60 matches found
CVE-2017-5230
The Java keystore in all versions and editions of Rapid7 Nexpose prior to 6.4.50 is encrypted with a static password of 'r@p1d7k3y5t0r3' which is not modifiable by the user. The keystore provides storage for saved scan credentials in an otherwise secure location on disk...
CVE-2017-5230
The CVE-2017-5230 issue affects Rapid7 Nexpose prior to version 6.4.50, where the Java keystore used for storing saved scan credentials is encrypted with a static, non-user-modifiable password: r@p1d7k3y5t0r3 . If an attacker gains access to the keystore, they can decrypt all stored credentials u...
CVE-2016-5230
The CVE-2016-5230 entry affects Huawei Mate8 devices (NXT-AL, NXT-CL, NXT-DL, NXT-TL variants before specific builds). A crafted app can bypass permission checks and control partial module functions, per the description and multiple connected sources. The Huawei security advisory HWPSIRT-2016-030...
Fedora Update for pdns FEDORA-2015-14952
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 22 : pdns-3.4.6-1.fc22 (2015-14952)
Upstream released new version - Security fix for CVE-2015-5230 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...
FreeBSD : powerdns -- denial of service (55c43f5b-5190-11e5-9ad8-14dae9d210b8)
PowerDNS reports : A bug was found in our DNS packet parsing/generation code, which, when exploited, can cause individual threads disabling service or whole processes allowing a supervisor to restart them to crash with just one or a few query packets. %NASLMINLEVEL 70300 C Tenable Network Securit...
Ubisoft Uplay 5.0 Insecure File Permissions Local Privilege Escalation
Ubisoft Uplay 5.0 Insecure File Permissions Local Privilege Escalation Vendor: Ubisoft Entertainment S.A. Product web page: http://www.ubi.com Affected version: 5.0.0.3914 PC Summary: Uplay is a digital distribution, digital rights management, multiplayer and communications service created by...
D-Link IP Cameras Injection / Bypass Vulnerabilities
Core Security Technologies Advisory - D-Link IP Cameras suffer from OS command injection, authentication, information leak, and hard-coded credential vulnerabilities. D-Link IP Cameras Multiple Vulnerabilities 1. Advisory Information Title: D-Link IP Cameras Multiple Vulnerabilities Advisory ID:...
CVE-2011-5230
Seotoaster 1.9 and earlier is affected by SQL injection in the LoginModel::selectUserIdByLoginPass function. The vulnerabilities allow remote attackers to execute arbitrary SQL commands via (1) the login parameter to sys/login/index or (2) the memberLoginName parameter to sys/login/member. Affect...
CVE-2012-5230
CVE-2012-5230 affects the Joomla! JE Story Submit (com_jesubmit) component prior to 1.9. The connected sources confirm an unspecified vulnerability with unknown impact and attack vectors, anchored by a CVSSv2 base score of 7.5 (HIGH). The affected item is specifically the com_jesubmit integration...
CVE-2012-5230
Unspecified vulnerability in the JE Story Submit comjesubmit component before 1.9 for Joomla! has unknown impact and attack vectors...
CVE-2010-5230
CVE-2010-5230 affects MicroStation 7.1. Local privilege escalation via untrusted DLL search path vulnerability. The attacker can place one of four DLLs (mptools.dll, baseman.dll, wintab32.dll, or wintab.dll) in the current working directory, with a directory containing a .hln or .rdl file demonst...
CVE-2011-5230
creationtimestamp| type| source ---|---|--- 2011-12-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18246...
CVE-2010-3037
CVE-2010-3037 affects Cisco Unified Videoconferencing (UVC) products (5110/5115 Linux; 3545, 5230 VxWorks; 3527 PRI Gateway; 3522 BRI Gateway; 3515 MCU). The flaw is a remote command-injection in the web interface via the /goform/websXMLAdminRequestCgi.cgi, allowing an authenticated administrator...
CVE-2008-5230
The CVE-2008-5230 entry covers a TKIP vulnerability in WPA/WPA2 implementations (notably Cisco and other vendors). The root cause is insufficient countermeasures against crafted and replayed packets, enabling a remote attacker to decrypt AP→client traffic, spoof AP→client packets, and perform ARP...
CVE-2007-5231
Unrestricted file upload vulnerability in admin/uploadfiles.php in Zomplog 3.8.1 and earlier allows remote authenticated administrators to upload and execute arbitrary .php files by sending a modified MIME type. NOTE: this can be exploited by unauthenticated attackers by leveraging CVE-2007-5230...
CVE-2007-5231
CVE-2007-5231 affects Zomplog prior to 3.8.1: an unrestricted file upload in admin/upload_files.php allows remote authenticated administrators to upload and execute arbitrary PHP files by sending a modified MIME type. Note that CVE-2007-5230 shows this can be leveraged for code execution and coul...
CVE-2007-5231
Unrestricted file upload vulnerability in admin/uploadfiles.php in Zomplog 3.8.1 and earlier allows remote authenticated administrators to upload and execute arbitrary .php files by sending a modified MIME type. NOTE: this can be exploited by unauthenticated attackers by leveraging CVE-2007-5230...
CVE-2007-5230
CVE-2007-5230 concerns Zomplog 3.8.1 and earlier where admin/upload_files.php does not require administrative credentials, enabling remote attackers to perform administrative actions via a direct request. This is linked to CVE-2007-5231, which describes an unrestricted file upload vulnerability i...