110 matches found
Mozilla Thunderbird < 52.6
The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 52.6. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2018-04 advisory. - A use-after-free vulnerability can occur during font face manipulation when a font face is freed while...
ECHO-2EBF-5097-832E
Bulletin has no description...
CVE-2015-5097
creationtimestamp| type| source ---|---|--- 2025-08-31 03:01:23+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d 2025-08-31 03:12:55+00:00| seen| MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57...
Linux Distros Unpatched Vulnerability : CVE-2017-5097
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in Skia in Google Chrome prior to 60.0.3112.78 for Linux allowed a remote attacker to perform an out of bounds memory...
CVE-2024-5097
A vulnerability, which was classified as problematic, was found in SourceCodester Simple Inventory System 1.0. Affected is an unknown function of the file /tableedit.phppage=editprice. The manipulation of the argument itemnumber leads to cross-site request forgery. It is possible to launch the...
CVE-2019-5097
A denial-of-service vulnerability exists in the processing of multi-part/form-data requests in the base GoAhead web server application in versions v5.0.1, v.4.1.1 and v3.6.5. A specially crafted HTTP request can lead to an infinite loop in the process. The request can be unauthenticated in the fo...
CVE-2011-5097
chef-server-api/app/controllers/cookbooks.rb in Chef Server in Chef before 0.9.18, and 0.10.x before 0.10.2, does not require administrative privileges for the update and destroy methods, which allows remote authenticated users to 1 upload cookbooks via a knife cookbook upload command or 2 delete...
CVE-2009-5097
Palm Pre WebOS 1.1 and earlier processes JavaScript in email messages, which allows remote attackers to execute arbitrary JavaScript, as demonstrated by reading PalmDatabase.db3...
CVE-2024-5097
creationtimestamp| type| source ---|---|--- 2025-02-14 09:46:59+00:00| seen| Telegram/srEK5g3MfqNQhOMnz8LVcizWCCwFryYVV-CLMArX5hvZS...
RHEL 8 : Red Hat OpenStack Platform 16.2.6 (RHSA-2024:5097)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:5097 advisory. Red Hat OpenStack Platform provides the facilities for building, deploying and monitoring a private or public infrastructure-as-a-service IaaS cloud...
CVE-2023-5097
creationtimestamp| type| source ---|---|--- 2024-02-10 15:46:12+00:00| seen| https://t.me/ctinow/182581...
CVE-2023-5097
Improper Input Validation vulnerability in HYPR Workforce Access on Windows allows Path Traversal.This issue affects Workforce Access: before 8.7...
CVE-2023-5097
Improper Input Validation vulnerability in HYPR Workforce Access on Windows allows Path Traversal.This issue affects Workforce Access: before 8.7...
CVE-2023-5097
Improper Input Validation vulnerability in HYPR Workforce Access on Windows allows Path Traversal.This issue affects Workforce Access: before 8.7...
CVE-2023-5097
CVE-2023-5097 affects HYPR Workforce Access on Windows, exploiting improper input validation that enables path traversal. The issue is tied to HYPR Workforce Access versions prior to 8.7. NVD lists base scores of 5.5 (LOCAL, LOW user interaction, High confidentiality impact) and a separate CNA sc...
CVE-2019-5097
creationtimestamp| type| source ---|---|--- 2023-09-28 18:27:35+00:00| seen| https://t.me/thehackernews/548 2024-03-07 09:36:57+00:00| seen| https://t.me/ctinow/202228 2024-11-14 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-16...
Rockwell Automation products using GoAhead Web Server Loop with Unreachable Exit Condition (CVE-2019-5097)
A denial-of-service vulnerability exists in the processing of multi- part/form-data requests in the base GoAhead web server application in versions v5.0.1, v.4.1.1 and v3.6.5. A specially crafted HTTP request can lead to an infinite loop in the process. The request can be unauthenticated in the...
Rockwell Automation products using GoAhead Web Server
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: Products using GoAhead Web Server Vulnerabilities: Infinite Loop, Use after Free 2. RISK EVALUATION Successful exploitation of these vulnerabilities could have a high...
Mageia: Security Advisory (MGASA-2018-0099)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2018-0338)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...