CVE-2016-5001

This is an information disclosure vulnerability in Apache Hadoop before 2.6.4 and 2.7.x before 2.7.2 in the short-circuit reads feature of HDFS. A local user on an HDFS DataNode may be able to craft a block token that grants unauthorized read access to random files by guessing certain fields in t...

CVE-2016-5001

CVE-2016-5001 affects Apache Hadoop before 2.6.4 and 2.7.x before 2.7.2, in the HDFS short-circuit reads feature. Root cause: a flaw in the token-based access control that lets a local DataNode user craft a block token to read arbitrary files. Impact: information disclosure (unauthorized read acc...

CVE-2017-5001

EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an information exposure through an error message vulnerability. A remote low privileged attacker may potentially exploit this vulnerability to use information disclosed in an error message to launch another more...

CVE-2017-5001

EMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an information exposure through an error message vulnerability. A remote low privileged attacker may potentially exploit this vulnerability to use information disclosed in an error message to launch another more...

CVE-2017-5001

CVE-2017-5001 affects EMC RSA Archer versions 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1. It describes an information-exposure through an error message vulnerability where a remote low-privileged attacker may leverage information disclosed in error messages to facilitate a more targeted...

IBM WebSphere Portal DoS Vulnerability

IBM WebSphere Portal is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2015-5001

CVE-2015-5001 affects IBM WebSphere Portal versions: 6.1.0 (up to 6.1.0.6 CF27), 6.1.5 (up to 6.1.5.3 CF27), 7.0.0 (up to 7.0.0.2 CF29), 8.0.0 (before 8.0.0.1 CF19), and 8.5.0 (before CF08). The vulnerability allows remote authenticated users to cause a denial of service via memory consumption by...

TrendMicro Control Manger <= 5.5 CmdProcessor.exe - Stack Buffer Overflow

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

Constructr CMS 3.03 Miltiple Remote Vulnerabilities

No description provided by source. Constructr CMS 3.03 Miltiple Remote Vulnerabilities XSS/SQLi Vendor: phaziz interface design Product web page: http://www.constructr-cms.org Affected version: 3.03.0 Summary: ConstructrCMS is a new and fresh Content Management System build with the Power of PHP...

phpMyAdmin 3.5.x < 3.5.8.2 / 4.0.x < 4.0.4.2 Multiple Vulnerabilities (PMASA-2013-8 - PMASA-2013-15

According to its self-identified version number, the phpMyAdmin install hosted on the remote web server is 3.5.x earlier than 3.5.8.2 or 4.0.x earlier than 4.0.4.2. It is, therefore, affected by the following vulnerabilities : - Numerous input validation errors exist that could lead to cross-site...

CVE-2013-5001

CVE-2013-5001 affects phpMyAdmin 4.0.x before 4.0.4.2. The issue is a Cross-site Scripting (XSS) vulnerability in libraries/plugins/transformations/abstract/TextLinkTransformationsPlugin.class.php that enables remote authenticated users to inject arbitrary web script or HTML via a crafted object ...

CVE-2013-5001

Cross-site scripting XSS vulnerability in libraries/plugins/transformations/abstract/TextLinkTransformationsPlugin.class.php in phpMyAdmin 4.0.x before 4.0.4.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted object name associated with a...

XSS vulnerability when a text to link transformation is used.

PMASA-2013-13 Announcement-ID: PMASA-2013-13 Date: 2013-07-28 Updated: 2013-07-30 Summary XSS vulnerability when a text to link transformation is used. Description When the TextLinkTransformationPlugin is used to create a link to an object when displaying the contents of a table, the object name ...

CVE-2012-5001

CVE-2012-5001 concerns the Hitachi JP1/Cm2/Network Node Manager i product. Connected sources indicate multiple unspecified vulnerabilities in this software version allow remote attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors, with affected versio...

Trend Micro Control Manager CmdProcessor.exe AddTask Stack Buffer Overflow (CVE-2011-5001)

A stack buffer overflow vulnerability has been reported in Trend Micro Control Manager...

TrendMicro Control Manger &lt;= v5.5 CmdProcessor.exe Stack Buffer Overflow

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

TrendMicro Control Manger CmdProcessor.exe Stack Buffer Overflow

This module exploits a vulnerability in the CmdProcessor.exe component of Trend Micro Control Manger up to version 5.5. The specific flaw exists within CmdProcessor.exe service running on TCP port 20101. The vulnerable function is the CGenericScheduler::AddTask function of...

CVE-2010-5001

SQL injection vulnerability in view.php in esoftpro Online Contact Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-5001

The CVE-2010-5001 entry concerns the esoftpro Online Contact Manager 3.0. The vulnerability is a SQL injection in view.php triggered by the id parameter, allowing remote attackers to execute arbitrary SQL commands. Root cause is unsanitized input in the id parameter leading to unintended query ma...

Sybase Adaptive Server Enterprise Backup Server Format String Vulnerability

Sybase Adaptive Server is prone to format string vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...