78 matches found
SUSE CVE-2015-5237
protobuf allows remote authenticated attackers to cause a heap-based buffer overflow...
Ubuntu: Security Advisory (USN-5769-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Bulletin: There are multiple security vulnerabilities in Apache Storm used by IBM Tivoli Netcool Manager.
Summary Apache-storm, used by IBM Tivoli Network Manager, contains many internal libraries which are vulnerable to various types of CVEs. Revealing sensitive information CVE-2021-28169, bypassing ACL validations CVE-2018-17196, heap based buffer overflow CVE-2015-5237, denial of service...
Security Bulletin: protobuf Vulnerability in Apache Solr affect IBM Operations Analytics - Log Analysis Analysis (CVE-2015-5237)
Summary A potential Buffer Error and Out-of-Bounds Write vulnerabilities in protobuf were addressed by IBM Operations Analytics - Log Analysis. Vulnerability Details CVEID: CVE-2015-5237 DESCRIPTION: Google Protocol Buffers could allow a remote attacker to execute arbitrary code on the system,...
CentOS 8 : firefox (CESA-2020:5237)
The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:5237 advisory. - Mozilla: Variable time processing of cross-origin images during drawImage calls CVE-2020-16012 - Mozilla: Parsing mismatches could confuse and bypass...
Oracle Linux 8 : firefox (ELSA-2020-5237)
The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-5237 advisory. 78.5.0-1.0.1 - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 78.5.0-1 - Update to 78.5.0...
CVE-2020-5237
CVE-2020-5237 : Multiple relative path traversal vulnerabilities in the OneupUploaderBundle (oneup/uploader-bundle) before versions 1.9.3 and 2.1.5. An attacker can manipulate various upload parameters (BlueimpController.php, DropzoneController.php, FineUploaderController.php, MooUploadController...
CVE-2019-5237
Huawei PCManager is affected by CVE-2019-5237 in versions before 9.0.1.66 (Oversea) and before 9.0.1.70 (China). The vulnerability enables code execution on successful exploitation, allowing an attacker to execute code and read/write information on the target. Huawei’s security advisory HWPSIRT-2...
Symantec Endpoint Protection Client 12.1.x < 12.1 RU6 MP10 / 14.0.x < 14.0 RU1 MP1 Multiple Vulnerabilities (SYMSA1454)
The version of Symantec Endpoint Protection SEP Client installed on the remote host is 12.1.x prior to 12.1 RU6 MP10 or 14.0.x prior to 14.0 RU1 MP1. It is, therefore, affected by a multiple vulnerabilities as referenced in the advisory. Note that Nessus has not tested for this issue but has...
CVE-2018-5237
Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10 could be susceptible to a privilege escalation vulnerability, which is a type of issue that allows a user to gain elevated access to resources that are normally protected at lower access levels...
CVE-2018-5237
CVE-2018-5237 corresponds to a privilege-escalation vulnerability in Symantec Endpoint Protection (SEP) Windows endpoints. Affected versions are SEP before 14 RU1 MP1 or 12.1 RU6 MP10; the issue is addressed by upgrading to SEP 14 RU1 MP1 or 12.1 RU6 MP10 and later. The connected advisory confirm...
Symantec Endpoint Protection Multiple Issues
SUMMARY Symantec has released a set of updates to address issues that were discovered in the Symantec Endpoint Protection product. AFFECTED PRODUCTS Symantec Endpoint Protection --- CVE | Affected Versions | Remediation CVE-2018-5236 CVE-2018-5237 | Prior to 14 RU1 MP1 or 12.1 RU6 MP10 | Upgrade ...
CVE-2015-5237
protobuf allows remote authenticated attackers to cause a heap-based buffer overflow...
CVE-2015-5237
protobuf allows remote authenticated attackers to cause a heap-based buffer overflow...
CVE-2015-5237
protobuf allows remote authenticated attackers to cause a heap-based buffer overflow...
CVE-2015-5237
CVE-2015-5237 affects Google Protocol Buffers (protobuf). Root cause: integer/heap overflow in MessageLite::SerializeToString leading to a heap‑based buffer overflow. Exploitation could enable remote code execution or denial of service by remote authenticated attackers. In IBM DataStage for Cloud...
CVE-2015-5237
protobuf allows remote authenticated attackers to cause a heap-based buffer overflow...
CVE-2017-5237
CVE-2017-5237 affects the Eview EV-07S GPS Tracker. The issue stems from a lack of authentication, allowing an unauthenticated user who knows the device’s phone number to revert it to factory default via an SMS command (“RESET!”). This corresponds to a high impact on availability (CVSSv3: 7.5) wi...
CVE-2016-5237
CVE-2016-5237 affects Valve Steam client 3.42.16.13 on Windows, where weak filesystem permissions in the Steam program directory allow BUILTIN\Users to modify files, enabling local privilege escalation and potential code execution (exploits exist in Exploit-DB and related references). No official...
Valve Steam 3.42.16.13 - Local Privilege Escalation
Exploit Title: Valve Steam 3.42.16.13 Local Privilege Escalation CVE-ID: CVE-2016-5237 Date: 5/11/52016 Exploit Author: gsX Contact: [email protected] Vendor Homepage: http://www.valvesoftware.com/ Software Link: http://store.steampowered.com/about/ Version: File Version 3.42.16.13, Built: Apr ...