42 matches found
RHEL 9 : thunderbird (RHSA-2022:6717)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:6717 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.3.0. Security Fixes: Mozilla:...
CVE-2020-6717
CVE-2020-6717 entry is rejected/not used and does not represent an active vulnerability.
CVE-2012-6717
creationtimestamp| type| source ---|---|--- 2019-08-28 16:32:16+00:00| seen| https://t.me/cibsecurity/6407...
CVE-2012-6717
CVE-2012-6717 affects the WordPress Redirection plugin prior to version 2.2.12. The vulnerability is a Cross-Site Scripting (XSS) issue in the plugin, enabling an attacker to inject malicious script via the plugin’s input handling. Scope: WordPress redirection plugin; vulnerable versions include
CVE-2017-6717
Cisco Firepower Management Center (FMC) is affected by CVE-2017-6717, a cross-site scripting (XSS) vulnerability in the FMC web framework. An authenticated, remote attacker could exploit this via the web interface to target a FMC user. Affected releases include 6.0.1.3 and 6.2.1; fixed in 6.2.1 (...
Cisco Firepower Management Center Cross-Site Scripting Vulnerability
A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a...
Android Mitigation Bypass Vulnerability
Because of a design bug in IOMX, the user-supplied sizes in the GETPARAMETER and SETPARAMETER calls ar e discarded before calling in to the responsible OMX code-paths. This has led to a variety of overflow-type bugs. Android: mitigation bypass - the guard page creation in IOMX can fail...
CVE-2016-6717
CVE-2016-6717 corresponds to an elevation-of-privilege in Android’s Mediaserver. A local malicious app could execute code in a privileged process due to memory/parameter handling in Mediaserver when processing media data. Affected Android versions span 4.x up to 7.0 (pre-2016-11-01 and pre-2016-1...
Adobe Acrobat < 10.1.16 / 11.0.13 / 2015.006.30094 / 2015.009.20069 Multiple Vulnerabilities (APSB15-24)
The version of Adobe Acrobat installed on the remote Windows host is a version prior to 10.1.16, 11.0.13, 2015.006.30094, or 2015.009.20069. It is, therefore, affected by multiple vulnerabilities. - The ANAuthenticateResource method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before...
Design/Logic Flaw
The CBSharedReviewSecurityDialog method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScrip...
Design/Logic Flaw
The CBSharedReviewCloseDialog method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript A...
Design/Logic Flaw
The ANAuthenticateResource method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript API...
Design/Logic Flaw
The CBBBRInvite method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript API execution...
CVE-2015-6717
Technical details for CVE-2015-6717 are not publicly available in the provided connected documents. Monitor for official updates from Adobe and vulnerability trackers.
CVE-2014-6717
The CVE-2014-6717 vulnerability affects the iTriage Health Android app (package com.healthagen.iTriage) version 5.29. The issue is that the app does not verify X.509 certificates from SSL servers, creating a trust flaw that can enable man-in-the-middle attackers to spoof servers and obtain sensit...
CVE-2013-6717
Summary of CVE-2013-6717 : The IBM DB2 OLAP query engine (affecting DB2 9.7 FP9, 9.8 FP3a/FP4, 10.1 FP3, 10.5 FP2/FP3, and the DB2 pureScale Feature 9.8 for Enterprise Server Edition) contains a vulnerability that could allow a remote, authenticated user to cause a denial of service by terminatin...
AIX 5.2 TL 10 : bos.net.tcp.client (U812052)
The remote host is missing AIX PTF U812052, which is related to the security of the package bos.net.tcp.client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U812052. The text itself is copyright C...
CVE-2008-6717
CVE-2008-6717 affects U&M Software Signup 1.0 and 1.1. The issue is that administrative authentication is not required for all scripts in the admin/ directory, allowing remote attackers to access sensitive admin endpoints (adminstart.php, admineventtype.php, admineventdetails.php, admineventlist....