PT-2024-3246 · Mitel · Mitel 6900 Series +2

Name of the Vulnerable Software and Affected Versions: Mitel 6800 Series versions through 6.3 SP3 HF4 Mitel 6900 Series versions through 6.3 SP3 HF4 Mitel 6900w Series versions through 6.3.3 Mitel 6970 Conference Unit versions through 5.1.1 SP8 Description: The issue is related to insufficient...

PT-2024-3245 · Mitel · Mitel 6900 Series +2

Name of the Vulnerable Software and Affected Versions: Mitel 6800 Series and 6900 Series SIP Phones versions through 6.3 SP3 HF4 Mitel 6900w Series SIP Phone versions through 6.3.3 Mitel 6970 Conference Unit versions through 5.1.1 SP8 Description: A vulnerability allows an authenticated attacker...

PT-2024-3247 · Mitel · Mitel 6900 Series +2

Name of the Vulnerable Software and Affected Versions: Mitel 6800 Series versions through 6.3 SP3 HF4 Mitel 6900 Series versions through 6.3 SP3 HF4 Mitel 6900w Series versions through 6.3.3 Mitel 6970 Conference Unit versions through 5.1.1 SP8 Description: The issue is related to an authenticati...

oniguruma security update

6.8.2-2.1 - Fix CVE-2019-13224 Resolves: RHEL-6970 - Fix CVE-2019-16163 Resolves: RHEL-9506 - Fix CVE-2019-19012 Resolves: RHEL-9511 - Fix CVE-2019-19203 Resolves: RHEL-9510 - Fix CVE-2019-19204 Resolves: RHEL-9509...

CVE-2023-6970

creationtimestamp| type| source ---|---|--- 2024-01-18 09:21:37+00:00| seen| https://t.me/ctinow/169627 2024-02-12 08:06:50+00:00| seen| https://t.me/ctinow/182931 2026-02-12 21:03:13+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3meovccslbw2c...

CVE-2023-6970

CVE-2023-6970 : WP Recipe Maker for WordPress is vulnerable to Reflected XSS via the Referer header in versions up to and including 9.1.0 due to insufficient input sanitization and output escaping. An unauthenticated attacker can cause web-script injection on pages that execute when a user takes ...

CVE-2023-6970 WP Recipe Maker <= 9.1.0 - Reflected Cross-Site Scripting via Referer

The WP Recipe Maker plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘Referer' header in all versions up to, and including, 9.1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2020-6970

creationtimestamp| type| source ---|---|--- 2020-05-27 11:15:02+00:00| seen| https://t.me/SecLabNews/7686...

CVE-2020-6970

A Heap-based Buffer Overflow was found in Emerson OpenEnterprise SCADA Server 2.83 if Modbus or ROC Interfaces have been installed and are in use and all versions of OpenEnterprise 3.1 through 3.3.3, where a specially crafted script could execute code on the OpenEnterprise Server...

CVE-2020-6970

The CVE-2020-6970 issue affects Emerson OpenEnterprise SCADA Server: OpenEnterprise Server 2.83 (with Modbus or ROC Interfaces in use) and OpenEnterprise 3.1–3.3.3. It is a heap-based buffer overflow enabling a specially crafted script to execute code on the OpenEnterprise Server. Mitigation per ...

CVE-2020-6970

A Heap-based Buffer Overflow was found in Emerson OpenEnterprise SCADA Server 2.83 if Modbus or ROC Interfaces have been installed and are in use and all versions of OpenEnterprise 3.1 through 3.3.3, where a specially crafted script could execute code on the OpenEnterprise Server...

CVE-2015-6970

The web interface in Bosch Security Systems NBN-498 Dinion2X Day/Night IP Cameras with H.264 Firmware 4.54.0026 allows remote attackers to conduct XML injection attacks via the idstring parameter to rcp.xml...

CVE-2015-6970

The web interface in Bosch Security Systems NBN-498 Dinion2X Day/Night IP Cameras with H.264 Firmware 4.54.0026 allows remote attackers to conduct XML injection attacks via the idstring parameter to rcp.xml...

CVE-2015-6970

CVE-2015-6970 affects Bosch Security Systems NBN-498 Dinion2X Day/Night IP Cameras with H.264 firmware 4.54.0026. The web interface is vulnerable to XML injection via the idstring parameter to rcp.xml, enabling remote attackers to tamper or extract data. Public exploit references (Exploit-DB) doc...

Emerson OpenEnterprise

1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Exploitable remotely Vendor: Emerson Equipment: OpenEnterprise SCADA Server Vulnerability: Heap-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to execute code on an OpenEnterprise SCADA...

CVE-2019-6970

CVE-2019-6970 affects Moodle 3.5.x prior to 3.5.4, where a server-side request forgery (SSRF) vulnerability is identified. The available documents confirm the affected product (Moodle CMS) and the impact type (SSRF), but do not provide root-cause details, exploit steps, or a comprehensive fix. Th...

CVE-2018-6970

Summary of CVE-2018-6970 (VMware Horizon): A out-of-bounds read in the Message Framework library affects VMware Horizon components. Affected products/versions include Horizon 6 (before 6.2.7), Horizon 7 (before 7.5.1), and Horizon Client (4.x before 4.8.1). The flaw may allow a less-privileged us...

VMware Horizon Client Out-of-bounds Read Vulnerability - Windows

VMware Horizon Client is prone to an out-of-bounds read vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

VMware Horizon View Client 4.x < 4.8.1 Information Disclosure Vulnerability (VMSA-2018-0019)

The version of VMware Horizon View Client installed on the remote host is 4.x prior to 4.8.1. It is, therefore, affected by an unspecified information disclosure vulnerability related to the Message Framework library. Note that Nessus has not tested for these issues but has instead relied only on...

VMware Horizon View Agent 6.x < 6.2.7 / 7.x < 7.5.1 Local Information Disclosure Vulnerability (VMSA-2018-0019)

The VMware Horizon View Agent installed on the remote host is 6.x prior to 6.2.7 or 7.x prior to 7.5.1. It is, therefore, affected by an information disclosure vulnerability related to the Message Framework library. C Tenable Network Security, Inc. include"compat.inc"; if description...