KLA62519 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, cause denial of service, spoof user interface. Below is a complete list of vulnerabilities: 1. Security vulnerability in Symlinks...

Mozilla Firefox < 121.0

The version of Firefox installed on the remote Windows host is prior to 121.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-56 advisory. - Memory safety bugs present in Firefox 120. Some of these bugs showed evidence of memory corruption and we presume that...

CVE-2021-45389

A flaw was found with the JWT token. A self-signed JWT token could be injected into the update manager and bypass the authentication process, thus could escalate privileges. This affects StarWind SAN and NAS build 1578 and StarWind Command Center build 6864...

CVE-2021-45389

A flaw was found with the JWT token. A self-signed JWT token could be injected into the update manager and bypass the authentication process, thus could escalate privileges. This affects StarWind SAN and NAS build 1578 and StarWind Command Center build 6864...

CVE-2021-45389

A flaw was found with the JWT token. A self-signed JWT token could be injected into the update manager and bypass the authentication process, thus could escalate privileges. This affects StarWind SAN and NAS build 1578 and StarWind Command Center build 6864...

Authentication flaw

A flaw was found with the JWT token. A self-signed JWT token could be injected into the update manager and bypass the authentication process, thus could escalate privileges. This affects StarWind SAN and NAS build 1578 and StarWind Command Center build 6864...

CVE-2020-6864

The CVE-2020-6864 entry concerns the ZTE E8820V3 router, where an information-disclosure flaw could let an attacker obtain the wireless password. The available documents consistently describe this weakness as an information leak that enables password exposure, which could then be used to gather i...

CVE-2018-6864

Cross Site Scripting XSS exists in PHP Scripts Mall Multi religion Responsive Matrimonial 4.7.2 via a user profile update parameter...

CVE-2018-6864

CVE-2018-6864 concerns a stored Cross-Site Scripting (XSS) vulnerability in the PHP Scripts Mall Multi religion Responsive Matrimonial 4.7.2. The issue is triggered via a user profile update parameter, where input is insufficiently sanitized, allowing arbitrary web-script/HTML execution in a vict...

Multi Religion Responsive Matrimonial 4.7.2 Cross Site Scripting

Exploit Title: Multi religion Responsive Matrimonial - 4.7.2 - Stored XSS Date: 07.02.2018 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/multireligion-responsive-matrimonial/ Category: Web Application Exploit Author: Prasenjit Kanti Paul We...

Multi religion Responsive Matrimonial 4.7.2 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Multi religion Responsive Matrimonial - 4.7.2 - Stored XSS Date: 07.02.2018 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/multireligion-responsive-matrimonial/ Category: W...

Multi religion Responsive Matrimonial 4.7.2 - Cross-Site Scripting

Multi religion Responsive Matrimonial 4.7.2 - Cross-Site Scripting. CVE-2018-6864. Webapps exploit for PHP platform Exploit Title: Multi religion Responsive Matrimonial - 4.7.2 - Stored XSS Date: 07.02.2018 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link:...

CVE-2017-6864

creationtimestamp| type| source ---|---|--- 2017-03-31 02:23:04+00:00| seen| https://t.me/canyoupwnme/1027...

CVE-2017-6864

CVE-2017-6864 affects Siemens RUGGEDCOM ROX I devices (all versions) via the integrated web server on port 10000/TCP. An authenticated user can perform stored Cross-Site Scripting attacks against the web interface. The CVE is documented in multiple sources (NVD entry and related advisories). The ...

CVE-2015-6864

HP ArcSight Logger prior to version 6.1P1 is affected by multiple vulnerabilities in the Intellicus and client-certificate upload components, due to improper input validation, enabling remote authenticated execution of arbitrary code. Remediation per the connected Nessus entry is upgrade to 6.1P1...

CVE-2014-6864

CVE-2014-6864 concerns the Forest River Forums Android app (package com.socialknowledge.forestriverforums) version 3.7.5. The vulnerability arises because the app does not verify X.509 certificates from SSL servers, which can allow man-in-the-middle attackers to spoof servers and obtain sensitive...

CVE-2014-6864

The Forest River Forums aka com.socialknowledge.forestriverforums application 3.7.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2013-6864

CVE-2013-6864 affects SAP Sybase ASE: vulnerable versions include 15.0.3 before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 or SP100. The issue is a directory traversal in ASE that remote authenticated users can leverage to impact confidentiality, integrity, and availabili...

LWAPP Protocol Detection

Binary data 6864.prm...

CVE-2008-6864

CVE-2008-6864 affects Xigla Software Absolute Live Support .NET 5.1. The vulnerability allows remote attackers to bypass authentication and obtain administrative access by setting a specific cookie value, effectively compromising session integrity. This is a client-side/authentication bypass issu...