CVE-2020-7746

creationtimestamp| type| source ---|---|--- 2020-10-29 11:33:58+00:00| seen| https://t.me/cibsecurity/15708...

CVE-2020-7746

This affects the package chart.js before 2.9.4. The options parameter is not properly sanitized when it is processed. When the options are processed, the existing options or the defaults options are deeply merged with provided options. However, during this operation, the keys of the object being...

DEBIAN-CVE-2020-7746

This affects the package chart.js before 2.9.4. The options parameter is not properly sanitized when it is processed. When the options are processed, the existing options or the defaults options are deeply merged with provided options. However, during this operation, the keys of the object being...

CVE-2020-7746

This affects the package chart.js before 2.9.4. The options parameter is not properly sanitized when it is processed. When the options are processed, the existing options or the defaults options are deeply merged with provided options. However, during this operation, the keys of the object being...

CVE-2020-7746

CVE-2020-7746 affects the chart.js library prior to 2.9.4. The vulnerability arises when processing the options parameter: options are deeply merged with provided values, but keys of the object being set are not checked, enabling a prototype pollution flaw. This can occur during object merging of...

CVE-2020-7746 Prototype Pollution

This affects the package chart.js before 2.9.4. The options parameter is not properly sanitized when it is processed. When the options are processed, the existing options or the defaults options are deeply merged with provided options. However, during this operation, the keys of the object being...

2cs-basecode (>=0.1.0 <=0.1.1), 8bit-ghost-ui (>=1.0.0-beta.1 <=1.0.0-beta.3) +345 more potentially affected by CVE-2020-7746 via chart.js (>=2.0.0 <=2.9.3)

chart.js NPM version =2.0.0, =0.1.0, =1.0.0-beta.1, =1.0.3, =1.0.0, =2.0.0, =2.0.0, =2.0.0-0f0f22634a7788f0af51de445431d067b20eec64, =2.0.0, =1.0.0, =7.0.1, =0.0.1-alpha.3, =0.0.1-alpha.3, =0.7.0, =1.0.0, =1.0.36 and more Source cves: CVE-2020-7746 Source advisory: SNYK:JS-CHARTJS-1018716...

CVE-2019-7746

JioFi 4 jmr1140 AmtelJMR1140R12.07 devices allow remote attackers to obtain an admin token by making a /cgi-bin/qcmapauth type=getuser request and then reading the token field. This token value can then be used to change the Wi-Fi password or perform a factory reset...

CVE-2019-7746

CVE-2019-7746 affects JioFi 4 (JMR1140 Amtel_JMR1140_R12.07). The connected records confirm a token disclosure vulnerability via a CSRF-style flow: an attacker can trigger a /cgi-bin/qcmap_auth?action=getuser request and read the admin token from the response, enabling changes to the Wi‑Fi passwo...

Jiofi 4 (JMR 1140 Amtel_JMR1140_R12.07) - CSRF (Admin Token Disclosure) Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Jiofi 4 JMR 1140 CSRF To Leak Admin Tokens to change wifi Password or Factory Reset Router Exploit Author: Ronnie T Baby Contact:https://www.linkedin.com/in/ronnietbaby Vendor Homepage: www.jio.com Hardware Link:...

CVE-2018-7746

creationtimestamp| type| source ---|---|--- 2018-04-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44416...

CVE-2018-7746

Cobub Razor 0.7.2 suffers an authentication bypass on /index.php?/manage/channel/modifychannel, enabling stored XSS triggered when an admin performs a subsequent /index.php?/manage/channel request. Evidence in multiple sources shows a craftable channel_name payload (e.g., xss), illustrating the v...

CVE-2015-7746

NetApp Data ONTAP operating in 7-Mode is affected in versions before 8.2.4. A remote attacker can bypass authentication and either obtain sensitive information from volumes or modify volumes via vectors related to UTF-8 in the volume language. This vulnerability is documented across multiple sour...

SUSE SLED12 / SLES12 Security Update : wireshark (SUSE-SU-2017:1442-1)

Wireshark was updated to version 2.2.6, which brings several new features, enhancements and bug fixes. Thses security issues were fixed : - CVE-2017-7700: In Wireshark the NetScaler file parser could go into an infinite loop, triggered by a malformed capture file. This was addressed in...

SUSE-SU-2017:1442-1 Security update for wireshark

Wireshark was updated to version 2.2.6, which brings several new features, enhancements and bug fixes. Thses security issues were fixed: - CVE-2017-7700: In Wireshark the NetScaler file parser could go into an infinite loop, triggered by a malformed capture file. This was addressed in...

CVE-2016-7746

CVE-2016-7746 entry is rejected and not used; it does not represent an active vulnerability.

CVE-2016-7746

...

SUSE-SU-2017:1174-1 Security update for wireshark

Wireshark was updated to version 2.0.12, which brings several new features, enhancements and bug fixes. These security issues were fixed: - CVE-2017-7700: In Wireshark the NetScaler file parser could go into an infinite loop, triggered by a malformed capture file. This was addressed in...

openSUSE Security Update : wireshark (openSUSE-2017-503)

This update to Wireshark 2.2.6 fixes minor vulnerabilities that could be used to trigger a dissector crash or infinite loops by sending specially crafted packages over the network or into a capture file : - CVE-2017-7700: NetScaler file parser infinite loop boo1033936 - CVE-2017-7701: BGP dissect...

Wireshark 2.2.x < 2.2.6 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 2.2.6. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.2.6 advisory. - In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the RPC over RDMA dissector could go into an infinite...