CVE-2020-5371

CVE-2020-5371 affects Dell EMC Isilon OneFS (versions 8.2.2 and earlier) and Dell EMC PowerScale (version 9.0.0). A file permissions weakness allows an attacker with network or local access to access restricted files. The vulnerability stems from insufficiently enforced file permissions, enabling...

CVE-2019-5371

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-5371

HPE Intelligent Management Center (IMC) PLAT before 7.3 E0506P09 is affected by a remote code execution vulnerability due to an expression-language injection in the addDeviceToView/beanName handling. The flaw allows an attacker to execute arbitrary code on vulnerable installations, potentially wi...

CVE-2019-5371

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2015-5371

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/solarwindsstoremanagerauthfilter.rb 2025-02-06 03:13:42+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23...

CVE-2018-9937

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Type confusion

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2018-9937

Foxit Reader 9.0.0.29935 is affected by a vulnerability in the XFA subform parsing that can lead to remote code execution via type confusion when a user opens a malicious page or file. The flaw arises from improper validation of user-supplied data in subform elements, allowing an attacker to run ...

CVE-2018-5371

diagping.cmd on D-Link DSL-2640U devices with firmware IM1.00 and ME1.00, and DSL-2540U devices with firmware ME1.00, allows authenticated remote attackers to execute arbitrary OS commands via shell metacharacters in the ipaddr field of an HTTP GET request...

CVE-2018-5371

The CVE affects D-Link DSL-2640U (firmware IM_1.00, ME_1.00) and DSL-2540U (firmware ME_1.00). The diag_ping.cmd vulnerability allows authenticated remote attackers to execute arbitrary OS commands via shell metacharacters in the ipaddr field of an HTTP GET request. This is a remote command execu...

CVE-2018-5371

diagping.cmd on D-Link DSL-2640U devices with firmware IM1.00 and ME1.00, and DSL-2540U devices with firmware ME1.00, allows authenticated remote attackers to execute arbitrary OS commands via shell metacharacters in the ipaddr field of an HTTP GET request...

CVE-2017-5371

CVE-2017-5371 affects SAP ASE OData Server (SAP ASE 16) and was disclosed as a Denial of Service vulnerability. The issue arises when processing crafted requests sent over the network to the OData service, which can crash the SAP ASE OData Server process. Public advisories (ERPScan/SAP Security N...

CVE-2017-5371

Odata Server in SAP Adaptive Server Enterprise ASE 16 allows remote attackers to cause a denial of service process crash via a series of crafted requests, aka SAP Security Note 2330422...

SAP ASE ODATA SERVER denial of service vulnerability(CVE-2017-5371)

No description provided by source...

SAP ASE ODATA Server - Denial of Service

Application: SAP ASE Versions Affected: SAP ASE 16 Vendor URL: SAP Bugs: Denial of Service Reported: 01.02.2016 Vendor response: 02.02.2016 Date of Public Advisory: 12.10.2016 Reference: SAP Security Note 2330422 Author: Vahagn Vardanyan ERPScan VULNERABILITY INFORMATION Class: Denial of Service...

CVE-2015-5371

CVE-2015-5371 concerns SolarWinds Storage Manager. The vulnerability lies in the AuthenticationFilter class, enabling an unauthenticated remote attacker to upload arbitrary scripts via unspecified vectors and execute code with SYSTEM privileges. Public references include ZDI-15-275 and related ad...

Debian DLA-263-1 : ruby1.9.1 security update

Two vulnerabilities were identified in the Ruby language interpreter, version 1.9.1. CVE-2012-5371 Jean-Philippe Aumasson identified that Ruby computed hash values without properly restricting the ability to trigger hash collisions predictably, allowing context-dependent attackers to cause a deni...

DLA-263-1 ruby1.9.1 - security update

Bulletin has no description...

openSUSE Security Update : ruby19 (openSUSE-SU-2013:0376-1)

ruby19 was updated to fix various bugs and security issues: Update to 1.9.3 p385 bnc802406 - XSS exploit of RDoc documentation generated by rdoc CVE-2013-0256 - for other changes see /usr/share/doc/packages/ruby19/Changelog Update to 1.9.3 p327 bnc789983 - CVE-2012-5371 and plenty of other fixes...

CVE-2013-5371

CVE-2013-5371 affects IBM Tivoli Storage Manager Client on Windows (TSM 6.3.1.x and 6.4.0) where ReFS file permissions are not preserved during backup/restore, allowing local users to bypass access restrictions via standard filesystem operations. Connected sources specify affected versions as 6.3...