Sonatype Nexus Repository Manager OSS/Pro 2.14.5 / 3.7.1 XSS

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple Cross-Site Scripting Vulnerabilities product: Sonatype Nexus Repository Manager OSS/Pro vulnerable version: =2.14.5, =3.7.1 fixed version: 2.14.6, 3.8.0 CVE...

CVE-2016-5306

CVE-2016-5306 affects Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5. The vulnerability is an information disclosure caused by failure to enable HTTP Strict Transport Security on port 8445, enabling remote observers to sniff HTTP traffic and obtain sensitive data. Affected produc...

Symantec Endpoint Protection Multiple Security Issues

SUMMARY Symantec Endpoint Protection SEP was susceptible to a number of security vulnerabilities potentially resulting in a user being able to leverage elevated privilege or access to unauthorized files on the management console. Additionally, a race condition in the device control of a SEP clien...

Fedora 23 : openstack-ironic-discoverd-1.1.1-1.fc23 (2015-16ecacb90b)

Release 1.1.1, security fix for CVE-2015-5306 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Important: Red Hat Security Advisory: openstack-ironic-discoverd security update

Updated openstack-ironic-discoverd packages that fix one security issue are now available for Red Hat Enterprise Linux OpenStack Platform 6.0. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

CVE-2015-5306

OpenStack Ironic Inspector aka ironic-inspector or ironic-discoverd, when debug mode is enabled, might allow remote attackers to access the Flask console and execute arbitrary Python code by triggering an error...

CVE-2015-5306

CVE-2015-5306 affects OpenStack Ironic Inspector (ironic-inspector/ironic-discoverd). When Flask debug mode is enabled, an error can expose the Flask debug console, potentially allowing a remote attacker to execute arbitrary Python code. The vulnerability is documented in OSV and Red Hat advisori...

Fedora Update for openstack-ironic-discoverd FEDORA-2015-5062

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important: Red Hat Security Advisory: openstack-ironic-discoverd security update

Updated openstack-ironic-discoverd packages that fix one security issue are now available for Red Hat Enterprise Linux OpenStack Platform 7.0. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

CVE-2010-5306

This CVE concerns GE Healthcare Optima imaging systems (Optima 520/540/640/680) with default or hard-coded credentials, enabling remote authentication bypass. The ICS-CERT advisory (ICSMA-18-037-02) confirms multiple GE products affected; exploitation could allow an attacker to bypass authenticat...

CVE-2011-5306

CVE-2011-5306 describes a Cross-Site Request Forgery (CSRF) vulnerability in CosmoShop ePRO 10.05.00. The flaw affects the CGI component cgi-bin/admin/setup_edit.cgi and enables remote attackers to hijack the authentication of administrators for requests that modify settings via a setup action. T...

CVE-2013-5306

CVE-2013-5306: SQL injection in the TYPO3 Browser extension (Browser - TYPO3 without PHP (browser)) for TYPO3 4.5.4 and earlier. Root cause reported as SQL injection via unspecified vectors in this extension before version 4.5.5. Impact is remote attacker could execute arbitrary SQL commands. TYP...

CVE-2012-5306

CVE-2012-5306 affects the D-Link DCS-5605 PTZ IP Network Camera via the DcsCliCtrl.dll ActiveX control. The vulnerability is a stack-based buffer overflow in the SelectDirectory method that can be triggered by a long string argument, leading to a remote denial of service (crash) and potentially a...

CVE-2012-5306

creationtimestamp| type| source ---|---|--- 2012-03-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18673...

CVE-2008-5306

An SQL injection vulnerability exists in PG Real Estate Solution: admin/index.php accepts the login_lg (username) parameter in a way that allows remote attackers to execute arbitrary SQL commands. The issue is tied to the login handling code and carries a CVSS v2 base score of 7.5 (HIGH) with par...

CVE-2008-5306

creationtimestamp| type| source ---|---|--- 2008-11-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7200...

CVE-2007-5306

ELSEIF CMS Beta 0.6 is affected. The vulnerability allows remote attackers to obtain sensitive information (the full file path) via unspecified vectors to users/votesresultats.php. The available sources state the affected software and the exposure but do not specify the root cause details, affect...