CVE-2023-6556

creationtimestamp| type| source ---|---|--- 2024-01-11 10:26:37+00:00| seen| https://t.me/ctinow/166427 2024-01-18 14:17:14+00:00| seen| https://t.me/ctinow/169739...

CVE-2023-6556 FOX – Currency Switcher Professional for WooCommerce <= 1.4.1.6 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting

The FOX – Currency Switcher Professional for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via currency options in all versions up to, and including, 1.4.1.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2023-6556

CVE-2023-6556 describes a Stored Cross‑Site Scripting vulnerability in the FOX – Currency Switcher Professional for WooCommerce WordPress plugin. The flaw exists in all versions up to 1.4.1.5 due to insufficient input sanitization and output escaping in currency options, allowing authenticated us...

WordPress WOOCS – WooCommerce Currency Switcher Plugin <= 1.4.1.6 is vulnerable to Cross Site Scripting (XSS)

Software WOOCS – WooCommerce Currency Switcher Type Plugin Vulnerable versions = 1.4.1.6 Fixed in 1.4.1.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-6556 Patch priority Medium CVSS severity Medium 5.4 Developer Claim ownership PSID 45d1f7361e75...

Ubuntu 22.04 LTS / 23.04 / 23.10 : Budgie Extras vulnerabilities (USN-6556-1)

The remote Ubuntu 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6556-1 advisory. It was discovered that Budgie Extras incorrectly handled certain temporary file paths. An attacker could possibly use this issue to injec...

Ubuntu: Security Advisory (USN-6556-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-6556

creationtimestamp| type| source ---|---|--- 2023-01-01 12:15:46+00:00| seen| https://t.me/cibsecurity/55723...

Path traversal

lxc-user-nic in lxc through 5.0.1 is installed setuid root, and may allow local users to infer whether any file exists, even within a protected directory tree, because "Failed to open" often indicates that a file does not exist, whereas "does not refer to a network namespace path" often indicates...

CVE-2016-6556

OpenNMS CVE-2016-6556 affects version 18.0.1 and earlier, due to insufficient filtering of SNMP agent data (sysName/sysContact), enabling stored XSS when web UI data is viewed. The issue was fixed in version 18.0.2 (Sept 20, 2016). No exploitation details are provided in the sources. The related ...

CVE-2020-6556

Heap buffer overflow in SwiftShader in Google Chrome prior to 84.0.4147.135 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2020-6556

Heap buffer overflow in SwiftShader in Google Chrome prior to 84.0.4147.135 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2020-6556

CVE-2020-6556 describes a heap buffer overflow in the SwiftShader component of Google Chrome/Chromium prior to version 84.0.4147.135, enabling remote exploitation of heap corruption via a crafted HTML page. The issue affects the SwiftShader path in Chrome/Chromium and could lead to arbitrary code...

Fedora 31 : chromium (2020-88bf0a76d1)

Update to Chromium 85.0.4183.83. Bugs fixed, security holes patched, and features added. Hold on to your butts. List of CVEs resolved with this update: CVE-2020-6532 CVE-2020-6537 CVE-2020-6538 CVE-2020-6539 CVE-2020-6540 CVE-2020-6541 CVE-2020-6542 CVE-2020-6543 CVE-2020-6544 CVE-2020-6545...

openSUSE: Security Advisory for chromium (openSUSE-SU-2020:1260-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

KLA11949 DoS vulnerability in Opera

A heap buffer overflow vulnerability was found in Opera. Malicious users can exploit this vulnerability to cause denial of service. Original advisories Changelog for Opera 70 Stable Channel Update for Desktop Related products Opera CVE list CVE-2020-6556 critical Solution Update to the latest...

openSUSE Security Update : chromium (openSUSE-2020-1260)

This update for chromium fixes the following issues : - Update to 84.0.4147.135 boo1175505 : - CVE-2020-6556: Heap buffer overflow in SwiftShader C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2020-1260...

openSUSE Security Update : chromium (openSUSE-2020-1263)

This update for chromium fixes the following issues : - Update to 84.0.4147.135 boo1175505 : - CVE-2020-6556: Heap buffer overflow in SwiftShader C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2020-1263...

Important: Red Hat Security Advisory: chromium-browser security update

An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

OPENSUSE-SU-2020:1260-1 Security update for chromium

This update for chromium fixes the following issues: - Update to 84.0.4147.135 boo1175505: CVE-2020-6556: Heap buffer overflow in SwiftShader...

FreeBSD : chromium -- heap buffer overflow (64575bb6-e188-11ea-beed-e09467587c17)

Chrome Releases reports : This release contains one security fix : - 1115345 High CVE-2020-6556: Heap buffer overflow in SwiftShader. Reported by Alison Huffman, Microsoft Browser Vulnerability Research on 2020-08-12 C Tenable Network Security, Inc. The descriptive text and package checks in this...