38 matches found
ECHO-6986-2E97-593F
Bulletin has no description...
MINI-MX49-6986-V68V
Bulletin has no description...
Linux Distros Unpatched Vulnerability : CVE-2026-6986
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in Cesanta Mongoose up to 7.20. This issue affects the function mgaesgcmdecrypt of the file /src/tlsaes128.c of the...
CVE-2026-6986
A security vulnerability has been detected in Cesanta Mongoose up to 7.20. This issue affects the function mgaesgcmdecrypt of the file /src/tlsaes128.c of the component GCM Authentication Tag Handler. Such manipulation leads to improper verification of cryptographic signature. The attack may be...
UBUNTU-CVE-2026-6986
A security vulnerability has been detected in Cesanta Mongoose up to 7.20. This issue affects the function mgaesgcmdecrypt of the file /src/tlsaes128.c of the component GCM Authentication Tag Handler. Such manipulation leads to improper verification of cryptographic signature. The attack may be...
CVE-2026-6986 Cesanta Mongoose GCM Authentication Tag tls_aes128.c mg_aes_gcm_decrypt signature verification
A security vulnerability has been detected in Cesanta Mongoose up to 7.20. This issue affects the function mgaesgcmdecrypt of the file /src/tlsaes128.c of the component GCM Authentication Tag Handler. Such manipulation leads to improper verification of cryptographic signature. The attack may be...
CVE-2025-6986
creationtimestamp| type| source ---|---|--- 2026-04-11 06:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mj77kqm4jb2u...
MAL-2025-6986 Malicious code in 1inch-p2p-sdk (npm)
The package 1inch-p2p-sdk was found to contain malicious code...
CVE-2024-6986
A Cross-site Scripting XSS vulnerability exists in the Settings page of parisneo/lollms-webui version 9.8. The vulnerability is due to the improper use of the 'v-html' directive, which inserts the content of the 'fulltemplate' variable directly as HTML. This allows an attacker to execute maliciou...
CVE-2024-6986 Cross-site Scripting (XSS) in parisneo/lollms-webui
A Cross-site Scripting XSS vulnerability exists in the Settings page of parisneo/lollms-webui version 9.8. The vulnerability is due to the improper use of the 'v-html' directive, which inserts the content of the 'fulltemplate' variable directly as HTML. This allows an attacker to execute maliciou...
Rocky Linux 8 : nano (RLSA-2024:6986)
The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:6986 advisory. nano: running chmod and chown on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned file CVE-2024-5742...
Oracle Linux 8 : nano (ELSA-2024-6986)
The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-6986 advisory. 2.9.8-3 - fix incomplete backport of the fix for the emergency file replacement vulnerability RHEL-35236 2.9.8-2 - fix emergency file replacement vulnerability...
Ubuntu: Security Advisory (USN-6986-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CGA-XH5C-4R65-6986
Bulletin has no description...
CVE-2023-6986
The CVE-2023-6986 vulnerability affects the WordPress plugin EmbedPress (Embed PDF, YouTube, Google Docs, Vimeo, Wistia, etc.). It enables Stored Cross‑Site Scripting via the embed_oembed_html shortcode in all versions before 3.9.5 due to insufficient input sanitization and output escaping of use...
SUSE CVE-2016-6986
Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-4273,...
CVE-2020-6986
CVE-2020-6986 affects Omron PLC CJ Series (all versions). The vulnerability is described as Uncontrolled Resource Consumption (CWE-400) where an attacker can send a sequence of specific data packets in a short time, triggering a PLC Ethernet module error and resulting in a service-denied state. D...
CVE-2019-6986
CVE-2019-6986 describes a SPARQL Injection in VIVO Vitro v1.10.0 where a remote attacker can craft a request to the endpoint “/individual?uri=” to execute arbitrary SPARQL, leading to a Regular Expression Denial of Service (ReDoS) via crafted FILTER%20regex usage. Affected product/component: VIVO...
