63 matches found
CVE-2016-5329
creationtimestamp| type| source ---|---|--- 2026-07-26 07:02:19+00:00| seen| https://t.me/KaitNews/535 2026-07-27 00:01:56+00:00| seen| https://t.me/KaitNews/535 2026-08-06 01:00:06+00:00| seen| https://t.me/KaitNews/535 2026-08-07 00:59:27+00:00| seen| https://t.me/KaitNews/535...
MINI-F2W7-59VV-5329
Bulletin has no description...
CVE-2026-5329
creationtimestamp| type| source ---|---|--- 2026-04-09 19:23:14+00:00| seen| Telegram/Y2UpQC9zCL6PqNfAxsSoQJ7YUumR5oW0JI3RILB7SgtOVH4 2026-04-09 21:02:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj3per6g4y2s 2026-04-12 08:44:54+00:00| seen|...
Improper Validation of Specified Type of Input
Overview Affected versions of this package are vulnerable to Improper Validation of Specified Type of Input in the client monitoring message handler due to insufficient validation of the queue name supplied by the client. An attacker can execute arbitrary code on the server by sending a crafted...
CVE-2026-5329
Rapid7 Velociraptor versions prior to 0.76.2 contain an improper input validation vulnerability in the client monitoring message handler on the Velociraptor server primarily Linux that allows an authenticated remote attacker to write to arbitrary internal server queues via a crafted monitoring...
CVE-2025-5329
creationtimestamp| type| source ---|---|--- 2026-02-04 14:24:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me23bzb5rb27 2026-02-06 21:02:57+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3me7siivuhw2v...
CVE-2025-5329
CVE-2025-5329 — Concrete details from connected sources indicate a SQL Injection in Delta Course Automation (owned by Martcode Software Inc.). Root cause: improper neutralization of special elements used in an SQL command, allowing unauthorized database access. Affected: Delta Course Automation v...
CVE-2014-5329
GIGAPOD file servers Appliance model and Software model provide two web interfaces, 80/tcp and 443/tcp for user operation, and 8001/tcp for administrative operation. 8001/tcp is served by a version of Apache HTTP server containing a flaw in handling HTTP requests CVE-2011-3192, which may lead to ...
Linux Distros Unpatched Vulnerability : CVE-2010-5329
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The videousercopy function in drivers/media/video/v4l2-ioctl.c in the Linux kernel before 2.6.39 relies on the count value of a v4l2extcontrols data structure t...
RHEL 8 : firefox (RHSA-2024:5329)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:5329 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: Firefox:...
CVE-2024-5329 Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.109 - Authenticated (Contributor+) Blind SQL Injection via data[addonID] Parameter
The Unlimited Elements For Elementor Free Widgets, Addons, Templates plugin for WordPress is vulnerable to blind SQL Injection via the ‘dataaddonID’ parameter in all versions up to, and including, 1.5.109 due to insufficient escaping on the user supplied parameter and lack of sufficient preparati...
CVE-2024-5329 Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.109 - Authenticated (Contributor+) Blind SQL Injection via data[addonID] Parameter
The Unlimited Elements For Elementor Free Widgets, Addons, Templates plugin for WordPress is vulnerable to blind SQL Injection via the ‘dataaddonID’ parameter in all versions up to, and including, 1.5.109 due to insufficient escaping on the user supplied parameter and lack of sufficient preparati...
CVE-2023-5329 Field Logic DataCube4 Web API improper authentication
A vulnerability classified as problematic was found in Field Logic DataCube4 up to 20231001. This vulnerability affects unknown code of the file /api/ of the component Web API. The manipulation leads to improper authentication. The exploit has been disclosed to the public and may be used...
CVE-2023-5329
CVE-2023-5329 affects Field Logic DataCube4 Web API (endpoint /api/). The vulnerability arises from improper authentication in the Web API, enabling potential unauthorized access. Affected version: DataCube4 up to 20231001. The exploit has been disclosed publicly. CVSS 3.1 base score 7.5 ( HIGH )...
CVE-2014-5329
GIGAPOD file servers Appliance model and Software model provide two web interfaces, 80/tcp and 443/tcp for user operation, and 8001/tcp for administrative operation. 8001/tcp is served by a version of Apache HTTP server containing a flaw in handling HTTP requests CVE-2011-3192, which may lead to ...
CVE-2014-5329
CVE-2014-5329 leverages a flaw in Apache HTTP Server (CVE-2011-3192) on the 8001/tcp admin interface. The root cause is improper handling of Range headers, enabling a DoS condition. Public sightings reference an Apache Range DoS (e.g., Metasploit module) and multiple advisories (CentOS/CESA, Amaz...
CVE-2014-5329
GIGAPOD file servers Appliance model and Software model provide two web interfaces, 80/tcp and 443/tcp for user operation, and 8001/tcp for administrative operation. 8001/tcp is served by a version of Apache HTTP server containing a flaw in handling HTTP requests CVE-2011-3192, which may lead to ...
SUSE CVE-2010-5329
The videousercopy function in drivers/media/video/v4l2-ioctl.c in the Linux kernel before 2.6.39 relies on the count value of a v4l2extcontrols data structure to determine a kmalloc size, which might allow local users to cause a denial of service memory consumption via a large value...
Debian: Security Advisory (DSA-5329-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...