99 matches found
Photon OS 5.0: Frr PHSA-2026-5.0-91-0884
An update of the frr package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0884. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
SUSE SLES15 Security Update : frr (SUSE-SU-2026:2457-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2457-1 advisory. This update for frr fixes the following issue: - CVE-2026-5107: Fixed an improper access controls in EVPN Type-2 Route Handler...
frr-10.5.1-3.1 on GA media (moderate)
frr-10.5.1-3.1 on GA media Announcement ID: openSUSE-SU-2026:10606-1 Rating: moderate Cross-References: CVE-2026-5107 CVSS scores: CVE-2026-5107 SUSE : 4.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L CVE-2026-5107 SUSE : 2.3...
CVE-2026-5107
A flaw was found in frr package. This vulnerability, located in the EVPN Type-2 Route Handler function, allowing a remote attacker to manipulate access controls when successfully exploited. Due to the high complexity of the attack, exploitation is considered difficult. This could potentially lead...
CVE-2026-5107
creationtimestamp| type| source ---|---|--- 2026-03-30 08:35:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mibayn4pxf2i 2026-04-01 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0389/...
CVE-2026-5107
A vulnerability has been found in FRRouting FRR up to 10.5.1. This affects the function processtype2route of the file bgpd/bgpevpn.c of the component EVPN Type-2 Route Handler. The manipulation leads to improper access controls. The attack can be initiated remotely. The attack is considered to ha...
CVE-2026-5107
A vulnerability has been found in FRRouting FRR up to 10.5.1. This affects the function processtype2route of the file bgpd/bgpevpn.c of the component EVPN Type-2 Route Handler. The manipulation leads to improper access controls. The attack can be initiated remotely. The attack is considered to ha...
Linux Distros Unpatched Vulnerability : CVE-2026-5107
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been found in FRRouting FRR up to 10.5.1. This affects the function processtype2route of the file bgpd/bgpevpn.c of the component EVPN Type-...
EUVD-2020-5107
Malware in sbrugna...
CVE-2025-5107
creationtimestamp| type| source ---|---|--- 2025-05-27 14:48:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17640...
CVE-2025-5107 Fujian Kelixun xml_cdr_details.php sql injection
A vulnerability was found in Fujian Kelixun 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /app/xmlcdr/xmlcdrdetails.php. The manipulation of the argument uuid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed ...
CVE-2025-5107
CVE-2025-5107 affects Fujian Kelixun 1.0, with a SQL injection in /app/xml_cdr/xml_cdr_details.php triggered by the uuid parameter. The vulnerability can be exploited remotely (no user interaction, no privileges required) and can impact confidentiality, integrity, and availability. Multiple sourc...
CVE-2014-5107
concrete5 before 5.6.3 allows remote attackers to obtain the installation path via a direct request to 1 system/basics/editor.php, 2 system/view.php, 3 system/environment/filestoragelocations.php, 4 system/mail/importers.php, 5 system/mail/method.php, 6 system/permissions/filetypes.php, 7...
Linux Distros Unpatched Vulnerability : CVE-2010-5107
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing a TCP connection and completing a login, which makes it easier...
RHEL 5 : openssh (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - openssh: MaxAuthTries limit bypass via duplicates in KbdInteractiveDevices CVE-2015-5600 - openssh:...
CVE-2024-5107 Campcodes Complete Web-Based School Management System student_payment_details2.php sql injection
A vulnerability, which was classified as critical, has been found in Campcodes Complete Web-Based School Management System 1.0. This issue affects some unknown processing of the file /view/studentpaymentdetails2.php. The manipulation of the argument index leads to sql injection. The attack may be...
CVE-2024-5107
CVE-2024-5107 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability arises from manipulation of the index parameter in the file /view/student_payment_details2.php, enabling SQL injection. It is a remote attack and the exploit has been disclosed publicly. Multiple so...
Malicious code in wlwz-2312-5107 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 434ac432ab1fcbcecb63885dd0b902e7ca022d1febac020fd6cd3da36e1decf9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in wlwz-2312-5107
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2024-636 Malicious code in wlwz-2312-5107 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 434ac432ab1fcbcecb63885dd0b902e7ca022d1febac020fd6cd3da36e1decf9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...