46 matches found
CVE-2023-6769 Stored XSS vulnerability in Amazing Little Poll
Stored XSS vulnerability in Amazing Little Poll, affecting versions 1.3 and 1.4. This vulnerability allows a remote attacker to store a malicious JavaScript payload in the "lpadmin.php" file in the "question" and "item" parameters. This vulnerability could lead to malicious JavaScript execution...
SUSE CVE-2015-6769
The provisional-load commit implementation in WebKit/Source/bindings/core/v8/WindowProxy.cpp in Google Chrome before 47.0.2526.73 allows remote attackers to bypass the Same Origin Policy by leveraging a delay in window proxy clearing...
MediaTek 多款产品安全漏洞
MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in the MediaTek component camera, which originates from uninitialized data and can be exploited by an attacker to cause a local information disclosure. The following products and...
CVE-2020-6769
Missing Authentication for Critical Function in the Bosch Video Streaming Gateway VSG allows an unauthenticated remote attacker to retrieve and set arbitrary configuration data of the Video Streaming Gateway. A successful attack can impact the confidentiality and availability of live and recorded...
CVE-2020-6769
CVE-2020-6769 concerns a missing authentication vulnerability in the Bosch Video Streaming Gateway (VSG). The issue allows an unauthenticated remote attacker to retrieve and set arbitrary configuration data on the VSG, with potential impact on the confidentiality and availability of live and reco...
CVE-2020-6769 Missing Authentication for Critical Function in Bosch Video Streaming Gateway
Missing Authentication for Critical Function in the Bosch Video Streaming Gateway VSG allows an unauthenticated remote attacker to retrieve and set arbitrary configuration data of the Video Streaming Gateway. A successful attack can impact the confidentiality and availability of live and recorded...
CVE-2019-6769
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.4.1.16828. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2019-6769
CVE-2019-6769 affects Foxit Reader 9.4.1.16828 and earlier. The flaw is in the removeField method when processing AcroForms, caused by not validating the existence of an object before operating on it, enabling arbitrary code execution in the attacker’s context after user interaction (visit a mali...
CVE-2018-6769
CVE-2018-6769 affects Jiangmin Antivirus 16.0.0.100, where the driver KrnlCall.sys fails to validate input values to IOCTL 0x99008020, enabling local attackers to trigger a denial of service (BSOD) and potentially other impact. The vulnerability is described consistently across multiple sources (...
CVE-2017-6769
Cisco Secure Access Control System (ACS) web-based management interface contains a stored XSS vulnerability. An authenticated, remote attacker could exploit insufficient input validation and lack of encoding to inject malicious scripts affecting users of the ACS web UI. Affected releases include ...
Chrome Universal XSS via the unload_event module (CVE-2015-6769)
VULNERABILITY DETAILS From /WebKit/Source/core/loader/DocumentLoader.cpp: PassRefPtrWillBeRawPtr DocumentLoader::createWriterForconst Document ownerDocument, const DocumentInit& init, ... LocalFrame frame = init.frame; ASSERT!frame-document || !frame-document-isActive; ASSERTframe-tree.childCount...
CVE-2016-6769
An elevation of privilege vulnerability in Smart Lock could enable a local malicious user to access Smart Lock settings without a PIN. This issue is rated as Moderate because it first requires physical access to an unlocked device where Smart Lock was the last settings pane accessed by the user...
CVE-2016-6769
CVE-2016-6769 is an elevation-of-privilege vulnerability in Android’s Smart Lock. A local attacker could access Smart Lock settings without a PIN on an unlocked device where Smart Lock was the last settings pane accessed. Affected products/versions: Android 5.0.2, 5.1.1, 6.0, 6.0.1 (Android ID A-...
FreeBSD : wireshark -- multiple vulnerabilities (313e9557-41e8-11e6-ab34-002590263bf5)
Wireshark development team reports : The following vulnerabilities have been fixed : - wnpa-sec-2016-29 The SPOOLS dissector could go into an infinite loop. Discovered by the CESG. - wnpa-sec-2016-30 The IEEE 802.11 dissector could crash. Bug 11585 - wnpa-sec-2016-31 The IEEE 802.11 dissector cou...
Mageia: Security Advisory (MGASA-2015-0467)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-6769
The provisional-load commit implementation in WebKit/Source/bindings/core/v8/WindowProxy.cpp in Google Chrome before 47.0.2526.73 allows remote attackers to bypass the Same Origin Policy by leveraging a delay in window proxy clearing...
CVE-2015-6769
CVE-2015-6769 affects Google Chrome/Chromium before 47.0.2526.73. The issue is a Same Origin Policy bypass in the core by exploiting a delay in window proxy clearing in WebKit’s WindowProxy.cpp, as reported in multiple sources (including Debian’s DSA-3415-1 and Chrome’s 47 stable release). Impact...
RHEL 6 : chromium-browser (RHSA-2015:2545)
The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2015:2545 advisory. Chromium is an open-source web browser, powered by WebKit Blink. Several flaws were found in the processing of malformed web content. A web...
CVE-2014-6769
The CVE-2014-6769 entry concerns the Meteo Belgique Android app (com.mobilesoft.belgiumweather) version 3.2. The connected sources confirm a vulnerability where the app does not verify X.509 certificates from SSL servers, enabling a man-in-the-middle attacker to spoof servers and read sensitive i...