CVE-2014-5100

Omeka 2.2.1 prior to release is affected by multiple CSRF vulnerabilities that can hijack admin sessions. Exploitation vectors include: (1) adding a new super user via admin/users/add; (2) injecting XSS via the api_key_label parameter to admin/users/api-keys/1; and (3) disabling file validation v...

CVE-2014-5100

creationtimestamp| type| source ---|---|--- 2014-07-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34100...

TYPO3 Multiple Vulnerabilities (Dec 2010)

TYPO3 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:typo3:typo3"; ifdescription...

CVE-2013-5442

Cross-site scripting XSS vulnerability in the Local Management Interface LMI in IBM Security Network Protection on XGS 5100 devices with firmware 5.1 before 5.1.0.6 and 5.1.1 before 5.1.1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-5442

Cross-site scripting XSS vulnerability in the Local Management Interface LMI in IBM Security Network Protection on XGS 5100 devices with firmware 5.1 before 5.1.0.6 and 5.1.1 before 5.1.1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-5100

The CVE documents a Cross-site Scripting (XSS) vulnerability in the Static Methods since 2007 (div2007) extension for TYPO3 . The issue affects the extension version prior to 0.10.2 and is related to the function t3lib_div::quoteJSvalue , enabling remote attackers to inject arbitrary script/HTML ...

CVE-2013-5100

Cross-site scripting XSS vulnerability in the Static Methods since 2007 div2007 extension before 0.10.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to the t3libdiv::quoteJSvalue function...

CVE-2012-5100

The CVE-2012-5100 entry concerns HServer 0.1.1, where a directory traversal flaw allows remote attackers to read arbitrary files via PATH_INFO (specifically dot-dot encoded backslashes, e.g., ..\ or %2e%2e). The vulnerability is a server-side path traversal issue, enabling access to files outside...

CVE-2011-5100

CVE-2011-5100 affects the McAfee Firewall Reporter web interface (pre-5.1.0.13). The root cause is improper cookie authentication, allowing remote attackers to obtain access and disable anti-virus functionality via an HTTP request. The vulnerability is reflected in NVD as CVSSv2 base score 7.5 (H...

CVE-2010-5100

Multiple cross-site scripting XSS vulnerabilities in the Install Tool in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-5100

The connected advisories confirm CVE-2010-5100 affects TYPO3’s Install Tool, with XSS vulnerabilities in TYPO3 4.2.x prior to 4.2.16, 4.3.x prior to 4.3.9, and 4.4.x prior to 4.4.5. The root cause and vectors are not detailed in the provided documents, only that remote authenticated users can inj...

CVE-2009-5100

CVE-2009-5100 affects Pentaho BI Server 1.7.0.1062 and earlier, where web pages using a password field do not set autocomplete off. This may enable physically proximate attackers to obtain the password. The issue is described as a failure to disable autocomplete in login/password contexts, with a...

Nortel CS1000 Communications Server Remote Denial of Service Vulnerability

This vulnerability allows remote attackers to create a denial of service condition on vulnerable installations of Nortel CS1000 Communication Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the process listening on UDP port 5100. When parsing ...

CVE-2008-5871

Nortel Multimedia Communication Server MSC 5100 3.0.13 does not verify credentials during call placement, which allows remote attackers to spoof and redirect VoIP calls, possibly related to the snoop command...

Command injection

Nortel Multimedia Communication Server MSC 5100 3.0.13 does not verify credentials during call placement, which allows remote attackers to spoof and redirect VoIP calls, possibly related to the snoop command...

Code injection

Multiple unspecified vulnerabilities in the UNIStim File Transfer Protocol UFTP processing in IP Client Manager IPCM in Nortel Multimedia Communication Server MSC 5100 3.0.13 allow remote attackers to cause a denial of service device outage via a UFTP message that has a negative block size or oth...

CVE-2008-5871

CVE-2008-5871 affects Nortel Multimedia Communication Server (MSC) 5100, version 3.0.13. The underlying issue is that the system does not verify credentials during call placement, enabling remote attackers to spoof and redirect VoIP calls. The impact is partial confidentiality/integrity/availabil...

CVE-2008-5871

Nortel Multimedia Communication Server MSC 5100 3.0.13 does not verify credentials during call placement, which allows remote attackers to spoof and redirect VoIP calls, possibly related to the snoop command...

CVE-2008-5872

Affected product: Nortel Mult imedia Communication Server (MSC) 5100, IPCM component, specifically the UNIStim File Transfer Protocol (UFTP) processing. Vulnerability details: Multiple unspecified issues in UFTP handling allow remote attackers to trigger a denial of service (device outage) by sen...

CVE-2008-5100

CVE-2008-5100 concerns the strong name (SN) implementation in Microsoft .NET Framework 2.0.50727 . The description in multiple connected sources states that SN validation relies on the Public Key Token embedded in the DLL’s pathname rather than the file’s own digital signature. This design flaw c...