CVE-2023-6840

CVE-2023-6840 : In GitLab EE, versions 16.4–16.6.6, 16.7–16.7.4, and 16.8–16.8.1 contain a vulnerability that allows a maintainer to rename a protected branch, bypassing the MR-block security policy. Root cause: Figure of authorization control that permits protected-branch name changes by maintai...

GitLab 16.4 < 16.6.7 / 16.7 < 16.7.5 / 16.8 < 16.8.2 (CVE-2023-6840)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab EE affecting all versions from 16.4 prior to 16.6.7, 16.7 prior to 16.7.5, and 16.8 prior to 16.8.2 which allows a maintainer to change the name of a protected...

CVE-2020-6840

In mruby 2.1.0, there is a use-after-free in hashslice in mrbgems/mruby-hash-ext/src/hash-ext.c...

CVE-2020-6840

CVE-2020-6840 affects mruby 2.1.0, with a use-after-free in hash_slice within mrbgems/mruby-hash-ext/src/hash-ext.c. The vulnerability is described consistently across multiple feeds (NVD, CNVD, Red Hat, Debian security tracker, OSV, CVE lists) as a memory safety flaw in the hash handling code. T...

CVE-2019-6840

CVE-2019-6840 is a Format String (CWE-134) vulnerability affecting Schneider Electric U.motion Server family (including MEG6501-0001, MEG6501-0002, MEG6260-0410, MEG6260-0415, plus Touch 10/15 variants). The issue allows an attacker to send a crafted message to the target server, potentially lead...

openSUSE Security Update : podofo (openSUSE-2019-66)

This update for podofo version 0.9.6 fixes the following issues : Security issues fixed : - CVE-2017-5852: Fix a infinite loop in PoDoFo::PdfPage::GetInheritedKeyFromObject PdfPage.cpp boo1023067 - CVE-2017-5854: Fix a NULL pointer dereference in PdfOutputStream.cpp boo1023070 - CVE-2017-5886: Fi...

openSUSE: Security Advisory for podofo (openSUSE-SU-2019:0066-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for podofo (important)

openSUSE Security Update: Security update for podofo Announcement ID: openSUSE-SU-2019:0066-1 Rating: important References: 1023067 1023069 1023070 1023071 1023380 1027778 1027779 1027782 1027787 1032017 1032018 1032019 1035534 1035596 1037739 1075021 1075026 1075322 1075772 1084894...

Fedora 27 : mingw-podofo (2018-2807317e7a)

Backport security fixes for: CVE-2017-7380, CVE-2017-7381, CVE-2017-7382, CVE-2017-7383, CVE-2017-5852, CVE-2017-5853, CVE-2017-6844, CVE-2017-5854, CVE-2017-5855, CVE-2017-5886, CVE-2018-8000, CVE-2017-6840, CVE-2017-6842, CVE-2017-6843, CVE-2017-6845, CVE-2017-6847, CVE-2017-6848, CVE-2017-7378...

Fedora Update for mingw-podofo FEDORA-2018-2807317e7a

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for podofo FEDORA-2018-2f3c0cdf93

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AVM FRITZ!Box 6810 LTE and FRITZ!Box 6840 LTE Code Injection Vulnerability

AVM FRITZ!Box 6810 LTE and FRITZ!Box 6840 LTE are both router products from AVM Germany. A code injection vulnerability exists in the AVM FRITZ!Box 6810 LTE and FRITZ!Box 6840 LTE, which stems from the program failing to properly verify cryptographic signatures. A remote attacker could exploit th...

CVE-2017-6840

The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service invalid read via a crafted file...

CVE-2017-6840

The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service invalid read via a crafted file...

CVE-2017-6840

The CVE-2017-6840 issue affects PoDoFo 0.9.5: ColorChanger::GetColorFromStack in colorchanger.cpp allows an invalid read leading to a denial of service when processing a crafted file. Connected advisories (SUSE/OpenSUSE) note a fix for this vulnerability in PoDoFo, indicating remediation via upda...

CVE-2016-6840

Cross-site scripting XSS vulnerability in the management interface in Huawei OceanStor ISM before V200R001C04SPC200 allows remote attackers to inject arbitrary web script or HTML via the loginName parameter to cgi-bin/doLoginCgiEntry and possibly other unspecified vectors...

CVE-2016-6840

Cross-site scripting XSS vulnerability in the management interface in Huawei OceanStor ISM before V200R001C04SPC200 allows remote attackers to inject arbitrary web script or HTML via the loginName parameter to cgi-bin/doLoginCgiEntry and possibly other unspecified vectors...

CVE-2016-6840

Huawei OceanStor ISM vulnerable to cross-site scripting (XSS) in its management interface before V200R001C04SPC200. The issue allows remote attackers to inject arbitrary web script or HTML via the loginName parameter to cgi-bin/doLogin_CgiEntry and possibly other vectors. Affects the ISM product'...

CVE-2014-6840

CVE-2014-6840 affects the Android version of the My Wedding Planner (aka app.wedding) 1.5. The vulnerability arises because the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Fritz!Box Webcm Unauthenticated Command Injection

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClient include...