115 matches found
CVE-2020-3924 TONNET DVR – Firmware Injection
DVR firmware in TAT-76 and TAT-77 series of products, provided by TONNET do not properly verify patch files. Attackers can inject a specific command into a patch file and gain access to the system...
PT-2020-17800
Name of the Vulnerable Software and Affected Versions TONNET TAT-76 series affected versions not specified TONNET TAT-77 series affected versions not specified Description The issue concerns the DVR firmware in TAT-76 and TAT-77 series of products, which do not properly verify patch files. This...
PT-2020-17799
Name of the Vulnerable Software and Affected Versions TONNET DVR firmware versions in TAT-76 and TAT-77 series affected versions not specified Description The issue concerns a misconfigured authentication mechanism in the DVR firmware. This allows attackers to crack the default password and gain...
CVE-2020-3924: Improper Neutralization of Special Elements used in a Command
DVR firmware in TAT-76 and TAT-77 series of products, provided by TONNET do not properly verify patch files. Attackers can inject a specific command into a patch file and gain access to the system...
CVE-2020-3923: Improper Authentication
DVR firmware in TAT-76 and TAT-77 series of products, provided by TONNET, contain misconfigured authentication mechanism. Attackers can crack the default password and gain access to the system...
DEBIAN-CVE-2019-5868
Use after free in PDFium in Google Chrome prior to 76.0.3809.100 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...
DEBIAN-CVE-2019-5853
Inappropriate implementation in JavaScript in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
UBUNTU-CVE-2019-5850
Use after free in offline mode in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...
moliseweb.it Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-980521 Security Researcher Faizanmark Helped patch 76 vulnerabilities Received 6 Coordinated Disclosure badges Received 58 recommendations , a holder of 6 badges for responsible and coordinated disclosure, found a security vulnerability affecting moliseweb.it website and i...
chromium-browser: Use-after-poison in offline audio context
Use after free in WebAudio in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
chromium-browser: Site isolation bypass from compromised renderer
Insufficient policy enforcement in navigations in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page...
Google Chrome Security Bypass Vulnerability (CNVD-2019-26520)
Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome versions prior to 76.0.3809.87, which stems from the program not adequately filtering the Open URL service parameter. The vulnerability can be exploited by an attacker to bypass...
CVE-2016-10843
cPanel before 11.54.0.4 allows code execution in the context of shared users via JSON-API SEC-76...
CVE-2016-10843
Summary: CVE-2016-10843 affects cPanel prior to 11.54.0.4 and allows code execution in the context of shared users via the JSON-API (SEC-76). Affected product/vector: cPanel software; vulnerability arises through the JSON-API, enabling code execution in shared-user context. Root cause / impact: N...
CVE-2016-10843: Improper Neutralization of Special Elements used in a Command
cPanel before 11.54.0.4 allows code execution in the context of shared users via JSON-API SEC-76...
Stable Channel Update for Desktop
The Chrome team is delighted to announce the promotion of Chrome 76 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 76.0.3809.87 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming...
Rockwell Automation/Allen-Bradley MicroLogix 1100 L16xxx < 10.000 HTTP Remote DoS
Binary data 76.prm...
ffmc.76.free.fr Improper Access Control vulnerability
Open Bug Bounty ID: OBB-673639 Description| Value ---|--- Affected Website:| ffmc.76.free.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...
Solaris 10 (x86) : 147694-76
JavaSE 7x86: update 76 patch equivalent to JDK 7u76. Date this patch was last updated by Sun : Jan/19/15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc...
Solaris 10 (sparc) : 147693-76
JavaSE 7: update 76 patch equivalent to JDK 7u76, 64bit. Date this patch was last updated by Sun : Jan/19/15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...