
added 2018/05/29 3:50 p.m.13 views

CVE-2017-6526

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/dnalimsadminexec.rb 2025-02-06 03:13:43+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:09:59+00:00| seen|...

10CVSS9.3AI score0.574EPSS
SaveExploits9References1
CVE
CVE
added 2018/02/02 9:0 a.m.50 views

CVE-2018-6526

CVE-2018-6526 affects MantisBT; path disclosure in view_all_bug_page.php (2.10.0-development before 2018-02-02) via an invalid filter parameter tied to filter_ensure_valid_filter in current_user_api.php. The vulnerability allows remote attackers to discover the full filesystem path. Affected comp...

5.3CVSS5.2AI score0.03966EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2017/05/11 2:1 p.m.26 views

CVE-2013-6526

CVE-2013-6526 is rejected/not used and does not represent an active vulnerability entry.

6.6AI score
SaveExploits0
zdt
zdt
added 2017/04/02 12:0 a.m.107 views

dnaLIMS Admin Module Command Execution Exploit

Usage Info msf use exploit/linux/http/dnalimsadminexec msf exploitdnalimsadminexec show targets ...targets... msf exploitdnalimsadminexec set TARGET msf exploitdnalimsadminexec show options ...show and set options... msf exploitdnalimsadminexec exploit This module requires Metasploit:...

10CVSS9.2AI score0.574EPSS
SaveExploits9
CVE
CVE
added 2017/03/09 7:0 p.m.84 views

CVE-2017-6526

CVE-2017-6526 affects dnaTools dnaLIMS 4-2015s13. An unauthenticated command-execution flaw exists via an improperly protected administrative web shell at cgi-bin/dna/sysAdmin.cgi, triggered by POST requests. Public sources describe that the web interface bypasses authentication, enabling remote ...

10CVSS9.4AI score0.574EPSS
SaveExploits9References3Affected Software1
Metasploit
Metasploit
added 2017/03/09 2:46 p.m.35 views

dnaLIMS Admin Module Command Execution

This module utilizes an administrative module which allows for command execution. This page is completely unprotected from any authentication when given a POST request. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework...

9.8CVSS0.8AI score0.574EPSS
SaveExploits9
CVE
CVE
added 2017/01/18 5:0 p.m.54 views

CVE-2016-6526

Technical details about CVE-2016-6526 are not publicly provided in the connected documents; available descriptions only summarize impact on Samsung Telecommunication SpamCall component. Monitor for updates and official advisories.

9.3CVSS7.7AI score0.01503EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2017/01/18 5:0 p.m.36 views

CVE-2016-6526

The SpamCall Activity component in Telecom application on Samsung Note device L5.0/5.1 and M6.0 allows attackers to cause a denial of service crash and reboot or possibly gain privileges via a malformed serializable object...

7.8AI score0.01503EPSS
SaveExploits0References3
F5 Networks
F5 Networks
added 2016/01/28 12:0 a.m.47 views

SOL12903841 - Linux kernel vulnerabilities CVE-2015-4170, CVE-2015-6526, and CVE-2015-7837

Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...

5.5CVSS2.5AI score0.00405EPSS
SaveExploits0References4
Rows per page
Query Builder