51 matches found
Mozilla Firefox < 128.0
The version of Firefox installed on the remote Windows host is prior to 128.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2024-29 advisory. - When almost out-of-memory an elliptic curve key which was never allocated could have been freed again. CVE-2024-6609 -...
Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel (Azure) vulnerabilities (USN-6607-1)
The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6607-1 advisory. It was discovered that the SMB network file sharing protocol implementation in the Linux kernel did not properly handle certain error...
Malicious code in wlwz-2312-6607 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b58299aecb53c1be1fbb01c3e313e5ad26e509853ebd4992db63ef7cdd38c8b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-6607
creationtimestamp| type| source ---|---|--- 2023-12-31 10:16:54+00:00| seen| https://t.me/ctinow/161049...
CVE-2023-6607
A vulnerability has been found in Tongda OA 2017 up to 11.10 and classified as critical. Affected by this vulnerability is an unknown functionality of the file general/wiki/cp/manage/delete.php. The manipulation of the argument TERMIDSTR leads to sql injection. The exploit has been disclosed to t...
CVE-2023-6607 Tongda OA 2017 delete.php sql injection
A vulnerability has been found in Tongda OA 2017 up to 11.10 and classified as critical. Affected by this vulnerability is an unknown functionality of the file general/wiki/cp/manage/delete.php. The manipulation of the argument TERMIDSTR leads to sql injection. The exploit has been disclosed to t...
CVE-2023-6607
CVE-2023-6607 affects Tongda OA 2017 up to 11.10. The vulnerability is a SQL injection in general/wiki/cp/manage/delete.php where manipulating TERM_ID_STR enables injection. The exploit has been disclosed publicly and vendor response is not documented in the provided sources. No remediation detai...
CVE-2020-6607
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...
Debian: Security Advisory (DLA-626-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2016-0291)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-6607
The CVE-2019-6607 issue affects F5 BIG-IP ASM: a stored cross-site scripting (XSS) vulnerability in a violation shown in the Configuration utility. Exploitation can allow a attacker to store a CSRF that in the worst case executes code as an admin user. Affected versions include BIG-IP ASM 11.5.1–...
CVE-2013-6607
This CVE entry is rejected/not used and does not represent an active vulnerability.
CVE-2016-6607
XSS issues were discovered in phpMyAdmin. This affects Zoom search specially crafted column content can be used to trigger an XSS attack; GIS editor certain fields in the graphical GIS editor are not properly escaped and can be used to trigger an XSS attack; Relation view; the following...
CVE-2016-6607
phpMyAdmin is affected by CVE-2016-6607: XSS vulnerabilities in multiple components (Zoom search, GIS editor, relations view, various Transformations, XML/MediaWiki exports, Designer, etc.) due to improper escaping. Affected are phpMyAdmin 4.0.x before 4.0.10.17, 4.4.x before 4.4.15.8, and 4.6.x ...
CVE-2016-6607
XSS issues were discovered in phpMyAdmin. This affects Zoom search specially crafted column content can be used to trigger an XSS attack; GIS editor certain fields in the graphical GIS editor are not properly escaped and can be used to trigger an XSS attack; Relation view; the following...
Debian DLA-626-1 : phpmyadmin security update
Phpmyadmin, a web administration tool for MySQL, had several vulnerabilities reported. CVE-2016-6606 A pair of vulnerabilities were found affecting the way cookies are stored. The decryption of the username/password is vulnerable to a padding oracle attack. The can allow an attacker who has acces...
CVE-2015-6607
SQLite before 3.8.9, as used in Android before 5.1.1 LMY48T, allows attackers to gain privileges via a crafted application, aka internal bug 20099586...
CVE-2015-6607
CVE-2015-6607 affects SQLite prior to 3.8.9 as used in Android up to 5.1.1; root cause internal bug 20099586 allows privilege gain via a crafted app. Mitigation noted in Apple advisories: iTunes updates addressed this by upgrading SQLite to 3.15.2; overall remediation is to move SQLite to a fixed...
CVE-2014-6607
M/Monit 3.3.2 and earlier does not verify the original password before changing passwords, which allows remote attackers to change the password of other users and gain privileges via the fullname and password parameters, a different vulnerability than CVE-2014-6409...