113 matches found
CVE-2013-5186
CVE-2013-5186 concerns Power Management in Apple Mac OS X before 10.9. The vulnerability arises from improper handling of the interaction between screen locking and power assertions, enabling physically proximate attackers to read sensitive information from a screen that should be locked. The ini...
CVE-2012-5186
CVE-2012-5186 describes a cross-site scripting (XSS) vulnerability in FLUGELz netmania myu-s and PHP WeblogSystem . The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, potentially executing in a user’s browser. Affected products include myu-s and PHP ...
CVE-2011-5186
CVE-2011-5186 affects the jbShop plugin for e107 7. The vulnerability is a Cross-site Scripting (XSS) in jbshop.php via the item_id parameter, allowing remote attackers to inject arbitrary web script or HTML. Root cause is insufficient input sanitization on that parameter. Exploitation details ar...
CVE-2010-5186
CVE-2010-5186 affects the Antivirus component of Comodo Internet Security prior to 4.1.150349.920 . An attacker can trigger a denial of service (application crash) by delivering a crafted file. The entry is supported by multiple records (NVD/OpenVAS/Red Hat) noting a DoS via a crafted file with a...
CVE-2011-5186
creationtimestamp| type| source ---|---|--- 2011-10-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18056...
CVE-2008-5186
The setlanguagepath function in geshi.php in Generic Syntax Highlighter GeSHi before 1.0.8.1 might allow remote attackers to conduct file inclusion attacks via crafted inputs that influence the default language path $path variable. NOTE: this issue has been disputed by a vendor, stating that only...
CVE-2008-5186
CVE-2008-5186 concerns the Generic Syntax Highlighter (GeSHi) set_language_path vulnerability in geshi.php. According to the records, inputs crafted to influence the default language path ($path) may allow remote administrators to perform file inclusion attacks in GeSHi versions before 1.0.8.1. T...
CVE-2008-5186
The setlanguagepath function in geshi.php in Generic Syntax Highlighter GeSHi before 1.0.8.1 might allow remote attackers to conduct file inclusion attacks via crafted inputs that influence the default language path $path variable. NOTE: this issue has been disputed by a vendor, stating that only...
SuSE 10 Security Update : poppler (ZYPP Patch Number 5186)
Specially crafted PDF files with embedded fonts could potentially be abused to trick applications that process PDF files into executing arbitrary code. CVE-2008-1693 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...
Immunity Canvas: SEGUE_INCLUDE
Name| segueinclude ---|--- CVE| CVE-2007-5186 Exploit Pack| CANVAS Description| Segue remote file include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: Segue CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5186 CVE Name: CVE-2007-5186...
CVE-2007-5186
Segue CMS suffers a PHP remote file inclusion via the themesdir parameter in index.php (and related themes/settings scripts) for versions 1.8.4 and earlier. The underlying issue is unsanitized input used to include PHP code in themes/program/themesettings.inc.php, which can enable arbitrary code ...
CVE-2006-5186
PHP remote file inclusion vulnerability in functions.php in phpMyProfiler 0.9.6 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the pmprelpath parameter...