CVE-2020-6640

CVE-2020-6640 describes a stored cross-site scripting (XSS) vulnerability in the Fortinet FortiAnalyzer Admin Profile, enabling a remote, authenticated attacker to execute client-side scripts via the Description Area. The issue affects the Admin Profile input handling and arises from improper inp...

CVE-2019-6640

creationtimestamp| type| source ---|---|--- 2019-07-04 18:00:09+00:00| seen| https://t.me/cveNotify/191 2019-07-05 17:00:23+00:00| seen| https://t.me/cveNotify/247...

CVE-2019-6640

The CVE-2019-6640 issue affects F5 BIG-IP products (LTM and related modules) where SNMP exposes sensitive configuration objects over insecure channels when a passphrase is stored in various profiles and retrieved via SNMPv2. Affected versions include BIG-IP 11.5.1–11.5.8, 11.6.1–11.6.3.4, 12.1.0–...

F5 Networks BIG-IP : SNMP vulnerability (K40443301)

SNMP exposes sensitive configuration objects over insecure transmission channels. This issue is exposed when a passphrase is inserted into various profile types and accessed using SNMPv2. CVE-2019-6640 Impact An attacker with direct SNMP access to a BIG-IP system, or an attacker with a privileged...

Denial Of Service (DoS)

V8 is Google's open source JavaScript engine. It was discovered that V8 did not properly check the stack size limit in certain cases. A remote attacker able to send a request that caused a script executed by V8 to use deep recursion could trigger a stack overflow, leading to a crash of an...

CVE-2018-6640

CVE-2018-6640 affects Design Science MathType 6.9c. A heap overflow allows crafted input to modify the next pointer in a linked list, enabling remote code execution. The issue is fixed in MathType 6.9d. The provided documents do not include exploitation status or in-the-wild details. Remediation ...

Cisco Prime Data Center Network Manager Static Credential Authentication Bypass (cisco-sa-20170607-dcnm2)

The Cisco Prime Data Center Network Manager DCNM running on the remote host is affected by an authentication bypass vulnerability due to the presence of a default user account with a static password that is not automatically removed post-installation. An unauthenticated, remote attacker can explo...

CVE-2017-6640

CVE-2017-6640 affects Cisco Prime Data Center Network Manager (DCNM) where a default user account with a static password is not removed after installation. This allows an unauthenticated, remote attacker to log in to the DCNM administrative console and potentially gain root or system-level privil...

CVE-2016-6640

...

CVE-2016-6640

CVE-2016-6640 is rejected/not used and does not represent an active vulnerability entry.

scrubtheweb.com XSS vulnerability

Vulnerable URL: http://www.scrubtheweb.com/cgi-bin/mail/absforms.cgi?Email==order=Name|Email|Comments=scrub=Membership+Question/Problemvariables== Details: Description| Value ---|--- Patched:| Yes, at 28.12.2016 Latest check for patch:| 28.12.2016 16:17 GMT Vulnerability type:| XSS Vulnerability...

Nexus Security Bulletin—January 2016Stay organized with collectionsSave and categorize content based on your preferences.

We have released a security update to Nexus devices through an over-the-air OTA update as part of our Android Security Bulletin Monthly Release process. The Nexus firmware images have also been released to the Google Developer site. Builds LMY49F or later and Android 6.0 with Security Patch Level...

Fedora Update for v8 FEDORA-2015-6908

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for v8 FEDORA-2014-11065

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for v8 FEDORA-2014-10975

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-6640

Summary: CVE-2014-6640 affects the DNB Trade (lt.dnb.mobiletrade) Android app. Root cause: the app does not verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and potentially obtain sensitive information. Impact: CVSS metrics from the NVD indicate partial confide...

Fedora Update for v8 FEDORA-2014-9113

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for v8 FEDORA-2014-9095

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : chromium (openSUSE-SU-2013:1933-1)

Update to Chromium 31.0.1650.63 Stable channel update : - Security fixes : - CVE-2013-6634: Session fixation in sync related to 302 redirects - CVE-2013-6635: Use-after-free in editing - CVE-2013-6636: Address bar spoofing related to modal dialogs - CVE-2013-6637: Various fixes from internal...

openSUSE Security Update : v8 (openSUSE-SU-2014:0092-1)

Update spec-file to fit the changes in V8 addition of internal ICU - Building against system ICU - Regenerate Makefiles before using them - Update to 3.22.24.8 - Security fixes bnc854473 : - CVE-2013-6638: Buffer overflow in v8 - CVE-2013-6639: Out of bounds write in v8 - CVE-2013-6640: Out of...