CVE-2013-5188

The CVE-2013-5188 entry concerns Apple macOS X before 10.9 where, when hibernation and autologin are enabled, the Screen Lock transition out of hibernation does not require a password. This enables physically proximate attackers to gain access by visiting an unattended workstation in a hibernatin...

CVE-2012-5188

CVE-2012-5188 concerns mora Downloader before 1.0.0.1, where an untrusted search path can cause the launcher to execute a .exe via unspecified vectors. Multiple sources (NVD/Red Hat/JVN variants) confirm the flaw allows arbitrary code execution with the application’s privileges, tied to insecure ...

RHEL 5 : ecryptfs-utils (RHSA-2009:1307)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2009:1307 advisory. eCryptfs is a stacked, cryptographic file system. It is transparent to the underlying file system and provides per-file granularity. eCryptfs is...

CVE-2011-5188

Drupal: The Support Timer module (6.x-1.x) is vulnerable to Cross-Site Scripting (XSS) when used or configured with version prior to 6.x-1.4. The issue can be exploited by remote authenticated users who have the track time spent permission, through unsanitized user-supplied content. A fix is avai...

CVE-2010-5188

SilverStripe CMS 2.3.x prior to 2.3.6 is affected by an information-disclosure vulnerability. The flaw stems from improper handling of debug_memory (Director.php) and debug_profile (main.php), allowing remote attackers to obtain sensitive information. Remediation: upgrade to SilverStripe 2.3.6 or...

Scientific Linux Security Update : ecryptfs-utils on SL5.x i386/x86_64

These updated ecryptfs-utils packages have been upgraded to upstream version 75, which provides a number of bug fixes and enhancements over the previous version. In addition, these packages provide a graphical program to help configure and use eCryptfs. To start this program, run the command :...

SA-CONTRIB-2011-058 - Support Timer - Cross Site Scripting (XSS)

The Support Timer module adds a javascript-based timer to the Support Ticketing System for tracking how long users are working on support tickets, as well as administrative reports. The module does not properly sanitize user-supplied content, resulting in multiple Cross-Site Scripting XSS...

VLC Media Player < 1.0.2 Multiple Buffer Overflows (deprecated)

Binary data 5188.prm...

CentOS Security Advisory CESA-2009:1307 (ecryptfs-utils)

The remote host is missing updates to ecryptfs-utils announced in advisory CESA-2009:1307. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

CVE-2007-5188

CVE-2007-5188 affects XOOPS (uploader class) in XOOPS 2.0.17.1-RC1 and earlier. The issue is an unspecified remote upload vulnerability tied to improper upload configuration in class/uploader.php and class/mimetypes.inc.php, with a possibly incomplete blacklist that omits the .php4 extension. Con...

CVE-2006-5188

CVE-2006-5188 describes a directory traversal vulnerability in the download.php of the webGENEius GOOP Gallery 2.0.2. The vulnerability could allow remote attackers to read or list data from certain files or directories via unspecified vectors. The available sources (NVD/NVD detail, CVE listings)...