61 matches found
CVE-2018-6756
The CVE-2018-6756 entry concerns McAfee True Key (TK) Windows Client with affected version(s) up to 5.1.230.7, where an Authentication Abuse vulnerability enables local users to execute unauthorized commands via specially crafted malware. Connected documents corroborate local privilege/escalation...
CVE-2018-6756 True Key (TK) Windows Client - Authentication Abuse vulnerability
Authentication Abuse vulnerability in Microsoft Windows client in McAfee True Key TK 5.1.230.7 and earlier allows local users to execute unauthorized commands via specially crafted malware...
CVE-2017-6756
The CVE-2017-6756 entry describes a CSRF vulnerability in the Web UI Application of Cisco Prime Collaboration Provisioning Tool (PCPT) up to version 12.2. An unauthenticated, remote attacker could induce a user’s browser to perform actions authorized for that user, enabling partial impact to conf...
CVE-2013-6756
CVE-2013-6756 is rejected and does not represent an active vulnerability entry.
CVE-2016-6756
An information disclosure vulnerability in Qualcomm components including the camera driver and video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process...
CVE-2016-6756
CVE-2016-6756 describes an information-disclosure vulnerability affecting Qualcomm components (including the camera driver and video driver) on Android. The issue could allow a local malicious application to access data outside its permission level, with root cause tied to a privileged-process co...
openSUSE Security Update : Chromium (openSUSE-2015-679)
Chromium was update do the stable release 46.0.2490.71 to fix security issues. The following vulnerabilities were fixed : - CVE-2015-6755: Cross-origin bypass in Blink - CVE-2015-6756: Use-after-free in PDFium - CVE-2015-6757: Use-after-free in ServiceWorker - CVE-2015-6758: Bad-cast in PDFium -...
[SECURITY] [DSA 3376-1] chromium-browser security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3376-1 [email protected] https://www.debian.org/security/ Michael Gilbert October 20, 2015 https://www.debian.org/security/faq -...
Debian Security Advisory DSA 3376-1 (chromium-browser - security update)
Several vulnerabilities have been discovered in the chromium web browser. CVE-2015-1303 Mariusz Mlynski discovered a way to bypass the Same Origin Policy in the DOM implementation. CVE-2015-1304 Mariusz Mlynski discovered a way to bypass the Same Origin Policy in the v8 javascript library...
Important: Red Hat Security Advisory: chromium-browser security update
Updated chromium-browser packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severit...
CVE-2015-6756
CVE-2015-6756 is a use-after-free in the PDFium CPDFSDK_PageView (fpdfsdk/src/fsdk_mgr.cpp) used by Google Chrome up to version 46.0.2490.71. Exploitation could lead to denial of service or heap memory corruption by mishandling a focused annotation in a PDF. The associated connected sources confi...
CVE-2015-6756
Removed by vendor...
FreeBSD : chromium -- multiple vulnerabilities (8301c04d-71df-11e5-9fcb-00262d5ed8ee)
Google Chrome Releases reports : 24 security fixes in this release, including : - 519558 High CVE-2015-6755: Cross-origin bypass in Blink. Credit to Mariusz Mlynski. - 507316 High CVE-2015-6756: Use-after-free in PDFium. Credit to anonymous. - 529520 High CVE-2015-6757: Use-after-free in...
Stable Channel Update
The Chrome team is delighted to announce the promotion of Chrome 46 to the stable channel for Windows, Mac and Linux. Chrome 46.0.2490.71 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming Chrome and Chromium blog posts about new...
CVE-2014-6756
The CVE-2014-6756 entry affects the Reddit Aww (org.biais.redditawww) Android app v1.2.1, where the app does not verify X.509 certificates from SSL servers. This certificate validation bypass enables MITM attackers to spoof legitimate servers and read or tamper with sensitive data. The NVD entry ...
CVE-2007-6756
The CVE-2007-6756 entry affects ZOLL Defibrillator/Monitor M Series, E Series, and R Series. A default password used in System Configuration mode allows physically proximate attackers to modify device configuration, leading to a denial of service (with potential adverse health effects). The avail...
ABB RTU560 Substation Automation Detection
Binary data 6756.prm...
CVE-2008-6756
ZoneMinder 1.23.3 on Gentoo Linux uses 0644 permissions for /etc/zm.conf, which allows local users to obtain the database username and password by reading this file...
CVE-2008-6756
CVE-2008-6756 – Normal mode : ZoneMinder 1.23.3 on Gentoo Linux stores /etc/zm.conf with 0644 permissions, allowing any local user to read the file and exfiltrate the database username and password. The impact is a local confidentiality exposure of DB credentials. No remediation details are provi...