32 matches found
EUVD-2024-41578
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2016-6721
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An information disclosure vulnerability in Mediaserver in Android 6.x before 2016-11-01 and 7.0 before 2016-11-01 could enable a local malicious application to...
CVE-2025-6721
The Vchasno Kasa plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the mrkvvchasnokasawcdometaboxaction function in all versions up to, and including, 1.0.3. This makes it possible for unauthenticated attackers to generate invoices for arbitrar...
WordPress Vchasno Kasa plugin <= 1.0.3 - Missing Authorization to Unauthenticated Invoice Generation vulnerability
Missing Authorization to Unauthenticated Invoice Generation vulnerability discovered by Poli in WordPress Plugin Vchasno Kasa versions = 1.0.3...
CVE-2025-6721
The Vchasno Kasa plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the mrkvvchasnokasawcdometaboxaction function in all versions up to, and including, 1.0.3. This makes it possible for unauthenticated attackers to generate invoices for arbitrar...
CVE-2025-6721
The CVE-2025-6721 affects the Vchasno Kasa WordPress plugin (MORKVA Vchasno Kasa Integration) up to version 1.0.3. Root cause: missing capability check in the mrkv_vchasno_kasa_wc_do_metabox_action() function, enabling unauthenticated users to generate invoices for arbitrary orders. This is an un...
CVE-2025-6721 Vchasno Kasa <= 1.0.3 - Missing Authorization to Unauthenticated Invoice Generation
The Vchasno Kasa plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the mrkvvchasnokasawcdometaboxaction function in all versions up to, and including, 1.0.3. This makes it possible for unauthenticated attackers to generate invoices for arbitrar...
RHEL 8 : thunderbird (RHSA-2024:6721)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:6721 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: thunderbird: 115.15/128.2 mozilla: Type confusion when lookin...
CVE-2024-6721
creationtimestamp| type| source ---|---|--- 2024-07-15 16:00:41+00:00| seen| https://t.me/cvedetector/864...
CVE-2023-6721
creationtimestamp| type| source ---|---|--- 2024-01-10 08:36:35+00:00| seen| https://t.me/ctinow/165629...
SUSE CVE-2015-6721
The CBSharedReviewSecurityDialog method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScrip...
CVE-2020-6721
CVE-2020-6721 is rejected/not used and does not represent an active vulnerability entry.
CVE-2020-6721
...
CVE-2012-6721
CVE-2012-6721 describes multiple CSRF vulnerabilities in the SocialEngine platform, affecting the (1) Forum, (2) Event, and (3) Classifieds plugins when running versions earlier than 4.2.4. The connected documents provide the concrete details: the vulnerable software components are the three Soci...
CVE-2017-6721
A vulnerability in the ingress processing of fragmented TCP packets by Cisco Wide Area Application Services WAAS could allow an unauthenticated, remote attacker to cause the WAASNET process to restart unexpectedly, causing a denial of service DoS condition. More Information: CSCvc57428. Known...
CVE-2017-6721
A vulnerability in the ingress processing of fragmented TCP packets by Cisco Wide Area Application Services WAAS could allow an unauthenticated, remote attacker to cause the WAASNET process to restart unexpectedly, causing a denial of service DoS condition. More Information: CSCvc57428. Known...
CVE-2017-6721
The CVE concerns Cisco Wide Area Application Services (WAAS). The vulnerability exists in the ingress processing of fragmented TCP packets, due to incomplete input validation of TCP fragments, which can cause the WAASNET process to restart and trigger a DoS. Affected release: 6.3(1). Fixed releas...
CVE-2016-6721
An information disclosure vulnerability in Mediaserver in Android 6.x before 2016-11-01 and 7.0 before 2016-11-01 could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without...
CVE-2016-6721
The CVE-2016-6721 entry concerns an information-disclosure vulnerability in Mediaserver on Android 6.x (before 2016-11-01) and 7.0 (before 2016-11-01). A local malicious application could access data outside its permission granularity due to Mediaserver processing of media files. The issue is lis...
Adobe Acrobat < 10.1.16 / 11.0.13 / 2015.006.30094 / 2015.009.20069 Multiple Vulnerabilities (APSB15-24)
The version of Adobe Acrobat installed on the remote Windows host is a version prior to 10.1.16, 11.0.13, 2015.006.30094, or 2015.009.20069. It is, therefore, affected by multiple vulnerabilities. - The ANAuthenticateResource method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before...