CVE-2020-6824

Initially, a user opens a Private Browsing Window and generates a password for a site, then closes the Private Browsing Window but leaves Firefox open. Subsequently, if the user had opened a new Private Browsing Window, revisited the same site, and generated a new password - the generated passwor...

Ubuntu 16.04 LTS / 18.04 LTS : Firefox vulnerabilities (USN-4323-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4323-1 advisory. Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could...

[ASA-202004-8] firefox: multiple issues

Arch Linux Security Advisory ASA-202004-8 ========================================= Severity: Critical Date : 2020-04-08 CVE-ID : CVE-2020-6821 CVE-2020-6823 CVE-2020-6824 CVE-2020-6825 CVE-2020-6826 Package : firefox Type : multiple issues Remote : Yes Link :...

ICSA-19-295-01_Schneider Electric ProClima

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Schneider Electric Equipment: Proclima Vulnerabilities: Code Injection, Improper Restriction of Operations within the Bounds of a Memory Buffer, Uncontrolled Search Path Element 2. RISK EVALUATION...

CVE-2019-6824

The CVE-2019-6824 entry concerns Schneider Electric ProClima prior to version 8.0.0, where a CWE-119 Buffer Overflow allows an unauthenticated, remote attacker to execute arbitrary code. Connected sources (ICS advisory ICSA-19-295-01 and CNVD-2019-23784) confirm the affected product, vulnerabilit...

CVE-2019-6824

A CWE-119: Buffer Errors vulnerability exists in ProClima all versions prior to version 8.0.0 which allows an unauthenticated, remote attacker to execute arbitrary code on the targeted system in all versions of ProClima prior to version 8.0.0...

[SECURITY] [DLA 1611-2] libav security update

Package : libav Version : 6:11.12-1deb8u3 CVE ID : CVE-2015-6822 CVE-2015-6823 CVE-2015-6824 Two more security issues have been corrected in the libav multimedia library. This is a follow-up announcement for DLA-1611-1. CVE-2015-6823 The allocatebuffers function in libavcodec/alac.c did not...

Debian DLA-1611-2 : libav security update

Two more security issues have been corrected in the libav multimedia library. This is a follow-up announcement for DLA-1611-1. CVE-2015-6823 The allocatebuffers function in libavcodec/alac.c did not initialize certain context data, which allowed remote attackers to cause a denial of service...

Debian: Security Advisory (DLA-1611-2)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-6824

Cozy version 2 has XSS allowing remote attackers to obtain administrative access via JavaScript code in the url parameter to the /api/proxy URI, as demonstrated by an XMLHttpRequest call with an 'email:"[email protected]"' request, which can be followed by a password reset...

CVE-2018-6824

Cozy version 2 contains an XSS vulnerability that lets an attacker obtain administrative access through JavaScript code in the url parameter sent to /api/proxy, demonstrated by an XMLHttpRequest using email:"[email protected]" which can be followed by a password reset. The connected documents ...

CVE-2016-6824

CVE-2016-6824 affects Huawei Access Controllers AC6003, AC6005, AC6605 and ACU2 with software older than V200R006C10SPC200. Affected component: CAPWAP handling with input validation vulnerability leads to denial of service via crafted CAPWAP packets, causing device restart. Impact is network-acce...

Gentoo Security Advisory GLSA 201401-26

Gentoo Linux Local Security Checks GLSA 201401-26 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

CVE-2015-6824

The swsinitcontext function in libswscale/utils.c in FFmpeg before 2.7.2 does not initialize certain pixbuf data structures, which allows remote attackers to cause a denial of service segmentation violation or possibly have unspecified other impact via crafted video data...

DEBIAN-CVE-2015-6824

The swsinitcontext function in libswscale/utils.c in FFmpeg before 2.7.2 does not initialize certain pixbuf data structures, which allows remote attackers to cause a denial of service segmentation violation or possibly have unspecified other impact via crafted video data...

CVE-2015-6824

CVE-2015-6824 affects FFmpeg’s libswscale component (function sws_init_context in libswscale/utils.c). The vulnerability stems from not initializing certain pixbuf data structures, which can enable a remote attacker to trigger a denial of service (segmentation fault) or potentially other effects ...

Modernize Confluence Backup & Restore

As a User in all possible roles in order to save time & money and prevent unintended problems caused by the current implementation I want to have a modernized version of Backup & Restore from now on BR in Confluence. Acceptance criteria BR is GUI based BR functionality is integrated in GUI where ...

CVE-2014-6824

CVE-2014-6824 affects the Android app kamkomesan (com.anek.kamkomesan) 1.0, which does not verify X.509 certificates from SSL servers. Root cause: missing certificate validation enables man-in-the-middle attackers to spoof servers and access sensitive information via a crafted certificate. Impact...

Fedora Update for zabbix FEDORA-2014-7594

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for zabbix FEDORA-2014-7603

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...