121 matches found
CVE-2024-6604 Memory safety bugs fixed in Firefox 128, Firefox ESR 115.13, Thunderbird 128, and Thunderbird 115.13
Memory safety bugs present in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox 128, Firefox ESR...
Mozilla Firefox < 128.0
The version of Firefox installed on the remote macOS or Mac OS X host is prior to 128.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2024-29 advisory. - When almost out-of-memory an elliptic curve key which was never allocated could have been freed again...
Mozilla Firefox < 128.0
The version of Firefox installed on the remote Windows host is prior to 128.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2024-29 advisory. - When almost out-of-memory an elliptic curve key which was never allocated could have been freed again. CVE-2024-6609 -...
SUSE CVE-2023-6604
A flaw was found in FFmpeg. This vulnerability allows unexpected additional CPU load and storage consumption, potentially leading to degraded performance or denial of service via the demuxing of arbitrary data as XBIN-formatted data without proper format validation...
Ubuntu: Security Advisory (USN-6604-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MAL-2024-768 Malicious code in wlwz-2312-6604 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6e9597277373c0e02a3c399de39651570d2ad85021bca5fb0e627b67ac88aee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in wlwz-2312-6604 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6e9597277373c0e02a3c399de39651570d2ad85021bca5fb0e627b67ac88aee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2020-6604
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...
The vulnerability of the microprogramming software of Zyxel NBG-418N switches lies in the copying of buffers without checking the size of the input data, allowing a hacker to trigger a service failure.
The vulnerability of the microprogramming software of Zyxel NBG6604 lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...
K26455071: BIG-IP HSB vulnerability CVE-2019-6604
Security Advisory Description Under certain conditions, hardware systems with a High-Speed Bridge HSB using non-default Layer 2 forwarding configurations may experience a lockup of the HSB. CVE-2019-6604 This vulnerability occurs when all of the following conditions are met: A VLAN group is...
CVE-2016-11037
CVE-2016-11037 is a reservation duplicate of CVE-2016-6604. Connected records show a NULL pointer dereference in the Samsung Exynos fimg2d driver for Android L (5.0/5.1) and M (6.0), allowing unspecified impact via unknown vectors. Affected component: Samsung Exynos fimg2d graphics driver on affe...
CVE-2019-6604
On BIG-IP 11.5.1-11.5.8, 11.6.1-11.6.3, 12.1.0-12.1.3.6, 13.0.0-13.1.1.1, and 14.0.0-14.0.0.2, under certain conditions, hardware systems with a High-Speed Bridge and using non-default Layer 2 forwarding configurations may experience a lockup of the High-Speed Bridge...
CVE-2019-6604
CVE-2019-6604 affects BIG-IP systems with High-Speed Bridge (HSB) under non-default Layer 2 forwarding configurations. A VLAN group configuration combined with vlangroup.flow.allocate being disabled can cause the HSB to lock up, eventually stopping traffic processing and triggering a failover in ...
CVE-2014-6604
Vulnerability context: CVE-2014-6604 affects the WordPress Subscribe2 plugin, specifically the class-s2-list-table.php component, with exploitation via the ip parameter. The issue is an XSS vulnerability in versions prior to 10.16. What’s affected: Subscribe2 plugin for WordPress (plugin file: cl...
CVE-2018-6604
SQL Injection exists in the Zh YandexMap 6.2.1.0 component for Joomla! via the id parameter in a task=getPlacemarkDetails request...
CVE-2018-6604
SQL Injection exists in the Zh YandexMap 6.2.1.0 component for Joomla! via the id parameter in a task=getPlacemarkDetails request...
CVE-2018-6604
Summary: The CVE-2018-6604 vulnerability affects the Zh YandexMap Joomla! extension (version 6.2.1.0 and earlier). The issue is a SQL injection in the getPlacemarkDetails flow, exploitable via the id parameter in the task=getPlacemarkDetails request. This can allow an attacker to inject SQL comma...
Joomla Zh YandexMap 6.2.1.0 Component - id SQL Injection Vulnerability
Exploit for php platform in category web applications input name="id" value="-11 UNION ALL SELECT...
