CVE-2023-5255

CVE-2023-5255 describes a flaw in Puppet Server where certificates using the auto-renew feature cannot be revoked, per the NVD entry. The CVE notes an impact of high availability disruption (availability impact A:H) with no confidentiality or integrity impact, and no user interaction required. Th...

CVE-2023-5255 Denial of Service for Revocation of Auto Renewed Certificates

For certificates that utilize the auto-renew feature in Puppet Server, a flaw exists which prevents the certificates from being revoked...

CVE-2013-5255

creationtimestamp| type| source ---|---|--- 2023-09-14 22:31:04+00:00| seen| https://t.me/cibsecurity/70496...

SUSE CVE-2008-5255

unknown...

SUSE CVE-2016-5255

Use-after-free vulnerability in the js::PreliminaryObjectArray::sweep function in Mozilla Firefox before 48.0 allows remote attackers to execute arbitrary code via crafted JavaScript that is mishandled during incremental garbage collection...

Ubuntu 20.04 LTS : WebKitGTK vulnerabilities (USN-5255-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5255-1 advisory. A large number of security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a...

Symfony 4.4.x < 4.4.7, 5.0.x < 5.0.7 Multiple Vulnerabilities

Symfony is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation;...

CVE-2020-5255

In Symfony before versions 4.4.7 and 5.0.7, when a Response does not contain a Content-Type header, affected versions of Symfony can fallback to the format defined in the Accept header of the request, leading to a possible mismatch between the response's content and Content-Type header. When the...

CVE-2020-5255

Symfony's CVE-2020-5255 affects pre-4.4.7 and pre-5.0.7 releases where a Response without a Content-Type may fall back to the Accept header, causing a mismatch between content and Content-Type. The issue can impact cached responses, potentially making sites unusable for other users. The vulnerabi...

CVE-2020-5255: Prevent cache poisoning via a Response Content-Type header

More info at https://symfony.com/cve-2020-5255...

CVE-2020-5255: Prevent cache poisoning via a Response Content-Type header

More info at https://symfony.com/cve-2020-5255...

CVE-2020-5255: Prevent cache poisoning via a Response Content-Type header

Affected versions Symfony 4.4.0 to 4.4.6 and 5.0.0 to 5.0.6 versions of the Symfony HttpFoundation component are affected by this security issue. The issue has been fixed in Symfony 4.4.7 and 5.0.7. Description When a Response does not contain a Content-Type header, Symfony falls back to the form...

CVE-2019-5255

CVE-2019-5255 affects a broad set of Huawei devices (AP2000, IPS, NGFW, NIP6300/6600/6800, S5700, SVN5600/5800/5800-C, SeMG9811, Secospace USG/AntiDDoS, eSpace U1981, etc.). The vulnerability arises from insufficient validation of messages, enabling an attacker to trigger an out-of-bounds read by...

CVE-2014-5255

xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files. Note: A different vulnerability than CVE-2014-5254...

CVE-2014-5255

xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files. Note: A different vulnerability than CVE-2014-5254...

CVE-2014-5255

CVE-2014-5255 affects xcfa prior to 5.0.1. The vulnerability stems from insecure creation of temporary files, enabling a local attacker to perform a symlink attack and overwrite arbitrary files. The provided documents do not specify a patch version or remediation steps, and do not indicate whethe...

CVE-2014-5255

xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files. Note: A different vulnerability than CVE-2014-5254...

CVE-2018-5255

The Mlag agent in Arista EOS 4.19 before 4.19.4M and 4.20 before 4.20.2F allows remote attackers to cause a denial of service agent restart via crafted UDP packets...

CVE-2018-5255

The Mlag agent in Arista EOS 4.19 before 4.19.4M and 4.20 before 4.20.2F allows remote attackers to cause a denial of service agent restart via crafted UDP packets...

CVE-2018-5255

The CVE affects Arista EOS Mlag agent: in EOS 4.19 before 4.19.4M and 4.20 before 4.20.2F, remote attackers can trigger a DoS by sending crafted UDP packets, restarting the Mlag agent. A fix is available: EOS 4.19.4M or 4.20.2F or later, via patches (CVE-2018-5255 hotfixes CVE-2018-5255-4-19-hotf...