CVE-2009-5139

creationtimestamp| type| source ---|---|--- 2020-02-12 16:37:07+00:00| seen| https://t.me/cibsecurity/9785...

CVE-2009-5139

The CVE-2009-5139 entry concerns the Gizmo5 SIP soft phone, where the SIP implementation exposes hashed credentials in a response to an invalid authentication challenge. This design allows remote attackers to attempt brute-force access against the target, as described in the vulnerability summary...

CVE-2009-5140

Technical details are not publicly available in the provided documents for CVE-2009-5140. Monitor for updates.

CVE-2009-4067

CVE-2009-4067 : A buffer overflow in the Auerswald Linux USB driver (function auerswald_probe ) for the Linux kernel is exploitable on kernel versions before 2.6.27. The vulnerability allows physically proximate attackers to execute arbitrary code, cause a denial of service, or take full control ...

CVE-2013-2009

WordPress WP Super Cache Plugin 1.2 has Remote PHP Code Execution...

CVE-2013-2009

The CVE-2013-2009 entry concerns WordPress WP Super Cache Plugin 1.2, which is vulnerable to remote PHP code execution via unsanitized input (e.g., malicious blog comments). Root cause cited as an incomplete fix for CVE-2013-2009. Impact is remote code execution on the web server as the web-serve...

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2019-1135)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2019-1111)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-3724

creationtimestamp| type| source ---|---|--- 2020-01-16 00:39:09+00:00| seen| https://t.me/cibsecurity/9232...

CVE-2009-5025

creationtimestamp| type| source ---|---|--- 2020-01-16 00:39:08+00:00| seen| https://t.me/cibsecurity/9231...

CVE-2009-3724

python-markdown2 before 1.0.1.14 has multiple cross-site scripting XSS issues...

CVE-2009-5068

There is a file disclosure vulnerability in SMF Simple Machines Forum affecting versions through v2.0.3. On some configurations a SMF deployment is shared by several "co-admins" that are not trusted beyond the SMF deployment. This vulnerability allows them to read arbitrary files on the filesyste...

CVE-2009-1120

creationtimestamp| type| source ---|---|--- 2020-01-15 20:39:07+00:00| seen| https://t.me/cibsecurity/9218...

CVE-2009-5068

The CVE concerns Simple Machines Forum (SMF) up to version 2.0.3. In some deployments, co-admins with access to the same SMF instance can read arbitrary files, including settings.php containing database passwords, enabling privilege escalation. No specific exploit details or mitigations are provi...

CVE-2009-5025

Technical details about CVE-2009-5025 are not publicly available in the provided connected documents. Monitoring for updates is advised.

CVE-2009-3724

CVE-2009-3724 affects the Python package markdown2 prior to version 1.0.1.14, with multiple cross-site scripting (XSS) issues reported across multiple sources. The vulnerability stems from insufficient input validation/escaping in the affected library, enabling attacker-controlled input to be ref...

CVE-2009-1120

EMC RepliStor Server Service before ESA-09-003 contains a DoASOCommand Remote Code Execution vulnerability in the DoRcvRpcCall RPC function, exposed via rep_srv.exe. The flaw is triggered by processing a specially crafted packet from an unauthenticated attacker, with the RPC handler listening on ...

CVE-2013-2011

WordPress W3 Super Cache Plugin before 1.3.2 contains a PHP code-execution vulnerability which could allow remote attackers to inject arbitrary code. This issue exists because of an incomplete fix for CVE-2013-2009...

Apache Olingo OData 4.0 - XML External Entity Injection

Apache Olingo OData 4.0 - XML External Entity Injection COMPASS SECURITY ADVISORY https://www.compass-security.com/research/advisories/ Product: Apache Olingo OData 4.0 Vendor: Apache Foundation CSNC ID: CSNC-2009-025 CVE ID: CVE-2019-17554 Subject: XML External Entity Resolution XXE Risk: High...

heliosphere-2009.dph.aber.ac.uk Cross Site Scripting vulnerability

Security Researcher devl00p Helped patch 2581 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting heliosphere-2009.dph.aber.ac.uk website and its users...