54 matches found
CVE-2026-5055 NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in order to...
CVE-2026-5055
NoMachine CVE-2026-5055 involves an Uncontrolled Search Path Element in the NoMachine Device Server. The flaw arises because the Device Server loads a library from an unsecured location, enabling a local attacker who already has low-privileged code execution to escalate to SYSTEM and potentially ...
EUVD-2018-5055
Malware in sbrugna...
CVE-2025-5055
The Smart Forms – when you need more than just a contact form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.6.98 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...
CVE-2025-5055
creationtimestamp| type| source ---|---|--- 2025-05-24 02:53:42+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpv5d6gckrj2 2025-05-24 03:49:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17477...
WordPress Smart Forms plugin <= 2.6.98 - Authenticated (Admin+) Stored Cross-Site Scripting vulnerability
Authenticated Admin+ Stored Cross-Site Scripting vulnerability discovered by Joel Indra in WordPress Plugin Smart Forms versions = 2.6.98...
CVE-2009-5055
Open Ticket Request System OTRS before 2.4.4 grants ticket access on the basis of single-digit substrings of the CustomerID value, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by visiting a ticket, as demonstrated by leveraging the...
CVE-2024-5055
Summary: CVE-2024-5055 affects XAMPP for Windows, with version 7.3.2 and earlier. The issue is an uncontrolled/resource consumption DoS caused when XAMPP processes many incomplete HTTP requests, leading to exhaustion of resources and potential crashes. Concrete details across connected sources co...
CVE-2023-5055 L2CAP: Possible Stack based buffer overflow in le_ecred_reconf_req()
Possible variant of CVE-2021-3434 in function leecredreconfreq...
CVE-2023-5055
CVE-2023-5055 is a Zephyr RTOS L2CAP issue described as a possible variant of CVE-2021-3434 in the function le_ecred_reconf_req. The connected sources provide concrete details that CVE-2021-3434 is a stack-based buffer overflow in le_ecred_conn_req affecting Zephyr versions >= 2.5.0, and that ...
CVE-2023-5055 L2CAP: Possible Stack based buffer overflow in le_ecred_reconf_req()
Possible variant of CVE-2021-3434 in function leecredreconfreq...
com.evasion:API (>=1.0.0.1 <=1.0.0.3), com.evasion:CLIENT (>=1.0.0.1 <=1.0.0.3) +300 more potentially affected by CVE-2012-5055 via org.springframework.security:spring-security-core (>=2.0.0 <=2.0.7.RELEASE)
org.springframework.security:spring-security-core MAVEN version =2.0.0, =1.0.0.1, =1.0.0.1, =1.0.0.1, =1.0.0.1, =1.0.0.1, =1.0.0.1, =1.0.0.1, =1.0.0.1, =1.0.0.1, =1.0.0.1, =1.0.0.1, =1.0.0.1, =1.0.0.1, =1.0.0.1, =1.5, =1.6 and more Source cves: CVE-2012-5055 Source advisory: OSV:GHSA-3533-RVPC-6X...
com.ctlok:spring-webmvc-rythm (>=1.3.6 <=1.4.2), com.github.dblock.waffle:waffle-spring-security3 (>=1.5 <=1.6) +171 more potentially affected by CVE-2012-5055 via org.springframework.security:spring-security-core (>=3.1.0.RELEASE <=3.1.2.RELEASE)
org.springframework.security:spring-security-core MAVEN version =3.1.0.RELEASE, =1.3.6, =1.5, =1.0.0, =3.0.4, =3.3, =1.1.3, =1.1.4, =1.1.3, =1.0.2, =1.0.3 - com.racquettrack:spring-security-oauth2-client =1.4 - com.sitewhere:sitewhere-core =0.9.7 and more Source cves: CVE-2012-5055 Source advisor...
br.net.woodstock.rockframework:rockframework-domain (>=1.2.1 <=3.0.1), br.net.woodstock.rockframework:rockframework-persistence (>=2.0.0 <=2.0.8) +270 more potentially affected by CVE-2012-5055 via org.springframework.security:spring-security-core (>=3.0.0.RELEASE <=3.0.7.RELEASE)
org.springframework.security:spring-security-core MAVEN version =3.0.0.RELEASE, =1.2.1, =2.0.0, =22.0.2-BETA, =1.0.0, =3.0.2, =3.0.0, =1.2.0, =1.1, =0.1, =1.2-1, =1.0, =1.0.2 - com.revolsys.open:com.revolsys.open.gis.web =2011.11.07.RELEASE and more Source cves: CVE-2012-5055 Source advisory:...
RHEL 8 : thunderbird (RHSA-2021:5055)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:5055 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 91.4.0. Security Fixes: Mozilla:...
CVE-2020-5055
CVE-2020-5055 is rejected/not used; this candidate was not assigned to issues.
CVE-2019-5055
An exploitable denial-of-service vulnerability exists in the Host Access Point Daemon hostapd on the NETGEAR N300 WNR2000v5 with Firmware Version V1.0.0.70 wireless router. A SOAP request sent in an invalid sequence to the service can cause a null pointer dereference, resulting in the hostapd...
CVE-2019-5055
Summary: CVE-2019-5055 affects NETGEAR N300 WNR2000v5 with firmware 1.0.0.70. The vulnerability is a denial-of-service in hostapd caused by a null-pointer dereference triggered by an invalid SOAP PutMessage request to WFAWLANConfig, exploitable by unauthenticated attackers and resulting in hostap...
CVE-2019-5055
An exploitable denial-of-service vulnerability exists in the Host Access Point Daemon hostapd on the NETGEAR N300 WNR2000v5 with Firmware Version V1.0.0.70 wireless router. A SOAP request sent in an invalid sequence to the service can cause a null pointer dereference, resulting in the hostapd...