CVE-2005-2350

CVE-2005-2350 affects websieve v0.62 and is a cross-site scripting (XSS) vulnerability in the web user interface. The root cause described in CNVD-2019-40085 notes lack of proper validation of client-side data by the web application, enabling an attacker to execute client-side code. The connected...

CVE-2005-3056

creationtimestamp| type| source ---|---|--- 2019-11-01 15:28:32+00:00| seen| https://t.me/cibsecurity/7831...

CVE-2005-3056

TWiki is affected by CVE-2005-3056 due to an arbitrary shell command execution flaw in the Include function. The vulnerability enables an attacker to execute commands on the server when TWiki processes Include, with network access, no authentication, and no user interaction required in the CVSS a...

CVE-2005-2349

creationtimestamp| type| source ---|---|--- 2019-10-28 17:26:43+00:00| seen| https://t.me/cibsecurity/7703 2024-01-29 10:11:50+00:00| seen| https://t.me/ctinow/175137...

CVE-2005-2349

Zoo 2.10 has Directory traversal...

CVE-2005-2349

CVE-2005-2349 affects Zoo 2.10 via a directory traversal vulnerability. The documents explicitly state the issue but do not provide root cause, affected components beyond Zoo 2.10, impact details, exploit status, or remediation.

CVE-2019-16370

The PGP signing plugin in Gradle before 6.0 relies on the SHA-1 algorithm, which might allow an attacker to replace an artifact with a different one that has the same SHA-1 message digest, a related issue to CVE-2005-4900...

CVE-2005-4791

Multiple untrusted search path vulnerabilities in SUSE Linux 10.0 cause the working directory to be added to LDLIBRARYPATH, which might allow local users to execute arbitrary code via 1 liferea or 2 banshee...

CVE-2019-16370

CVE-2019-16370 affects the PGP signing plugin for Gradle up to version 6.0. The root cause is reliance on SHA-1, enabling an attacker to replace an artifact with another having the same SHA-1 digest. This could permit spoofing/ tampering of artifacts. remediation: upgrade Gradle to 6.0 or later (...

CVE-2019-2005

In onPermissionGrantResult of GrantPermissionsActivity.java, there is a possible incorrectly granted permission due to a missing permission check. This could lead to local escalation of privilege on a locked device with no additional execution privileges needed. User interaction is needed for...

CVE-2019-2005

CVE-2019-2005 affects Android 8.0–9, where in onPermissionGrantResult of GrantPermissionsActivity.java a missing permission check can lead to a local elevation of privilege on a locked device. Exploitation requires user interaction; no additional execution privileges are needed. NVD lists CVSSv3 ...

Google Stored G Suite Users' Passwords in Plain-Text for 14 Years

After Facebook and Twitter, Google becomes the latest technology giant to have accidentally stored its users' passwords unprotected in plaintext on its servers—meaning any Google employee who has access to the servers could have read them. In a blog post published Tuesday, Google revealed that it...

CVE-2018-2005

creationtimestamp| type| source ---|---|--- 2019-05-20 18:45:20+00:00| seen| https://t.me/cvemitreorg/82...

CVE-2018-2005

CVE-2018-2005 affects IBM BigFix Platform versions 9.2 and 9.5. The vulnerability is an information disclosure where potentially sensitive data is stored in process memory and could be read by a local attacker with elevated permissions. The issue stems from data stored in memory and is categorize...

CVE-2005-3590

The getgrouplist function in the GNU C library glibc before version 2.3.5, when invoked with a zero argument, writes to the passed pointer even if the specified array size is zero, leading to a buffer overflow and potentially allowing attackers to corrupt memory...

CVE-2005-3590

creationtimestamp| type| source ---|---|--- 2019-04-11 00:31:30+00:00| seen| https://t.me/cibsecurity/3651...

CVE-2005-3590

The getgrouplist function in the GNU C library glibc before version 2.3.5, when invoked with a zero argument, writes to the passed pointer even if the specified array size is zero, leading to a buffer overflow and potentially allowing attackers to corrupt memory...

CVE-2005-3590

The getgrouplist function in the GNU C library glibc before version 2.3.5, when invoked with a zero argument, writes to the passed pointer even if the specified array size is zero, leading to a buffer overflow and potentially allowing attackers to corrupt memory...

CVE-2005-3590

The CVE-2005-3590 issue affects the GNU C Library (glibc) prior to 2.3.5, where getgrouplist, when invoked with a zero argument, writes to the provided pointer even if the array size is zero. This results in a buffer overflow and can lead to memory corruption. Affected component: glibc function g...

Nuuo Central Management SQL Injection Exploit

The Nuuo Central Management Server allows an authenticated user to query the state of the alarms. This functionality can be abused to inject SQL into the query. As SQL Server 2005 Express is installed by default, xpcmdshell can be enabled and abused to achieve code execution. This module will...