46 matches found
CVE-2023-6870
Applications which spawn a Toast notification in a background thread may have obscured fullscreen notifications displayed by Firefox. This issue only affects Android versions of Firefox and Firefox Focus. This vulnerability affects Firefox 121...
KLA62517 Multiple vulnerabilities in Mozilla Firefox
Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to bypass security restrictions, obtain sensitive information, execute arbitrary code, spoof user interface, cause denial of service. Below is a complete list of vulnerabilities: 1. Security...
Mozilla Firefox < 121.0
The version of Firefox installed on the remote Windows host is prior to 121.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-56 advisory. - Memory safety bugs present in Firefox 120. Some of these bugs showed evidence of memory corruption and we presume that...
CVE-2020-6870
The version V12.17.20T115 of ZTE U31R20 product is impacted by a design error vulnerability. An attacker could exploit the vulnerability to log in to the FTP server to tamper with the password, and illegally download, modify, upload, or delete files, causing improper operation of the network...
CVE-2020-6870
CVE-2020-6870 concerns a design error in the ZTE U31R20 NetNumenU31R20 product, version V12.17.20T115. The vulnerability arises from an underlying design flaw that allows an attacker to log in to the FTP server, tamper with passwords, and illegally download, modify, upload, or delete files, poten...
CVE-2018-6870
The CVE-2018-6870 entry describes a Reflected XSS in PHP Scripts Mall Website Seller Script 2.0.3 via the Listings Search feature. Affected software is PHP Scripts Mall Website Seller Script 2.0.3; root cause identified as reflected XSS through the Listings Search parameter. No exploit details or...
CVE-2017-6870
A vulnerability was discovered in Siemens SIMATIC WinCC Sm@rtClient for Android All versions before V1.0.2.2. The existing TLS protocol implementation could allow an attacker to read and modify data within a TLS session while performing a Man-in-the-Middle MitM attack...
CVE-2017-6870
A vulnerability was discovered in Siemens SIMATIC WinCC Sm@rtClient for Android All versions before V1.0.2.2. The existing TLS protocol implementation could allow an attacker to read and modify data within a TLS session while performing a Man-in-the-Middle MitM attack...
CVE-2017-6870
CVE-2017-6870 affects Siemens SIMATIC WinCC Sm@rtClient for Android (all versions prior to 1.0.2.2). The TLS implementation could allow an attacker in a network-position to read and modify data within a TLS session via a Man-in-the-Middle attack. Exploitation details are not provided in the docum...
CVE-2015-6870
CVE-2015-6870 is rejected/not used; the candidate does not represent an active vulnerability entry.
CVE-2016-6870
Out-of-bounds write in the 1 mbdetectencoding, 2 mbsendmail, and 3 mbdetectorder functions in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors...
CVE-2016-6870
CVE-2016-6870 affects Facebook HHVM prior to 3.15.0. The vulnerability is an out-of-bounds write in the third-party/multibyte-related functions: mb_detect_encoding, mb_send_mail, and mb_detect_order, leading to unspecified impact through unknown vectors. The provided public documents do not speci...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-6870. Reason: This candidate is a duplicate of CVE-2013-6870. Notes: All CVE users should reference CVE-2013-6870 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2013-6998
This CVE entry is rejected/not used; duplicate of CVE-2013-6870.
CVE-2014-6870
CVE-2014-6870 affects the BGEnergy (aka com.bluegrass.smartapps) Android app (version 1.153.0034). The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man‑in‑the‑middle attackers to spoof servers and obtain sensitive information via a crafted certificat...
CVE-2013-6870
Cross-site scripting XSS vulnerability in Splunk Web in Splunk before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2013-6870
CVE-2013-6870 describes a cross-site scripting (XSS) vulnerability in Splunk Web prior to version 5.0.6 . The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Exploitation details are not provided in the core description, and the connected Red Hat/NVD/...
CVE-2008-6870
CVE-2008-6870 : Merlix Educate Server permits remote information disclosure by bypassing security restrictions via direct requests to (1) config.asp and (2) users.asp. The NVD records an network-exposed vulnerability with a base score of 5.0 (Medium) and partial confidentiality impact, with no au...
