Google Chrome < 127.0.6533.72 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 127.0.6533.72. It is, therefore, affected by multiple vulnerabilities as referenced in the 202407stable-channel-update-for-desktop23 advisory. - Use after free in CSS in Google Chrome prior to 127.0.6533.72 allowed a remo...

Stable Channel Update for Desktop

The Stable channel has been updated to 127.0.6533.72/73 for Windows, Mac and 127.0.6533.72 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and links may be kept restricte...

Hirschmann Automation and Control HiOS and HiSecOS Products Buffer Copy Without Checking Size of Input (CVE-2020-6994)

A buffer overflow vulnerability was found in some devices of Hirschmann Automation and Control HiOS and HiSecOS. The vulnerability is due to improper parsing of URL arguments. An attacker could exploit this vulnerability by specially crafting HTTP requests to overflow an internal buffer. The...

CVE-2023-6994

creationtimestamp| type| source ---|---|--- 2024-01-27 04:11:12+00:00| seen| https://t.me/ctinow/174606...

CVE-2023-6994 List category posts <= 0.89.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The List category posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'catlist' shortcode in all versions up to, and including, 0.89.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2023-6994

CVE-2023-6994 affects the WordPress plugin List category posts (versions ≤ 0.89.3). The issue is stored XSS via the plugin’s catlist shortcode caused by insufficient input sanitization and output escaping on user-supplied attributes. Impact: authenticated attackers with contributor-level permissi...

Hitachi Energy AFS660/AFS665

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: AFS660/AFS665 Vulnerability: Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to overflow an internal buffer...

CVE-2020-6994

A buffer overflow vulnerability was found in some devices of Hirschmann Automation and Control HiOS and HiSecOS. The vulnerability is due to improper parsing of URL arguments. An attacker could exploit this vulnerability by specially crafting HTTP requests to overflow an internal buffer. The...

CVE-2020-6994

CVE-2020-6994 is a buffer/overflow vulnerability in Hirschmann HiOS and HiSecOS caused by improper parsing of URL arguments. A remote attacker could craft HTTP requests to overflow an internal buffer, potentially fully compromising affected devices. Affected products include HiOS 07.0.02 and olde...

CVE-2018-6994

This CVE entry is rejected/not used and does not represent an active vulnerability.

CVE-2017-6994

creationtimestamp| type| source ---|---|--- 2017-08-26 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42555...

Security research team released 8 Apple iOS security vulnerability: hackers can easily attack-vulnerability warning-the black bar safety net

According to foreign media ZDNet reports, the Israeli mobile security company Zimperium recently released 8 Apple iOS system vulnerabilities, hackers can exploit these vulnerabilities to completely control the user's iOS device, so as to obtain the device's GPS data, photos, and contact...

CVE-2017-6994

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "AVEVideoEncoder" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of servic...

CVE-2017-6994

CVE-2017-6994 affects AVEVideoEncoder in Apple’s iOS, tvOS, and watchOS prior to the patched releases (iOS 10.3.2, tvOS 10.2.1, watchOS 3.2.2). The issue is described as an information‑disclosure/memory‑corruption flaw in the AVEVideoEncoder component that can leak kernel addresses and elevate pr...

CVE-2016-6994

Heap-based buffer overflow in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different...

Heap overflow

Heap-based buffer overflow in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different...

CVE-2015-6994

CVE-2015-6994 affects Apple’s kernel (iOS before 9.1 and OS X before 10.11.1) and is caused by mishandling of virtual memory reuse, enabling a crafted app to trigger a denial of service. The linked sources (Apple security advisories and Nessus/OpenVAS entries) describe it as a kernel memory reuse...

CVE-2014-6994

The CVE-2014-6994 entry describes the Atecea (com.atecea) Android application version 1.2 that fails to verify X.509 certificates from SSL servers. This behavior enables man-in-the-middle attackers to spoof HTTPS servers and obtain sensitive information via a crafted certificate. The root cause i...

CVE-2013-6994

CVE-2013-6994 affects OpenText Exceed OnDemand (EoD) 8. The issue is that the session ID is transmitted in cleartext, allowing remote attackers to perform session fixation by sniffing the network. The NVD entry documents a network-based attack with low attack complexity and no required authentica...

CVE-2008-6994

CVE-2008-6994 concerns Google Chrome (around 0.2.149.x). A stack-based buffer overflow in the SaveAs pathway (SaveFileAsWithFilter in win_util.cc) can be triggered by a web page containing a long TITLE element, causing a long filename during save and allowing user-assisted remote code execution. ...