CVE-2013-5286

Rejected reason: This candidate is unused by its CNA...

SUSE CVE-2015-5286

OpenStack Image Service Glance before 2014.2.4 juno and 2015.1.x before 2015.1.2 kilo allows remote authenticated users to bypass the storage quota and cause a denial of service disk consumption by deleting images that are being uploaded using a token that expires during the process. NOTE: this...

Ubuntu 20.04 LTS : cryptsetup vulnerability (USN-5286-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5286-1 advisory. Milan Broz discovered that cryptsetup incorrectly handled LUKS2 reencryption recovery. An attacker with physical access to modify the encrypted device header may...

Security Bulletin: OpenStack vulnerabilities affect IBM SmartCloud Entry (CVE-2015-7713, CVE-2015-5286)

Summary IBM SmartCloud Entry is vulnerable to several OpenStack vulnerablities. An attacker can exploit these velnerabilities to launch further attacks on the system or to exhaust all available resources. Vulnerability Details CVEID: CVE-2015-7713 DESCRIPTION: OpenStack Nova could provide weaker...

CVE-2020-5286

In PrestaShop between versions 1.7.4.0 and 1.7.6.5, there is a reflected XSS when uploading a wrong file. The problem is fixed in 1.7.6.5...

CVE-2020-5286 Reflected XSS related in import page in PrestaShop

In PrestaShop between versions 1.7.4.0 and 1.7.6.5, there is a reflected XSS when uploading a wrong file. The problem is fixed in 1.7.6.5...

CVE-2020-5286

CVE-2020-5286 affects PrestaShop versions 1.7.4.0 through 1.7.6.5, with a reflected XSS in the import page when uploading a malformed file. The issue is fixed in 1.7.6.5; affected users should upgrade to 1.7.6.5 or later to remediate.

CVE-2019-5286

CVE-2019-5286 is a reflected XSS vulnerability in Huawei HedEx/HedEx Lite prior to V200R006C00SPC007. Attackers can lure users to click malicious links to trigger client-side script execution. Affected: HedEx Lite versions earlier than V200R006C00SPC007; the Huawei PSIRT advisory HWPSIRT-2018-121...

Security Advisory - XSS Vulnerability in Huawei HedEx products

There is a reflection XSS vulnerability in the HedEx products. Remote attackers send malicious links to users and trick users to click. Successfully exploit cloud allow the attacker to launch XSS attacks. Vulnerability ID: HWPSIRT-2018-12124 This vulnerability has been assigned a Common...

CVE-2018-5286

The WordPress GD Rating System plugin version 2.3 is affected by an XSS vulnerability in the gd-rating-system-about page, exploitable via the wp-admin/admin.php parameter. The CVE notes a cross-site scripting issue with I=P and Gained impact mainly on integrity, with no explicit exploit details p...

Ubuntu 14.04 LTS : OpenStack Glance vulnerabilities (USN-3446-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3446-1 advisory. Hemanth Makkapati discovered that OpenStack Glance incorrectly handled access restrictions. A remote authenticated user could use this issue to change th...

USN-3446-1: OpenStack Glance vulnerabilities

Hemanth Makkapati discovered that OpenStack Glance incorrectly handled access restrictions. A remote authenticated user could use this issue to change the status of images, contrary to access restrictions. CVE-2015-5251 Mike Fedosin and Alexei Galkin discovered that OpenStack Glance incorrectly...

ichacha.net XSS vulnerability

Vulnerable URL: http://www.ichacha.net/hanban.aspx?image=%B2%E9%B4%CA=en=aaaaa%22+foo%3Dbar+autofocus%3Dx+bad%3D%22%3Eaa%22%3E%3C%2Ftitle%3E%3C%2Fscript%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 08.10.2017 Vulnerability type...

OpenMRS 2.3 (1.11.4) Local File Disclosure

OpenMRS 2.3 1.11.4 Local File Disclosure Vulnerability Vendor: OpenMRS Inc. Product web page: http://www.openmrs.org Affected version: OpenMRS 2.3, 2.2, 2.1, 2.0 Platform 1.11.4 Build 6ebcaf, 1.11.2 and 1.10.0 OpenMRS-TB System OpenMRS 1.9.7 Build 60bd9b Summary: OpenMRS is an application which...

CVE-2015-5286

OpenStack Image Service Glance before 2014.2.4 juno and 2015.1.x before 2015.1.2 kilo allows remote authenticated users to bypass the storage quota and cause a denial of service disk consumption by deleting images that are being uploaded using a token that expires during the process. NOTE: this...

CVE-2015-5286

OpenStack Image Service (Glance) is vulnerable in versions prior to 2014.2.4 (juno) and 2015.1.x prior to 2015.1.2 (kilo). A remote authenticated user can bypass storage quotas and cause a denial of service by deleting images that are being uploaded with a token that expires during the process. R...

Moderate: Red Hat Security Advisory: openstack-glance security update

Updated openstack-glance packages that fix two security issues are now available for Red Hat Enterprise Linux OpenStack Platform 5.0, 6.0, and 7.0. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give...

CVE-2014-5286

The CVE-2014-5286 advisory applies to TIBCO ActiveMatrix components: Policy Agent 3.x before 3.1.2, Policy Manager 3.x before 3.1.2, and Management Agent for WCF/WebSphere before 1.2.1. The issue is a privilege-escalation vulnerability in the Authentication Module that could allow remote attacker...

TIBCO Security Advisory: February 18, 2015 - TIBCO ActiveMatrix® PolicyManager

TIBCO ActiveMatrix® Policy Manager/Agentvulnerabilities Original release date: February 18, 2015 Last revised: -- CVE-2014-5286 Source: TIBCO SoftwareInc. TIBCO ActiveMatrix Policy Manager/Agent vulnerabilities Original release date: February 18, 2015 Last revised: -- Source: TIBCO Software Inc...

CVE-2011-5286

SQL injection vulnerability in social-slider-2/ajax.php in the Social Slider plugin before 7.4.2 for WordPress allows remote attackers to execute arbitrary SQL commands via the rA array parameter...