105 matches found
CVE-2026-5334
creationtimestamp| type| source ---|---|--- 2026-04-02 15:21:36+00:00| seen| Telegram/c85hrsWNyFYwFes4s7T57trjOQm7U5y5MEbFlOtoT8A7NA 2026-04-06 21:40:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3miua3etqtn2r...
CVE-2026-5334 itsourcecode Online Enrollment System Parameter index.php sql injection
A weakness has been identified in itsourcecode Online Enrollment System 1.0. Impacted is an unknown function of the file /enrollment/index.php?view=edit&id=3 of the component Parameter Handler. This manipulation of the argument deptid causes sql injection. The attack is possible to be carried out...
Mozilla Firefox < 2.0.0.8
The version of Firefox installed on the remote macOS or Mac OS X host is prior to 2.0.0.8. It is, therefore, affected by a vulnerability as referenced in the mfsa2007-33 advisory. - Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 can hide the window's titlebar when displaying XUL markup...
CVE-2025-5334
Exposure of private personal information to an unauthorized actor in the user vaults component of Devolutions Remote Desktop Manager allows an authenticated user to gain unauthorized access to private personal information. Under specific circumstances, entries may be unintentionally moved from us...
CVE-2025-5334
creationtimestamp| type| source ---|---|--- 2025-05-29 15:13:53+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqcyxic7kcn2 2025-05-29 18:19:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqddf72a5f27...
CVE-2025-5334
Exposure of private personal information to an unauthorized actor in the user vaults component of Devolutions Remote Desktop Manager allows an authenticated user to gain unauthorized access to private personal information. Under specific circumstances, entries may be unintentionally moved from us...
CVE-2025-5334
Exposure of private personal information to an unauthorized actor in the user vaults component of Devolutions Remote Desktop Manager allows an authenticated user to gain unauthorized access to private personal information. Under specific circumstances, entries may be unintentionally moved from us...
Linux Distros Unpatched Vulnerability : CVE-2018-5334
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the IxVeriWave file parser could crash. This was addressed in wiretap/vwr.c by correcting the signature timesta...
RHEL 9 : .NET 8.0 (RHSA-2024:5334)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:5334 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. N...
Oracle Linux 9 : .NET / 8.0 (ELSA-2024-5334)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-5334 advisory. 8.0.108-1.0.1 - Add support for Oracle Linux 8.0.108-1 - Update to .NET SDK 8.0.108 and Runtime 8.0.8 - Resolves: RHEL-52389 8.0.107-2 - Fix ownership of some...
CVE-2024-5334
A local file read vulnerability exists in the stitionai/devika repository, affecting the latest version. The vulnerability is due to improper handling of the 'snapshotpath' parameter in the '/api/get-browser-snapshot' endpoint. An attacker can exploit this vulnerability by crafting a request with...
CVE-2024-5334 Local File Read in stitionai/devika
A local file read vulnerability exists in the stitionai/devika repository, affecting the latest version. The vulnerability is due to improper handling of the 'snapshotpath' parameter in the '/api/get-browser-snapshot' endpoint. An attacker can exploit this vulnerability by crafting a request with...
CVE-2024-5334 Local File Read in stitionai/devika
A local file read vulnerability exists in the stitionai/devika repository, affecting the latest version. The vulnerability is due to improper handling of the 'snapshotpath' parameter in the '/api/get-browser-snapshot' endpoint. An attacker can exploit this vulnerability by crafting a request with...
RHEL 8 : wireshark (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - wireshark: free operation on an uninitialized memory address in wiretap/netmon.c CVE-2018-6836 - In...
CVE-2023-5334
creationtimestamp| type| source ---|---|--- 2023-10-03 07:40:52+00:00| seen| https://t.me/cibsecurity/71451...
CVE-2023-5334
The CVE-2023-5334 in WP Responsive header image slider (WordPress) is a Stored XSS in the sp_responsiveslider shortcode affecting versions up to 3.2.1. Authenticated attackers with contributor+ can inject scripts that execute on page load. Multiple sources confirm the vulnerability; patch status ...
WordPress WP Responsive header image slide Plugin <= 3.2.1 is vulnerable to Cross Site Scripting (XSS)
Software WP Responsive header image slide Type Plugin Vulnerable versions = 3.2.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5334 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 015e84c4cbe9 Credits Lana Code...
K31336596: GnuTLS vulnerability CVE-2017-5334
Security Advisory Description Double free vulnerability in the gnutlsx509extimportproxy function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have unspecified impact via crafted policy language information in an X.509 certificate with a Proxy Certificate Information...
SUSE CVE-2018-5334
In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the IxVeriWave file parser could crash. This was addressed in wiretap/vwr.c by correcting the signature timestamp bounds checks...
Ubuntu 16.04 ESM : man-db vulnerability (USN-5334-1)
The remote Ubuntu 16.04 ESM host has a package installed that is affected by a vulnerability as referenced in the USN-5334-1 advisory. It was discovered that man-db incorrectly handled permission changing operations in its daily cron job, and was therefore affected by a race condition. An attacke...