47 matches found
CVE-2023-5442
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-6991. Reason: This candidate is a reservation duplicate of CVE-2023-6991. Notes: All CVE users should reference CVE-2023-43226 instead of this candidate. All references and descriptions in this candidate have been...
Moxa EDS-G516E and EDS-510E Series Ethernet Switches Weak Password Requirements (CVE-2020-6991)
In Moxa EDS-G516E Series firmware, Version 5.2 or lower, weak password requirements may allow an attacker to gain access using brute force. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...
Ubuntu 16.04 ESM / 20.04 ESM / 22.04 ESM : ZoneMinder vulnerabilities (USN-5889-1)
The remote Ubuntu 16.04 ESM / 20.04 ESM / 22.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5889-1 advisory. It was discovered that ZoneMinder was not properly sanitizing URL parameters for certain views. An attacker could possibly use th...
USN-5889-1: ZoneMinder vulnerabilities
It was discovered that ZoneMinder was not properly sanitizing URL parameters for certain views. An attacker could possibly use this issue to perform a cross-site scripting XSS attack. This issue was only fixed in Ubuntu 16.04 ESM. CVE-2019-6777 It was discovered that ZoneMinder was not properly...
RHEL 8 : kernel-rt (RHSA-2022:6991)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:6991 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...
CVE-2020-6991
CVE-2020-6991 affects Moxa EDS-G516E and EDS-510E Series Ethernet Switches with firmware version 5.2 or lower. The vulnerability is caused by weak password requirements, enabling brute‑force remote access to the device. Impact as described: high severity affecting confidentiality, integrity, and ...
CVE-2019-6991
A classic Stack-based buffer overflow exists in the zmLoadUser function in zmuser.cpp of the zmu binary in ZoneMinder through 1.32.3, allowing an unauthenticated attacker to execute code via a long username...
CVE-2019-6991
CVE-2019-6991 affects ZoneMinder prior to 1.32.3 where a stack-based buffer overflow in zmLoadUser() (zm_user.cpp, zmu binary) allows an unauthenticated attacker to execute code via a long username. Multiple CVE/OSV entries corroborate the same root cause and impact (code execution, potential den...
CVE-2019-6991
A classic Stack-based buffer overflow exists in the zmLoadUser function in zmuser.cpp of the zmu binary in ZoneMinder through 1.32.3, allowing an unauthenticated attacker to execute code via a long username...
CVE-2018-6991
CVE-2018-6991 is rejected/not used; this ID does not represent an active vulnerability entry.
CVE-2017-6991
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the "SQLite" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted we...
CVE-2017-6991
CVE-2017-6991 involves Apple’s SQLite component used by iOS and macOS. The issue allows a remote attacker to execute arbitrary code or cause a memory-corruption-based DoS by presenting a crafted web page. Affected products: iOS prior to 10.3.2 and macOS prior to 10.12.5; root cause is a memory-co...
CVE-2016-6991
CVE-2016-6991 is rejected/not used per the initial description.
Memory corruption
FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6990, CVE-2015-6991,...
Memory corruption
FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6990, CVE-2015-6991,...
CVE-2015-6991
Technical details for CVE-2015-6991 are not publicly provided in the connected documents; monitor for updates.
CVE-2014-6991
CVE-2014-6991 affects LiveAuctions.tv (aka air.LiveAndroidMaxx) Android app version 2.005. The issue is that the app does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and read sensitive information via a crafted certificate. The linked NVD ...
Cross-Site Scripting (XSS) in WP-Cron Dashboard Wordpress plugin
Advisory ID: HTB23189 Product: WP-Cron Dashboard Wordpress plugin Vendor: OKAMOTO Wataru Vulnerable Versions: 1.1.5 and probably prior Tested Version: 1.1.5 Advisory Publication: December 5, 2013 without technical details Vendor Notification: December 5, 2013 Public Disclosure: December 26, 2013...