CVE-2023-6869

A dialog element could have been manipulated to paint content outside of a sandboxed iframe. This could allow untrusted content to display under the guise of trusted content. This vulnerability affects Firefox 121...

CVE-2023-6869

A dialog element could have been manipulated to paint content outside of a sandboxed iframe. This could allow untrusted content to display under the guise of trusted content. This vulnerability affects Firefox 121...

CVE-2023-6869

CVE-2023-6869 affects Mozilla Firefox older than 121. The issue arises when a element could be manipulated to render content outside a sandboxed iframe, allowing untrusted content to masquerade as trusted content. Impact per sources is user-facing trust bypass with potential to display misleadin...

CVE-2023-6869

A dialog element could have been manipulated to paint content outside of a sandboxed iframe. This could allow untrusted content to display under the guise of trusted content. This vulnerability affects Firefox 121...

KLA62517 Multiple vulnerabilities in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to bypass security restrictions, obtain sensitive information, execute arbitrary code, spoof user interface, cause denial of service. Below is a complete list of vulnerabilities: 1. Security...

Mozilla Firefox < 121.0

The version of Firefox installed on the remote Windows host is prior to 121.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-56 advisory. - Memory safety bugs present in Firefox 120. Some of these bugs showed evidence of memory corruption and we presume that...

CVE-2020-6869

The CVE-2020-6869 issue affects ZTEMarket APK versions up to 10.06. Root cause: Exposure of an Android Activity Component leads to information disclosure, enabling a user to obtain the private cookie and trigger a silent installation. Impact: information leakage with partial confidentiality and p...

Huawei EulerOS: Security Advisory for zziplib (EulerOS-SA-2019-2478)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

bob.embl.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1068355 Security Researcher Gh05tPT Helped patch 6869 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting bob.embl.de website and...

Fedora Update for zziplib FEDORA-2018-45183aab17

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 27 : zziplib (2018-45183aab17)

Update zziplib to fix all known CVEs in Fedora 27 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Ubuntu: Security Advisory (USN-3699-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 27 : zziplib (2018-8d544ee879)

Security fix for CVE-2018-6869, CVE-2018-6484 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

[SECURITY] [DLA 1287-1] zziplib security update

Package : zziplib Version : 0.13.56-1.1+deb7u2 CVE ID : CVE-2018-6869 It was discovered that there was a uncontrolled memory allocation issue in zziplib, a ZIP archive library. Remote attackers could leverage this vulnerability to cause a denial of service via a specially-crafted file. For Debian...

CVE-2018-6869

In ZZIPlib 0.13.68, there is an uncontrolled memory allocation and a crash in the zzipparserootdirectory function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

CVE-2017-6869

Siemens ViewPort for Web Office Portal prior to revision 1453 is affected by CVE-2017-6869. An unauthenticated remote attacker can upload arbitrary code and execute it with the OS user running the web server by sending specially crafted packets to ports 443/TCP or 80/TCP. The issue is categorized...

Siemens Viewport for Web Office Portal

CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Siemens Equipment: Viewport for Web Office Portal Vulnerability: Improper Authentication AFFECTED PRODUCTS Siemens reports that the vulnerability affects the following ViewPort for Web Office Portal products: ViewPort...

CVE-2015-6869

CVE-2015-6869 entry is rejected/not used and does not represent an active vulnerability.

CVE-2014-6869

The affected software is the Android barcode scanner app (tw.com.books.android.plus) version 2.3.0. The root cause is that it does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. This...

CVE-2013-6869

CVE-2013-6869 affects SAP NetWeaver 7.30, where a SQL injection in the SRTT_GET_COUNT_BEFORE_KEY_RFC function could allow remote attackers to execute arbitrary SQL commands via unspecified vectors. The vulnerability’s impact is described as potentially partial confidentiality, integrity, and avai...