100 matches found
CVE-2020-6805
When removing data about an origin whose tab was recently closed, a use-after-free could occur in the Quota manager, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird 68.6, Firefox 74, Firefox ESR68.6, and Firefox ESR 68.6...
[slackware-security] mozilla-firefox
New mozilla-firefox packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mozilla-firefox-68.6.0esr-i686-1slack14.2.txz: Upgraded. This release contains security fixes and improvements. For more...
KLA11688 Multiple vulnerabilities in Mozilla Firefox ESR
Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to cause denial of service, obtain sensitive information, execute arbitrary code, inject malicious code. Below is a complete list of vulnerabilities: 1. Out of bounds vulnerability can be...
Security fix for the ALT Linux 10 package firefox-esr version 68.6.0-alt1
March 10, 2020 Andrey Cherepanov 68.6.0-alt1 - New ESR version 68.6.0. - Fix license tag according to SPDX. - Fixed: + CVE-2020-6805 Use-after-free when removing data about origins + CVE-2020-6806 BodyStream::OnInputStreamReady was missing protections against state confusion + CVE-2020-6807...
CVE-2019-6805
SQL Injection was found in S-CMS version V3.0 via the alipay/alipayapi.php Oid parameter...
CVE-2019-6805
CVE-2019-6805 is a SQL injection vulnerability in S-CMS v3.0, exploitable via the alipay/alipayapi.php O_id parameter. The issue allows partial to full disclosure/impact on confidentiality, integrity, and availability (per CVSS 2.0/3.0 vectors; base scores 7.5 and 9.8 respectively). The provided ...
CVE-2016-6805
Apache Ignite before 1.9 allows man-in-the-middle attackers to read arbitrary files via XXE in modified update-notifier documents...
CVE-2016-6805
Summary : CVE-2016-6805 affects Apache Ignite before 1.9. The issue arises from an XML External Entity (XXE) vulnerability in the update-notifier documents, allowing a man-in-the-middle to read arbitrary files. The description in connected sources consistently cites the XXE flaw as the root cause...
CVE-2017-6805
Directory traversal vulnerability in the TFTP server in MobaXterm Personal Edition 9.4 allows remote attackers to read arbitrary files via a .. dot dot in a GET command...
CVE-2017-6805
CVE-2017-6805 : Affected product is MobaXterm Personal Edition 9.4. The issue is a directory traversal vulnerability in the TFTP server that can be triggered by a GET request containing .., allowing remote attackers to read arbitrary files. Public references (NVD, Nessus plugin, Exploit-DB entrie...
MobaXterm Personal Edition 9.4 Path Traversal
Credits: John Page AKA hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MOBAXTERM-TFTP-PATH-TRAVERSAL-REMOTE-FILE-ACCESS.txt + ISR: ApparitionSec Vendor: ===================== mobaxterm.mobatek.net Product: ===============================...
CVE-2017-6805
creationtimestamp| type| source ---|---|--- 2017-03-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41592...
superanimes.com XSS vulnerability
Vulnerable URL: http://www.superanimes.com/busca?parametro=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6805 Google Pagerank| 1 VIP website status:| Yes...
CVE-2015-6805
CVE-2015-6805 (MDC Private Message plugin 1.0.0 for WordPress) is an XSS vulnerability where remote authenticated users can inject arbitrary script/HTML via the private message field. Multiple sources (NVD, CVE lists, WPVulnDB) corroborate that the flaw affects the message input and can lead to s...
CVE-2014-6805
The CVE-2014-6805 entry concerns the Android Weibo (magic.weibo) app version 1.2, which does not verify X.509 certificates when establishing SSL connections. This behavior allows man-in-the-middle attackers to spoof HTTPS servers and obtain sensitive information via a crafted certificate. Per ava...
SuSE 10 Security Update : acroread_ja (ZYPP Patch Number 6805)
Specially crafted PDF files could crash acroread. Attackers could exploit that to potentially execute arbitrary code. CVE-2009-3953 / CVE-2009-3954 / CVE-2009-3955 / CVE-2009-3956 / CVE-2009-3957 / CVE-2009-3958 / CVE-2009-3959 / CVE-2009-4324 %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
CVE-2008-6805
CVE-2008-6805 affects Mic_Blog 0.0.3. When magic_quotes_gpc is disabled, remote attackers can cause SQL injection via (1) cat in category.php, (2) user in login.php, and (3) site in register.php, leading to arbitrary SQL execution. CVSS v2 base score is 6.8 (MEDIUM); attack vector is NETWORK, wit...
CVE-2008-6805
creationtimestamp| type| source ---|---|--- 2008-10-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6764...
CVE-2006-6805
CVE-2006-6805: SQL injection in Enthrallweb eJobs’ newsdetail.asp through the ID parameter. The vulnerability arises from unsafe handling of the ID value, enabling remote attackers to execute arbitrary SQL commands. Affected component is newsdetail.asp; root cause is improper input handling leadi...
