Ubuntu 22.04 LTS / 23.10 : Google Guest Agent and Google OS Config Agent vulnerability (USN-6746-1)

The remote Ubuntu 22.04 LTS / 23.10 host has packages installed that are affected by a vulnerability as referenced in the USN-6746-1 advisory. It was discovered that Google Guest Agent and Google OS Config Agent incorrectly handled certain JSON files. An attacker could possibly use this issue to...

CVE-2023-6746

creationtimestamp| type| source ---|---|--- 2024-01-18 07:07:57+00:00| seen| https://t.me/ctinow/169593...

CVE-2023-6746

CVE-2023-6746 affects GitHub Enterprise Server back-end logging: an insertion of sensitive information into log files could enable a man-in-the-middle-like scenario when combined with phishing, if an attacker can access log files, backups, or streamed logs. Affected versions include all releases ...

Oracle Linux 9 : nghttp2 (ELSA-2023-6746)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-6746 advisory. 1.43.0-5.1 - fix HTTP/2 Rapid Reset CVE-2023-44487 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Rocky Linux 9 : nghttp2 (RLSA-2023:6746)

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:6746 advisory. - The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wil...

CVE-2020-6746

CVE-2020-6746 is rejected/not used; this CVE ID does not represent an active vulnerability entry.

Foxit Studio Photo < 3.6.6.909 Multiple Vulnerabilities

According to its self-reported version, the Foxit Studio Photo application installed on the remote Windows host is affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid133853; scriptversion"1.2";...

Foxit Software Foxit Studio Photo <= 3.6.6.779 Multiple Vulnerabilities

Foxit Studio Photo is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2019-6746

Foxit Studio Photo 3.6.6 (and earlier) is affected by a TIF file handling flaw that can disclose sensitive information due to a read past the end of an allocated structure. The issue requires user interaction (visiting a malicious page or opening a malicious file) and, per the sources, could be l...

Security Bulletin: IBM FileNet P8 Platform Documentation Installable Info Center cross-site scripting vulnerability (CVE-2013-6746)

Summary A cross-site scripting vulnerability has been identified in the IBM FileNet P8 Platform Documentation Installable Info Center that is shipped with the IBM FileNet Business Process Manager, IBM FileNet Content Manager, and IBM Case Foundation. Vulnerability Details The following components...

CVE-2017-6746

A vulnerability in the web interface of the Cisco Web Security Appliance WSA could allow an authenticated, remote attacker to perform command injection and elevate privileges to root. The attacker must authenticate with valid administrator credentials. Affected Products: Cisco AsyncOS Software 10...

CVE-2017-6746

The CVE-2017-6746 entry describes a command-injection and root-privilege escalation vulnerability in the web interface of Cisco Web Security Appliance (WSA) running Cisco AsyncOS. Impact requires an authenticated administrator, and the flaw allows remote command execution with root privileges via...

CVE-2016-6746

CVE-2016-6746 describes an information-disclosure vulnerability in the NVIDIA GPU driver on Android devices prior to 2016-11-05, enabling a local malicious app to access data outside its permission set. The issue is categorized as High/Medium impact depending on source, with the NVD noting data e...

CVE-2015-0942

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-6742, CVE-2015-6743, CVE-2015-6744, CVE-2015-6745, CVE-2015-6746, CVE-2015-6747. Reason: This candidate originally combined multiple issues that have different vulnerability types and other complex abstraction issues. Notes:...

CVE-2015-6746

CVE-2015-6746 affects Basware Banking (Maksuliikenne) prior to 8.90.07.X. The vulnerability arises because private keys are stored in plaintext in the SQL database, enabling remote attackers to spoof communications with banks via unspecified vectors. CNVD entries corroborate the issue in 8.90.07....

CVE-2014-6746

The CVE covers the Infiniti Roadside Assistance Android app (com.ccas.rsa.common.infiniti) version 1.1, which fails to verify SSL X.509 certificates. This certificate validation flaw enables man-in-the-middle attackers to spoof servers and obtain sensitive data via a crafted certificate. The prov...

CVE-2014-6746

The Infiniti Roadside Assistance aka com.ccas.rsa.common.infiniti application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2013-6746

Cross-site scripting XSS vulnerability in FileNet P8 Platform Documentation Installable Info Center 4.5.1 through 5.2.0 in IBM FileNet Business Process Manager 4.5.1 through 5.1.0, FileNet Content Manager 4.5.1 through 5.2.0, and Case Foundation 5.2.0 allows remote attackers to inject arbitrary w...

CVE-2013-6746

CVE-2013-6746 is an XSS vulnerability in IBM FileNet P8 Platform Documentation Installable Info Center shipped with IBM FileNet BPM, Content Manager, and Case Foundation. Affected components/versions include FileNet P8 Platform Documentation Installable Info Center 4.5.1–5.2.0, with IBM BPM 4.5.1...

CVE-2007-6746

CVE-2007-6746 affects telepathy-idle before 0.1.15, where SSL certificate validation is incomplete: (1) issuer trusted-CA check bypassed, (2) hostname not strictly validated against CN, and (3) certificate expiration date not verified. This enables potential MITM attacks by presenting arbitrary v...