Design/Logic Flaw

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Samsung Email Fixed in version 5.0.02.16. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

CVE-2018-10497

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Samsung Email Fixed in version 5.0.02.16. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

CVE-2018-10497

Samsung Email is affected by a local privilege-escalation vulnerability in the EML file handling. The flaw arises from insufficient validation of user-supplied data in EML parsing, enabling an attacker who can execute low-privileged code to run arbitrary JavaScript and escalate privileges to prot...

CVE-2018-5328

ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 allows access to various /UserManagement/ privileged modules without authenticating the user; an attacker can misuse these functionalities to perform unauthorized actions, as demonstrated by Edit User Details...

CVE-2018-5328

CVE-2018-5328 affects ZUUSE BEIMS ContractorWeb .NET 5.18.0.0. The vulnerability allows access to multiple /UserManagement/ privileged modules without user authentication, enabling an attacker to perform unauthorized actions (demonstrated by editing user details). The root cause is insufficient a...

CVE-2010-5328

include/linux/inittask.h in the Linux kernel before 2.6.35 does not prevent signals with a process group ID of zero from reaching the swapper process, which allows local users to cause a denial of service system crash by leveraging access to this process group...

UBUNTU-CVE-2010-5328

include/linux/inittask.h in the Linux kernel before 2.6.35 does not prevent signals with a process group ID of zero from reaching the swapper process, which allows local users to cause a denial of service system crash by leveraging access to this process group...

CVE-2010-5328

The CVE affects the Linux kernel, specifically signals targeting a process group ID of zero reaching the swapper due to a flaw in include/linux/init_task.h prior to 2.6.35. This allows a local user to trigger a denial of service (system crash). The vulnerability is caused by insufficient filterin...

CVE-2017-5328

The CVE-2017-5328 entry concerns Palo Alto Networks Terminal Server Agent. Connected sources confirm a spoofing vulnerability that allows an attacker to impersonate another authenticated user, affecting Terminal Server Agent versions up to 7.0.6 (and potentially 6.0 per advisory, before 7.0.7). T...

CVE-2016-5328

VMware Tools 9.x and 10.x before 10.1.0 on OS X, when System Integrity Protection SIP is enabled, allows local users to determine kernel memory addresses and bypass the kASLR protection mechanism via unspecified vectors...

CVE-2016-5328

VMware Tools on macOS (VMware Tools 9.x/10.x before 10.1.0) with SIP enabled is affected by an information-disclosure vulnerability that allows a local attacker to obtain kernel memory addresses and bypass kASLR via unspecified vectors. The issue is documented in CVE-2016-5328 and VMware’s VMSA-2...

VMware Tools 9.x / 10.x < 10.1.0 Kernel Memory Address Disclosure (VMSA-2016-0017) (Mac OS X)

The version of VMware Tools installed on the remote macOS or Mac OS X host is 9.x or 10.x prior to 10.1.0. It is, therefore, affected by an information disclosure vulnerability in the System Integrity Protection SIP feature. A local attacker can exploit this issue to obtain kernel memory addresse...

VMSA-2016-0017:VMware product updates address multiple information disclosure issues

VMSA-2016-0017 VMware product updates address multiple information disclosure issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2016-0017 VMware Security Advisory Severity: Moderate VMware Security Advisory Synopsis: VMware product updates address multiple information...

Flatpress 1.0.3 - Cross-Site Request Forgery Arbitrary File Upload

Flatpress 1.0.3 - Cross-Site Request Forgery Arbitrary File Upload FlatPress 1.0.3 CSRF Arbitrary File Upload RCE PoC function exec var command = document.getElementById"exec"; var url = "http://localhost/flatpress/fp-content/attachs/test.php?cmd="; var cmdexec...

FlatPress 1.0.3 Cross Site Request Forgery / Shell Upload

FlatPress 1.0.3 CSRF Arbitrary File Upload RCE PoC function exec var command = document.getElementById"exec"; var url = "http://localhost/flatpress/fp-content/attachs/test.php?cmd="; var cmdexec = command.v...

CVE-2014-5328

Buffer overflow in the Webserver component on the Huawei E5332 router before 21.344.27.00.1080 allows remote authenticated users to cause a denial of service reboot via a long parameter in an API service request message...

CVE-2014-5328

CVE-2014-5328 affects Huawei E5332 mobile routers. A buffer/overflow in the Webserver component allows remote authenticated users to reboot the device via a long parameter in an API service request message. Affected version shown in JVN notes 21.344.19.00.1080 and later; NVD lists impact as denia...

CVE-2013-5328

CVE-2013-5328 affects Adobe ColdFusion 10 before Update 12. It allows remote attackers to read arbitrary files via unspecified vectors. Public sources (NVD, Red Hat, and CISA) corroborate the fixed behavior via Adobe APSB13-27; remediation is to apply the hotfix/update (Update 12) to ColdFusion 1...

CVE-2012-5328

Mingle Forum plugin for WordPress (v1.0.32.1 and earlier than 1.0.33) contains multiple SQL injection vulnerabilities that allow remote authenticated users to execute arbitrary SQL commands via specific parameters: memberid or groupid in removemember, id in fs-admin/fs-admin.php, or edit_forum_id...

CVE-2008-5328

The CVE-2008-5328 entry concerns the ClearQuest Maintenance Tool in IBM Rational ClearQuest before version 7. It states that the product stores the database password in cleartext inside an object in a ClearQuest connection profile or export file, enabling remote authenticated users to retrieve th...