CVE-2020-5340

RSA Authentication Manager before 8.4 P10 is affected by a stored cross-site scripting (XSS) vulnerability in the Security Console. An authenticated, advanced-privilege Security Console administrator can inject arbitrary HTML/JavaScript via the Security Console web interface, and when other admin...

CVE-2012-5340

SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lexnumber function via a corrupt PDF file...

UBUNTU-CVE-2012-5340

SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lexnumber function via a corrupt PDF file...

CVE-2012-5340

CVE-2012-5340 affects SumatraPDF 2.1.1 and MuPDF 1.0, where a vulnerability in the lex_number() function can cause a Integer Overflow when processing a crafted PDF. The issue is confirmed across multiple sources (NVD/OSV Debian/Ubuntu/CVE records) and is triggered by corrupt PDF files. Exploitati...

CVE-2012-5340

SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lexnumber function via a corrupt PDF file...

CVE-2010-5340

creationtimestamp| type| source ---|---|--- 2019-10-11 14:36:37+00:00| seen| https://t.me/cibsecurity/7372...

CVE-2019-5340

CVE-2019-5340 affects Hewlett Packard Enterprise Intelligent Management Center (IMC) PLAT, earlier than 7.3 E0506P09. The connected advisories describe a remote code execution flaw via an actionSelectContent expression language injection in the IMC web interface (actionSelectContent.xhtml) that c...

SUSE SLES12 Security Update : php7 (SUSE-SU-2017:0534-1)

This update for php7 fixes the following security issues : - CVE-2016-7480: The SplObjectStorage unserialize implementation in ext/spl/splobserver.c in PHP did not verify that a key is an object, which allowed remote attackers to execute arbitrary code or cause a denial of service uninitialized...

CVE-2018-5340

An issue was discovered in Zoho ManageEngine Desktop Central 10.0.124 and 10.0.184: database access using a superuser account specifically, an account with permission to write to the filesystem via SQL queries...

CVE-2018-5340

CVE-2018-5340 affects Zoho ManageEngine Desktop Central versions 10.0.124 and 10.0.184. The issue is that a superuser account (with permission to write to the filesystem via SQL queries) can access the database and potentially perform write operations to the filesystem. The CNVD entry explicitly ...

CVE-2013-5340

...

CVE-2013-5340

CVE-2013-5340 is rejected/not used; the candidate was not associated with any vulnerability.

Amazon Linux AMI : php70 (ALAS-2017-812)

Integer overflow in gdio.c in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to have unspecified impact via vectors involving the number of horizontal and vertical chunks in an image. CVE-2016-10168 In all versions of PHP 7, during the unserialization process, resizing the...

Medium: php70

Issue Overview: Integer overflow in gdio.c in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to have unspecified impact via vectors involving the number of horizontal and vertical chunks in an image. CVE-2016-10168 In all versions of PHP 7, during the unserialization...

Ubuntu 16.04 LTS : PHP regression (USN-3211-2)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3211-2 advisory. USN-3211-1 fixed vulnerabilities in PHP by updating to the new 7.0.15 upstream release. PHP 7.0.15 introduced a regression when using MySQL with large blobs. This...

Ubuntu: Security Advisory (USN-3211-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for php7 (important)

This update for php7 fixes the following security issues: - CVE-2016-7480: The SplObjectStorage unserialize implementation in ext/spl/splobserver.c in PHP did not verify that a key is an object, which allowed remote attackers to execute arbitrary code or cause a denial of service uninitialized...

USN-3211-2: PHP regression

USN-3211-1 fixed vulnerabilities in PHP by updating to the new 7.0.15 upstream release. PHP 7.0.15 introduced a regression when using MySQL with large blobs. This update fixes the problem with a backported fix. Original advisory details: It was discovered that PHP incorrectly handled certain...

PHP zend_hash_destroy Uninitialized Pointer Code Execution (CVE-2017-5340)

An access-of-uninitialized-pointer vulnerability exists in PHP. A remote attacker can exploit this vulnerability by sending crafted serialized data to an affected PHP application. Successful exploitation could result in arbitrary code execution under the context of the target application...

Ubuntu 16.04 LTS : PHP vulnerabilities (USN-3211-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3211-1 advisory. It was discovered that PHP incorrectly handled certain invalid objects when unserializing data. A remote attacker could use this issue to cause PHP to...