115 matches found
Cart Engine 3.0.0 - Database Backup Disclosure
$total return;...
CVE-2013-5180
The CVE-2013-5180 entry concerns the srandomdev function in Libc on Apple Mac OS X prior to 10.9. When the kernel random-number generator is unavailable, srandomdev produces predictable values instead of true randomness, which can help context-dependent attackers defeat cryptographic protections....
CVE-2012-5180
The Opera Mobile application before 12.1 and Opera Mini application before 7.5 for Android do not properly implement the WebView class, which allows attackers to obtain sensitive information via a crafted application...
CVE-2012-5180
The Opera Mobile application before 12.1 and Opera Mini application before 7.5 for Android do not properly implement the WebView class, which allows attackers to obtain sensitive information via a crafted application...
CVE-2012-5180
The CVE-2012-5180 issue affects Opera Mini for Android versions prior to 7.5 and Opera Mobile for Android versions prior to 12.1. The vulnerability arises from improper handling/implementation of the WebView class, enabling information disclosure when a user runs a crafted malicious Android appli...
CVE-2011-5180
The CVE-2011-5180 entry concerns the WordPress ZooEffect plugin (version 1.01) via an XSS in wp-1pluginjquery.php, exploitable through the page parameter. Affected component: the plugin’s PHP code handling page input; underlying impact is partial integrity exposure with no confidentiality or avai...
CVE-2010-5180
CVE-2010-5180 concerns a race condition in VBA32 Personal 3.12.12.4 on Windows XP that allows a local user to bypass kernel-mode hook handlers by performing certain user-space memory changes during hook-handler execution (KHOBE/argument-switch attack). Affected component: VBA32 Personal 3.12.12.4...
SuSE 11.1 Security Update : CUPS (SAT Patch Number 5180)
This update fixes the following security issues : - 601830: CSRF via admin web interface. CVE-2010-0540 - 680210: users in group 'lp' can overwrite arbitrary files. CVE-2010-2431 - 680212: denial of service via cupsDoAuthentication. CVE-2010-2432 - 711490: heap overflow in gif decoder...
CVE-2011-5180
creationtimestamp| type| source ---|---|--- 2011-11-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36382...
msoffice-dos.txt
!usr/bin/perl -w Microsoft Communicator allows remote attackers to cause a denial of service memory consumption via a large number of SIP INVITE requests, which trigger the creation of many sessions. Refer: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-5180...
CVE-2008-5180
creationtimestamp| type| source ---|---|--- 2008-11-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7262 2024-02-02 08:16:29+00:00| seen| https://t.me/ctinow/177962...
Microsoft Office - Communicator 'SIP' Remote Denial of Service
!usr/bin/perl -w Microsoft Communicator allows remote attackers to cause a denial of service memory consumption via a large number of SIP INVITE requests, which trigger the creation of many sessions. Refer: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-5180...
CVE-2008-5180
Microsoft Communicator and the Communicator component in Office 2010 beta are affected by CVE-2008-5180. The vulnerability allows remote attackers to cause a denial of service (memory consumption) by sending a large number of SIP INVITE requests, which triggers the creation of many sessions. The ...
CVE-2007-5180
CVE-2007-5180 describes multiple SQL injection vulnerabilities in Ohesa Emlak Portali, allowing remote attackers to execute arbitrary SQL via (1) Kategori in satilik.asp and (2) Emlak in detay.asp. Root cause is improper input handling for these parameters, enabling unsanitized input to be embedd...
CVE-2006-5180
CVE-2006-5180 : Newswriter SW 1.42 and earlier by Sebastian Baumann and Philipp Wolfer is affected by a PHP remote file inclusion vulnerability in the component/module used to load configuration (NWCONF_SYSTEM[server_path] parameter). The underlying issue is an insecure inclusion mechanism that a...