CVE-2020-6528

Incorrect security UI in basic auth in Google Chrome on iOS prior to 84.0.4147.89 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

Google Chrome < 84.0.4147.89 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 84.0.4147.89. It is, therefore, affected by multiple vulnerabilities as referenced in the 202007stable-channel-update-for-desktop advisory. - Heap buffer overflow in WebAudio in Google Chrome prior to 84.0.4147.89 allowed...

KLA11869 Multiple vulnerability in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Incorrect security UI vulnerability in PWAs can be...

CVE-2019-6528

The CVE-2019-6528 issue affects PSI GridConnect Telecontrol Gateway and Smart Telecontrol Unit family, specifically IEC104 Security Proxy and Telecontrol Gateway variants. The root cause is improper neutralization of input during web page generation, allowing a browser to interpret input as activ...

PSI GridConnect Telecontrol

1. EXECUTIVE SUMMARY CVSS v3 8.5 ATTENTION: Remotely exploitable/low skill level to exploit Vendor: PSI GridConnect GmbH formerly known as PSI Nentec GmbH Equipment: Telecontrol Gateway and Smart Telecontrol Unit family, IEC104 Security Proxy Vulnerability: Cross-site Scripting 2. RISK EVALUATION...

CVE-2018-6528

CVE-2018-6528 refers to an XSS flaw in D-Link DIR-860L/865L/868L routers (bsc_sms_send.php) that allows a remote attacker to read cookies via a crafted receiver parameter to soap.cgi. Root cause: improper input validation in htdocs/webinc/body/bsc_sms_send.php. Affected firmware versions include ...

CVE-2013-6528

This CVE entry is rejected/not used and does not represent an active vulnerability.

CVE-2013-6528

...

CVE-2017-6528

CVE-2017-6528 corresponds to an insecure password storage issue in dnaLIMS 4-2015s13, where passwords are stored in clear text in the file /home/dna/spool/.pfile. The vulnerability context in the connected documents indicates this plaintext storage can be combined with other flaws (e.g., director...

CVE-2017-6528

An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is affected by plaintext password storage the /home/dna/spool/.pfile file...

CVE-2015-6528

creationtimestamp| type| source ---|---|--- 2015-08-21 13:00:41+00:00| seen| MISP/55d720e0-f5c8-4290-ba7f-289f0a00020f...

CVE-2015-6528

Multiple cross-site scripting XSS vulnerabilities in installclassic.php in Coppermine Photo Gallery CPG 1.5.36 allow remote attackers to inject arbitrary web script or HTML via the 1 adminusername, 2 adminpassword, 3 adminemail, 4 dbserver, 5 dbname, 6 dbuser, 7 dbpass, 8 tableprefix, or 9 impath...

CVE-2015-6528

CVE-2015-6528 affects Coppermine Photo Gallery (CPG) 1.5.36. The vulnerability is in install_classic.php and allows remote injection of arbitrary script/HTML (XSS) via any of nine parameters: admin_username, admin_password, admin_email, dbserver, dbname, dbuser, dbpass, table_prefix, or impath. T...

CVE-2015-6528

Multiple cross-site scripting XSS vulnerabilities in installclassic.php in Coppermine Photo Gallery CPG 1.5.36 allow remote attackers to inject arbitrary web script or HTML via the 1 adminusername, 2 adminpassword, 3 adminemail, 4 dbserver, 5 dbname, 6 dbuser, 7 dbpass, 8 tableprefix, or 9 impath...

CVE-2014-6528

Oracle Siebel CRM 8.1.1 and 8.2.2 are affected by an unspecified vulnerability in the Siebel Core - System Management component. The CVE description indicates remote authenticated access can affect confidentiality via unknown vectors related to Server Infrastructure. The connected Nessus/CNVD/NVD...

CVE-2012-6528

ATutor before 2.1 contains multiple cross-site scripting (XSS) vulnerabilities exploitable via PATH_INFO in several endpoints (themes/default/tile_search/index.tmpl.php, login.php, search.php, password_reminder.php, login.php/jscripts/infusion, login.php/mods/_standard/flowplayer, browse.php/jscr...

SuSE 11.1 / 11.2 Security Update : zypper (SAT Patch Numbers 6527 / 6528)

The following issue has been fixed : - The zypper setuid wrapper linked against libzypp. This is not needed and added unnecessary attack vectors. CVE-2012-0420 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

CVE-2012-6528

creationtimestamp| type| source ---|---|--- 2012-01-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36565...

CVE-2008-6528

NTFS TmaxSoft JEUS 5 before Fix 26 allows remote attackers to read the source code for scripts by appending ::$DATA to the URL, which accesses the alternate data stream...

CVE-2008-6528

CVE-2008-6528 affects NTFS on TmaxSoft JEUS 5 before Fix 26. The vulnerability allows remote attackers to read the source code of scripts by appending ::$DATA to the URL, which accesses the NTFS alternate data stream. This exposure could disclose script source contents. The NVD entry lists a CVSS...