64 matches found
Oracle Linux 9 : ELSA-2022-9080-1: / thunderbird (ELSA-2022-90801)
The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-90801 advisory. 102.6.0-2.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 102.6.0-2 - Update to 102.6.0 build2 102.6.0-1 -...
CVE-2015-9080
CVE-2015-9080 entry is rejected/not used; it does not represent an active vulnerability.
CVE-2019-9080
DomainMOD vulnerable component: DomainMOD before 4.14.0. Root cause: password storage uses MD5 without a salt, leading to weak password hashing. Impact described as high in CVSS-3.1 (C:H, I:N, A:N) with network access and no user interaction required; offline password attacks are implied by unsal...
CVE-2018-9080
For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, by setting the Iomega cookie to a known value before logging into the NAS's web application, the NAS will not provide the user a new cookie value. This allows an attacker who knows the cookie's value to compromise...
CVE-2018-9080 Iomega and LenovoEMC NAS Web UI Vulnerabilities
For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, by setting the Iomega cookie to a known value before logging into the NAS's web application, the NAS will not provide the user a new cookie value. This allows an attacker who knows the cookie's value to compromise...
CVE-2018-9080
CVE-2018-9080 affects certain Iomega/LenovoEMC NAS devices (firmware 4.1.402.34662 and earlier). The vulnerability allows session compromise via session fixation: an authenticated user’s session cookie can be manipulated by setting a known Iomega cookie value, after which the device fails to issu...
CVE-2018-16706
LG SuperSign CMS allows TVs to be rebooted remotely without authentication via a direct HTTP request to /qsrserver/device/reboot on port 9080...
CVE-2018-16706: Direct Request
LG SuperSign CMS allows TVs to be rebooted remotely without authentication via a direct HTTP request to /qsrserver/device/reboot on port 9080...
PT-2018-13695
Name of the Vulnerable Software and Affected Versions LG SuperSign CMS affected versions not specified Description The issue allows LG TVs to be rebooted remotely without authentication. This can be achieved by sending a direct HTTP request to the /qsr server/device/reboot API endpoint on port...
CVE-2016-9080
CVE-2016-9080 is a memory-safety issue in Firefox prior to 50.1. The vulnerability family includes memory corruption that, with enough effort, could be exploited to execute arbitrary code. The CVE affects Firefox versions
CVE-2017-9080
creationtimestamp| type| source ---|---|--- 2018-05-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44599 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/playsmsfilenameexec.rb 2025-02-06 03:13:43+00:00| see...
CVE-2017-9080
PlaySMS 1.4 allows remote code execution because PHP code in the name of an uploaded .php file is executed. sendfromfile.php has a combination of Unrestricted File Upload and Code Injection...
CVE-2017-9080
PlaySMS 1.4 allows remote code execution because PHP code in the name of an uploaded .php file is executed. sendfromfile.php has a combination of Unrestricted File Upload and Code Injection...
CVE-2017-9080
PlaySMS 1.4 allows remote code execution because PHP code in the name of an uploaded .php file is executed. sendfromfile.php has a combination of Unrestricted File Upload and Code Injection...
CVE-2017-9080
CVE-2017-9080 affects PlaySMS 1.4, where the file upload mechanism in the PHP file sendfromfile.php can be abused to achieve remote code execution. The vulnerability combines an Unrestricted File Upload with Code Injection via the name of an uploaded PHP file, allowing authenticated users to uplo...
openSUSE: Security Advisory for MozillaFirefox (openSUSE-SU-2016:3310-1)
The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Mozilla Firefox < 50.1 Multiple Vulnerabilities
The version of Mozilla Firefox installed on the remote Windows host is prior to 50.1. It is, therefore, affected by the following vulnerabilities : - Multiple memory corruption issues exists when handling style contexts, regular expressions, and clamped gradients that allow an unauthenticated,...
Ubuntu 14.04 LTS / 16.04 LTS : Firefox vulnerabilities (USN-3155-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3155-1 advisory. Multiple security vulnerabilities were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker...
USN-3155-1: Firefox vulnerabilities
Multiple security vulnerabilities were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to conduct cross-site scripting XSS attacks, obtain sensitive information, cause a denial of service via application crash, o...