FreeBSD : chromium -- multiple vulnerabilities (64988354-0889-11eb-a01b-e09467587c17)

Chrome releases reports : This release contains 35 security fixes, including : - 1127322 Critical CVE-2020-15967: Use after free in payments. Reported by Man Yue Mo of GitHub Security Lab on 2020-09-11 - 1126424 High CVE-2020-15968: Use after free in Blink. Reported by Anonymous on 2020-09-09 -...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 86 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 86.0.4240.75 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming...

Google Chrome < 86.0.4240.75 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 86.0.4240.75. It is, therefore, affected by multiple vulnerabilities as referenced in the 202010stable-channel-update-for-desktop advisory. - Insufficient policy enforcement in networking in Google Chrome prior to...

CVE-2019-6557

CVE-2019-6557 maps to buffer copy without size checking in Moxa IKS and EDS, enabling remote code execution via network access. Affected devices include Moxa IKS-G6824A, EDS-405A/408A/510A families (vulnerable variants noted in ICS advisory ICS‑A‑19‑057‑01). The root cause is a classic buffer ove...

CVE-2019-6557

Several buffer overflow vulnerabilities have been identified in Moxa IKS and EDS, which may allow remote code execution...

USN-3748-1: base-files vulnerability | Cloud Foundry

Severity Low Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description Sander Bos discovered that the MOTD update script incorrectly handled temporary files. A local attacker could use this issue to cause a denial of service, or possibly escalate privileges if kernel symlink...

CVE-2018-6557 Insecure temporary file use in base-files

The MOTD update script in the base-files package in Ubuntu 18.04 LTS before 10.1ubuntu2.2, and Ubuntu 18.10 before 10.1ubuntu6 incorrectly handled temporary files. A local attacker could use this issue to cause a denial of service, or possibly escalate privileges if kernel symlink restrictions we...

CVE-2018-6557

CVE-2018-6557 affects the MOTD update script in Ubuntu’s base-files package. The issue stems from improper handling of temporary files, which could allow a local attacker to cause a denial of service or potentially escalate privileges if kernel symlink restrictions were disabled. Affected release...

CVE-2016-6557

In ASUS RP-AC52 access points with firmware version 1.0.1.1s and possibly earlier, the web interface, the web interface does not sufficiently verify whether a valid request was intentionally provided by the user. An attacker can perform actions with the same permissions as a victim user, provided...

CVE-2016-6557

The CVE-2016-6557 issue affects ASUS RP-AC52 (firmware 1.0.1.1s and possibly earlier). The web interface fails to sufficiently verify that a request is intentional, allowing CSRF where an attacker can perform actions with the victim’s permissions if the victim has an active session and is induced...

CVE-2016-6557 The ASUS RP-AC52 access point, firmware version 1.0.1.1s and possibly earlier, is vulnerable to cross-site request forgery

In ASUS RP-AC52 access points with firmware version 1.0.1.1s and possibly earlier, the web interface, the web interface does not sufficiently verify whether a valid request was intentionally provided by the user. An attacker can perform actions with the same permissions as a victim user, provided...

CVE-2013-6557

CVE-2013-6557 entry is rejected/not used; this candidate does not correspond to an active vulnerability.

CVE-2013-6557

...

CVE-2017-6557

CVE-2017-6557 concerns ArrayOS prior to AG 9.4.0.135 where the portal bookmark function, when enabled, yields a SQL injection vulnerability. The issue allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. The affected product is ArrayOS; the described root c...

CVE-2015-6557

The CVE-2015-6557 issue affects IBM Tivoli Storage Manager suites (Databases, Mail, FlashCopy Manager) when application tracing is enabled. It discloses cleartext passwords in trace output or GUI exception messages, allowing a local attacker with access to the system to obtain sensitive credentia...

CVE-2014-6557

CVE-2014-6557 affects Oracle Enterprise Manager Grid Control’s Application Performance Management (APM) component, prior to version 12.1.0.6.2. The vulnerability is described as unspecified, allowing remote authenticated users to impact confidentiality and integrity via unknown vectors related to...

CVE-2014-6557

Unspecified vulnerability in the Application Performance Management component in Oracle Enterprise Manager Grid Control before 12.1.0.6.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to End User Experience Management...

CVE-2012-6557

Multiple XSS vulnerabilities in the AboutMe plugin 1.1.1 for Vanilla Forums allow remote attackers to inject arbitrary script/HTML via any of 15 AboutMe fields on the Edit My Details page (RealName, Name, Quote, Loc, Emp, JobTit, HS, Col, Bio, Inter, Mus, Gam, Mov, FTV, Bks). Affected software: V...

Fedora Update for telepathy-idle FEDORA-2013-6557

Check for the Version of telepathy-idle OpenVAS Vulnerability Test Fedora Update for telepathy-idle FEDORA-2013-6557 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

CVE-2012-6557

creationtimestamp| type| source ---|---|--- 2012-05-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18911...