CVE-2018-5308

PoDoFo 0.9.5 does not properly validate memcpy arguments in the PdfMemoryOutputStream::Write function base/PdfOutputStream.cpp. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file...

CVE-2016-5308

Summary: CVE-2016-5308 affects the Symantec Norton Security/SEP CIDS driver (IDSvix86) that processes Portable Executable files. The vulnerability is triggered by a specially crafted PE file, leading to memory corruption and a denial of service (system crash) via the IDSvix86 kernel driver. Affec...

Infor CRM 8.2.0.1136 - Multiple HTML Script Injection Vulnerabilities

Exploit for multiple platform in category web applications Infor CRM 8.2.0.1136 Multiple HTML Script Injection Vulnerabilities Vendor: Infor Product web page: http://www.infor.com Affected version: 8.2.0.1136 Summary: Infor® CRM, formerly Saleslogix, is an award-winning customer relationship...

Infor CRM 8.2.0.1136 - Multiple HTML Script Injection Vulnerabilities

Infor CRM 8.2.0.1136 Multiple HTML Script Injection Vulnerabilities Vendor: Infor Product web page: http://www.infor.com Affected version: 8.2.0.1136 Summary: Infor® CRM, formerly Saleslogix, is an award-winning customer relationship management CRM solution that provides a complete view of...

CVE-2010-5308

Affected product: GE Healthcare Optima MR360. Vulnerability: Emergency login screen allows access without authentication via arbitrary username, enabling physically proximate users to gain access. Root cause per sources is insufficient authentication on the HIPAA emergency login procedure. Impact...

Fedora Update for mingw-libtasn1 FEDORA-2015-5308

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-5308

CVE-2011-5308 affects the WordPress plugin cdnvote where the vulnerable file is cdnvote-post.php . The root cause is multiple SQL injection flaws that allow remote attackers to manipulate the database via the parameters cdnvote_post_id or cdnvote_point , in plugin versions before 0.4.2. This coul...

CVE-2014-5308

Summary (CVE-2014-5308) : In TestLink 1.9.11, there are multiple SQL injection vulnerabilities exploitable by an authenticated remote attacker . The confirmed vectors affect: (1) the name parameter of the Search action to lib/project/projectView.php, and (2) the id parameter to lib/events/eventin...

TestLink 1.9.11 - Multiple SQL Injection Vulnerabilities

Two SQL injection vulnerabilities have been found and confirmed within the software as an authenticated user. A successful attack could allow an authenticated attacker to access information such as usernames and password hashes that are stored in the database. The following URLs and parameters ha...

TestLink 1.9.11 - Multiple SQL Injections

TestLink 1.9.11 - Multiple SQL Injections Vulnerability title: Multiple SQL Injection Vulnerabilities in TestLink CVE: CVE-2014-5308 Vendor: Testlink Product: TestLink Affected version: 1.9.11 Fixed version: Fixed in SVN commit number 7a09973 Reported by: Jerzy Kramarz Details: Two SQL injection...

CVE-2014-5308

creationtimestamp| type| source ---|---|--- 2014-10-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34863...

TestLink 1.9.11 - Multiple SQL Injections

Vulnerability title: Multiple SQL Injection Vulnerabilities in TestLink CVE: CVE-2014-5308 Vendor: Testlink Product: TestLink Affected version: 1.9.11 Fixed version: Fixed in SVN commit number 7a09973 Reported by: Jerzy Kramarz Details: Two SQL injection vulnerabilities have been found and...

TestLink 1.9.11 SQL Injection

Vulnerability title: Multiple SQL Injection Vulnerabilities in TestLink CVE: CVE-2014-5308 Vendor: Testlink Product: TestLink Affected version: 1.9.11 Fixed version: Fixed in SVN commit number 7a09973 Reported by: Jerzy Kramarz Details: Two SQL injection vulnerabilities have been found and...

Fedora 19 : srm-1.2.13-1.fc19 (2014-5308)

Update to new upstream version 1.2.13 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

CVE-2013-5308

CVE-2013-5308 is a Cross-Site Scripting (XSS) vulnerability in the TYPO3 extension RealURL Management (realurlmanagement) version 0.3.4 and earlier. The connected TYPO3 security bulletin lists this extension as vulnerable and recommends upgrading; the bulletin notes that vulnerable extension vers...

CVE-2012-5308

Cross-site request forgery CSRF vulnerability in servlet/traveler in IBM Lotus Notes Traveler through 8.5.3.3 Interim Fix 1 allows remote attackers to hijack the authentication of arbitrary users for requests that create problem reports via a getReportProblem upload action...

CVE-2012-5308

Cross-site request forgery CSRF vulnerability in servlet/traveler in IBM Lotus Notes Traveler through 8.5.3.3 Interim Fix 1 allows remote attackers to hijack the authentication of arbitrary users for requests that create problem reports via a getReportProblem upload action...

CVE-2012-5308

The CVE-2012-5308 entry concerns IBM Lotus Notes Traveler (servlet/traveler) with a CSRF vulnerability that, through to version 8.5.3.3 Interim Fix 1, allows remote attackers to hijack the authentication of arbitrary users via requests that create problem reports using a getReportProblem upload a...

strongSwan 4.0.4 VPN Detection

Binary data 5308.prm...

CVE-2008-5308

The Simple Forum 3.1d module for LoveCMS 1.6.2 Final exposes a weak access control that lets remote attackers change the administrator password via a direct request to modules/simpleforum/admin/index.php. This CVE describes an access-persistence risk without detailing specific exploit vectors bey...