36 matches found
GLSA-202008-11 : Chromium, Google Chrome: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202008-11 Chromium, Google Chrome: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the CVE identifiers referenced below for details. Impact : Please review the...
Stable Channel Update for Desktop
The Chrome team is delighted to announce the promotion of Chrome 85 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 85.0.4183.83 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming...
KLA11941 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, cause denial of service, gain privileges, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilitie...
CVE-2019-6571
A vulnerability has been identified in SIEMENS LOGO!8 6ED1052-xyyxx-0BA8 FS:01 to FS:06 / Firmware version V1.80.xx and V1.81.xx, SIEMENS LOGO!8 6ED1052-xyy08-0BA0 FS:01 / Firmware version V1.82.02. An attacker with network access to port 10005/tcp of the LOGO! device could cause a...
CVE-2019-6571
The CVE-2019-6571 vulnerability affects Siemens LOGO!8 devices (firmware v1.80.x–v1.81.x for 6ED1052-xyyxx; and before v1.82.02 for 6ED1052-xyy08-0BA0). A network attacker can cause a Denial-of-Service by sending specially crafted packets to TCP port 10005 (no authentication, no user interaction)...
Siemens LOGO!8 Devices
1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: LOGO!8 devices Vulnerabilities: Improper Restriction of Operations within the Bounds of a Memory Buffer, Session Fixation 2. RISK EVALUATION Successful exploitation of these...
CVE-2017-6571
The CVE-2017-6571 entry concerns a SQL injection in the WordPress Mail Masta (mail-masta) plugin v1.0. The vulnerability is triggered in ./inc/campaign/view-campaign.php via the GET parameter id, potentially exposing the database to arbitrary SQL commands when the attacker has WordPress admin acc...
CVE-2014-6571
The provided documents do not contain any concrete technical details for CVE-2014-6571; no affected products, root cause, or remediation are listed. Monitor for updates.
CVE-2012-4967
CVE-2012-6571 describes a flaw in the HTTP module of Huawei AR routers and related S-series switches (models S2000, S3000, S3500, S3900, S5100, S5600, S7800) where the Branch Intelligent Management System (BIMS) web components use predictable Session ID values. This enables remote attackers to hi...
CVE-2012-6571
The CVE-2012-6571 issue affects Huawei devices (AR routers and S-series switches: S2000, S3000, S3500, S3900, S5100, S5600, S7800). The HTTP module in the BIMS/web management components uses predictable Session ID values, enabling remote attackers to hijack sessions via brute-force. This is docum...
SuSE 11.1 Security Update : libxml2 (SAT Patch Number 6571)
This update fixes several libxml2 integer overflows which could have been used to crash libxml2 parsers or potentially execute code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text...
Carbonite 'Cloud' Backup Service Detection
Binary data 6571.prm...
CVE-2008-6571
The CVE-2008-6571 entry concerns LinPHA (before 1.3.4) with multiple XSS vulnerabilities exposed through login.php and new_images.php (and unspecified vectors). The Red Hat, NVD, Exploit DB, and CVE records consistently state that the issue stems from insufficient input sanitization, allowing rem...
CVE-2007-6571
CVE-2007-6571 describes a cross-site scripting (XSS) vulnerability in Sun Java System Web Proxy Server 3.6 before SP11 on Windows, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affected product/version: Sun Java System Web Proxy Server 3.6 prior to SP11...
CVE-2006-6571
GenesisTrader 1.0 is affected by multiple XSS in form.php. The vulnerability allows remote attackers to inject arbitrary script/HTML via the (1) cuve, (2) chem, (3) do parameters. Connected sources also record a CVSS v2 base score of 6.8 (Medium). No remediation details are provided in the suppli...