45 matches found
Ubuntu: Security Advisory (USN-6562-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 5582-1] thunderbird security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5582-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 21, 2023 https://www.debian.org/security/faq -...
CVE-2023-6873
CVE-2023-6873 is a memory-safety vulnerability reported in Mozilla Firefox affecting versions older than 121. The issue involves memory corruption in Firefox 120-era code paths that could potentially be exploited to execute arbitrary code. Connected advisories (e.g., MFSA2023-56) corroborate wide...
KLA62517 Multiple vulnerabilities in Mozilla Firefox
Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to bypass security restrictions, obtain sensitive information, execute arbitrary code, spoof user interface, cause denial of service. Below is a complete list of vulnerabilities: 1. Security...
Mozilla Firefox < 121.0
The version of Firefox installed on the remote Windows host is prior to 121.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-56 advisory. - Memory safety bugs present in Firefox 120. Some of these bugs showed evidence of memory corruption and we presume that...
部分MediaTek芯片 安全漏洞
MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in some MediaTek chips, which stems from a local privilege escalation due to a lack of privilege checking in vow. The following products are affected: MT6580, MT6735, MT6737, MT6739,...
CVE-2020-6873
A ZTE product has a DoS vulnerability. Because the equipment couldn’t distinguish the attack packets and normal packets with valid http links, the remote attackers could use this vulnerability to cause the equipment WEB/TELNET module denial of service and make the equipment be out of management...
CVE-2020-6873
Technical details about CVE-2020-6873 are not publicly available in the provided connected documents. Monitor for updates from vendors and security advisories; current entries repeat the same description without additional specifics.
files2.us Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1011453 Security Researcher Gh05tPT Helped patch 6873 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting files2.us website and it...
CVE-2018-6873
CVE-2018-6873 affects Auth0 authentication service prior to 2017-10-15, where JWT audience validation was not performed, enabling privilege escalation. Multiple sources describe that the vulnerability allowed a remote attacker to authenticate as a higher-privilege user by forging or manipulating ...
CVE-2017-6873
Siemens OZW672 and OZW772 (all versions) are affected by CVE-2017-6873, where the integrated web server on port 443/TCP can be misused to read and manipulate data in TLS sessions during a MITM attack. The vulnerability is tied to missing authentication for a critical function. Impact is described...
CVE-2015-6873
CVE-2015-6873 is rejected/not used and does not represent an active vulnerability entry.
CVE-2016-6873
Self recursion in compact in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors...
CVE-2016-6873
Self recursion in compact in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors...
CVE-2016-6873
Self recursion in compact in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors...
CVE-2016-6873
CVE-2016-6873 affects Facebook HHVM before 3.15.0. The vulnerability is caused by self recursion in the compact function, leading to unspecified impact via unknown vectors. Public records (NVD/NSS OSV) describe a high-severity, network-exploitable issue with potential partial confidentiality/inte...
CVE-2014-6873
The CVE-2014-6873 entry concerns the AMGC (com.amec.uae) Android application version 6.0 that does not verify X.509 certificates when establishing SSL connections. The root issue is improper SSL certificate validation, enabling man-in-the-middle attackers to spoof HTTPS servers and access sensiti...
CVE-2013-6873
CVE-2013-6873 affects Testa Online Test Management System (OTMS) 2.0.0.2. The vulnerability is an SQL injection in the test_id parameter that allows remote attackers to execute arbitrary SQL commands. Evidence in multiple feeds confirms the same description, including NVD entries. A CIRCL sightin...
