CVE-2013-5355

CSRF vulnerabilities in Sharetronix 3.1.1 allow remote admin hijack via requests that change config or create admin users. Technical details (affected components, root cause, fixes) are not provided in the connected documents; monitor for updates.

CVE-2012-5355

The CVE-2012-5355 issue affects xdiagnose prior to version 2.5.2ubuntu0.1. A symlink attack on a temporary file in /tmp allows local users to overwrite arbitrary files, due to a predictable temporary file name. Impact is limited to local privilege/domains where xdiagnose runs, enabling partial in...

llmnr-resolve NSE Script

Resolves a hostname by using the LLMNR Link-Local Multicast Name Resolution protocol. The script works by sending a LLMNR Standard Query containing the hostname to the 5355 UDP port on the 224.0.0.252 multicast address. It listens for any LLMNR responses that are sent to the local machine with a...

VMSA-2009-0014 : VMware ESX patches for DHCP, Service Console kernel, and JRE resolve multiple security issues

a. Service Console update for DHCP and third-party library update for DHCP client. DHCP is an Internet-standard protocol by which a computer can be connected to a local network, ask to be given configuration information, and receive from a server enough information to configure itself as a member...

SLES9: Security update for Sun Java

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: java2 java2-jre For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5040565 within...

SuSE 10 Security Update : Sun Java 1.4.2 (ZYPP Patch Number 5852)

The version update to SUN Java 1.4.2sr19 fixes numerous security issues such as privilege escalations. CVE-2008-5360 / CVE-2008-5359 / CVE-2008-5358 / CVE-2008-5357 / CVE-2008-5356 / CVE-2008-5344 / CVE-2008-5343 / CVE-2008-5342 / CVE-2008-5341 / CVE-2008-5340 / CVE-2008-5339 / CVE-2008-2086 /...

SUSE: Security Advisory for Sun Java (SUSE-SA:2009:001)

The remote host is missing updates announced in advisory SUSE-SA:2009:001. Copyright C 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

openSUSE 10 Security Update : java-1_6_0-sun (java-1_6_0-sun-5876)

The version update to SUN Java 1.6.011-b03 fixes numerous security issues such as privilege escalations. CVE-2008-5360, CVE-2008-5359, CVE-2008-5358, CVE-2008-5357, CVE-2008-5356, CVE-2008-5344, CVE-2008-5343, CVE-2008-5342, CVE-2008-5341, CVE-2008-5340, CVE-2008-5339, CVE-2008-2086, CVE-2008-535...

CVE-2008-5355

The "Java Update" feature for Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.218 and earlier does not verify the signature of the JRE that is downloaded, which allows remote attackers to execute arbitrary code v...

CVE-2008-5355

CVE-2008-5355 affects Sun JDK/JRE where the Java Update mechanism fails to verify the signature of the downloaded JRE. A remote attacker could exploit this via DNS-based man-in-the-middle to execute arbitrary code on affected systems. Affected products include JRE/JDK/JRE updates for Sun JDK/JRE ...

CVE-2008-0310

creationtimestamp| type| source ---|---|--- 2008-04-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5355...

CVE-2008-1343

creationtimestamp| type| source ---|---|--- 2008-04-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5355...

CVE-2007-5355

The CVE describes a design/logic issue in Microsoft WPAD for Internet Explorer 6/7 where, if a primary DNS suffix has three or more components, unqualified wpad queries can resolve to a host in a deeper second-level domain outside the configured DNS zone, enabling potential MITM by remote WPAD se...

CVE-2007-5355

The Web Proxy Auto-Discovery WPAD feature in Microsoft Internet Explorer 6 and 7, when a primary DNS suffix with three or more components is configured, resolves an unqualified wpad hostname in a second-level domain outside this configured DNS domain, which allows remote WPAD servers to conduct...

CVE-2006-5355

Technical details for CVE-2006-5355 are not publicly available in the provided documents; monitor for updates.

CVE-2006-5355

Unspecified vulnerability in Oracle Single Sign-On component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.1.0, Collaboration Suite 9.0.4.2 and 10.1.2, and Oracle E-Business Suite and Applications 11.5.10CU2 has unknown impact and remote attack vectors, aka Vuln SSO01...