chromium -- multiple vulnerabilities

Chrome Releases reports: This release contains 5 security fixes: 1116304 High CVE-2020-6573: Use after free in video. Reported by Leecraso and Guang Gong of 360 Alpha Lab working with 360 BugCloud on 2020-08-14 1102196 High CVE-2020-6574: Insufficient policy enforcement in installer. Reported by...

KLA11957 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities: 1. Use after free in offscreen canvas can be exploited to cause denial of service; 2. Use after free in video can be...

CVE-2019-6575

CVE-2019-6575 affects Siemens industrial products using OPC UA, including SIMATIC CP443-1 OPC UA, ET 200 Open Controller CPU 1515SP PC2, HMI Outdoor Panels (7"/15"), HMI Comfort Panels (4"–22"), KTP Mobile Panels, IPC DiagMonitor, NET PC Software, RF188C, RF600R, S7‑1500 family, WinCC OA/Runtime,...

Siemens Industrial Products with OPC UA (Update H)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SIMATIC, SINEC-NMS, SINEMA, SINEMURIK Industrial Control Products with OPC UA Vulnerability: Uncaught Exception 2. UPDATE INFORMATION This updated advisory is a follow-up to the...

CVE-2018-6575

SQL Injection exists in the JEXTN Classified 1.0.0 component for Joomla! via a view=boutique&sid= request...

CVE-2018-6575

CVE-2018-6575 is a SQL injection vulnerability in the JEXTN Classified 1.0.0 Joomla! component, exploitable via the request parameter view=boutique&sid= in Joomla! extension JEXTN Classified. Root cause: unsafe handling of input in the affected component allows arbitrary SQL execution, leading to...

CVE-2018-6575

SQL Injection exists in the JEXTN Classified 1.0.0 component for Joomla! via a view=boutique&sid= request...

CVE-2013-6575

...

CVE-2013-6575

CVE-2013-6575 entry is rejected/not used and does not represent an active vulnerability.

CVE-2017-6575

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/lists/editmember.php with the GET Parameter: memberid...

CVE-2017-6575

The CVE-2017-6575 entry maps to a concrete SQL injection vulnerability in the WordPress Mail Masta (aka mail-masta) plugin v1.0. The flaw exists in the file ./inc/lists/edit_member.php and is triggered via the GET parameter member_id, allowing an attacker with WordPress admin access to inject arb...

CVE-2015-6575

SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I does not properly consider integer promotion, which allows remote attackers to execute arbitrary code or cause a denial of service integer overflow and memory corruption via crafted atoms in MP4 data, aka internal bug 20139950, a...

CVE-2015-6575

SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I does not properly consider integer promotion, which allows remote attackers to execute arbitrary code or cause a denial of service integer overflow and memory corruption via crafted atoms in MP4 data, aka internal bug 20139950, a...

CVE-2015-6575

Technical details for CVE-2015-6575 are not publicly available in the provided documents; monitor for updates from official advisories.

CVE-2014-6575

Technical details for CVE-2014-6575 are not provided in the supplied documents. Public sources here show generic references and unrelated CVEs; monitor for updates.

CVE-2012-6575

CVE-2012-6575 affects the Drupal Exposed Filter Data module (6.x-1.x) prior to 6.x-1.2. It is a cross-site scripting (XSS) issue that allows remote attackers to inject arbitrary scripts via unspecified vectors. Root cause: insufficient input sanitization in the module. Impact: potential execution...

iTunes < 10.7 Multiple Vulnerabilities

Binary data 6575.prm...

CVE-2008-6575

Technical details about CVE-2008-6575 are not publicly provided in the connected documents. The materials only reiterate an unspecified denial-of-service against Avaya SES SIP server. Monitor for updates and new advisories to clarify impact and remediation.

CVE-2006-6575

The vulnerability CVE-2006-6575 affects the Yet Another PHP LDAP Admin Project (yaplap) versions 0.6 and 0.6.1, where a PHP remote file inclusion is possible via the LOGIN_style parameter, enabling remote code execution. The root cause is an unsafe handling of user-supplied URL input in that para...