49 matches found
CVE-2024-6949
creationtimestamp| type| source ---|---|--- 2024-07-21 12:32:44+00:00| seen| https://t.me/cvedetector/1340...
CVE-2023-6949
creationtimestamp| type| source ---|---|--- 2024-06-14 02:58:30+00:00| published-proof-of-concept| https://t.me/VasileiadisAnastasis/1144 2026-08-11 12:00:03+00:00| published-proof-of-concept| Telegram/Su9bpnflFfDGX-VykbbjfDva2inKgORDHhpa7uGZjAV6g 2026-08-12 00:00:08+00:00|...
CVE-2023-6949
A Missing Authentication for Critical Function issue affecting the HTTP service running on the DJI Mavic Mini 3 Pro on the standard port 80 could allow an attacker to enumerate and download videos and pictures saved on the drone internal or external memory without requiring any kind of...
CVE-2020-6949
A privilege escalation issue was discovered in the postUser function in HashBrown CMS through 1.3.3. An editor user can change the password hash of an admin user's account, or otherwise reconfigure that account...
CVE-2020-6949
HashBrown CMS up to version 1.3.3 contains a privilege-escalation flaw in the postUser function. An editor user can modify the password hash of an admin account or reconfigure that account, enabling lateral/admin access. The vulnerability is described across multiple sources (HashBrown CMS ecosys...
FreeBSD : chicken -- multiple vulnerabilities (5a771686-9e33-11e8-8b2d-9cf7a8059466)
CHICKEN reports : - CVE-2017-6949: Unchecked malloc call in SRFI-4 constructors when allocating in non-GC memory, resulting in potential 1-word buffer overrun and/or segfault - CVE-2017-9334: 'length' crashes on improper lists - CVE-2017-11343: The randomization factor of the symbol table was set...
Fedora 26 : chicken (2017-1f3ee3bea6)
Fix for CVE-2017-6949, also bump to 4.12.0 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Fedora 25 : chicken (2017-cc606f1001)
Fix for CVE-2017-6949, also bump to 4.12.0 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Fedora Update for chicken FEDORA-2017-947da3daa5
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 24 : chicken (2017-947da3daa5)
Fix for CVE-2017-6949, also bump to 4.12.0 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
[SECURITY] [DLA 908-1] chicken security update
Package : chicken Version : 4.7.0-1+deb7u2 CVE ID : CVE-2017-6949 Debian Bug : 858057 It was found that CHICKEN did not sanitize the size argument when allocating SRFI-4 vectors, which could lead to segfaults or buffer overflows with some sizes. For Debian 7 "Wheezy", these problems have been fix...
CVE-2017-6949
CVE-2017-6949 affects CHICKEN Scheme up to version 4.12.0. A nonstandard CHICKEN extension allocates an SRFI-4 vector in unmanaged memory, and the vector size is passed to malloc() without sanitisation. An unexpected size can lead to a segfault or a buffer overflow. The connected documents refere...
CVE-2017-6949
An issue was discovered in CHICKEN Scheme through 4.12.0. When using a nonstandard CHICKEN-specific extension to allocate an SRFI-4 vector in unmanaged memory, the vector size would be used in unsanitised form as an argument to malloc. With an unexpected size, the impact may have been a segfault ...
CVE-2016-6949
Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different...
Design/Logic Flaw
Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different...
Design/Logic Flaw
Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different...
CVE-2016-6944
Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different...
CVE-2016-6949
Technical details about CVE-2016-6949 are not publicly available in the provided documents. Monitor for updates; current sources do not specify affected products, root cause, vectors, impact, or fixes beyond the NVD entry.
CVE-2016-6949
Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different...
Adobe Acrobat and Reader Use-After-Free Code Execution (APSB16-33: CVE-2016-6949)
A use after free vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to an error in the way Adobe Acrobat and Reader handles objects in memory. A remote attacker can exploit this vulnerability by enticing the user to open a specially crafted PDF file...