SUSE CVE-2017-5377

A memory corruption vulnerability in Skia that can occur when using transforms to make gradients, resulting in a potentially exploitable crash. This vulnerability affects Firefox 51...

Mozilla Firefox Security Advisory (MFSA2017-01) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

Dell OpenManage Server Administrator 9.4.0.0 File Read

Exploit Title: Dell OpenManage Server Administrator 9.4.0.0 - Arbitrary File Read Date: 4/27/2020 Exploit Author: Rhino Security Labs Version: :' exit This XML to imitate a Dell OMSA remote system comes from https://www.exploit-db.com/exploits/39909 Also check out...

Dell OpenManage Server Administrator 9.4.0.0 - Arbitrary File Read

Exploit Title: Dell OpenManage Server Administrator 9.4.0.0 - Arbitrary File Read Date: 4/27/2020 Exploit Author: Rhino Security Labs Version: :' exit This XML to imitate a Dell OMSA remote system comes from https://www.exploit-db.com/exploits/39909 Also check out...

Dell OpenManage Server Administrator 9.4.0.0 - Arbitrary File Read Exploit

Exploit Title: Dell OpenManage Server Administrator 9.4.0.0 - Arbitrary File Read Exploit Author: Rhino Security Labs Version: :' exit This XML to imitate a Dell OMSA remote system comes from https://www.exploit-db.com/exploits/39909 Also check out https://github.com/hantwister/FakeDellOM class...

CVE-2020-5377

creationtimestamp| type| source ---|---|--- 2021-04-05 19:01:12+00:00| published-proof-of-concept| https://t.me/techb0ltGenona/2559 2021-09-21 06:42:52+00:00| published-proof-of-concept| https://t.me/pwnwikizhchannel/76...

CVE-2020-5377: Dell OpenManage Server Administrator File Read

The post CVE-2020-5377: Dell OpenManage Server Administrator File Read appeared first on Rhino Security Labs...

CVE-2020-5377

Dell EMC OpenManage Server Administrator (OMSA) versions 9.4 and earlier are affected by path traversal vulnerabilities. An unauthenticated remote attacker can send crafted Web API requests with directory traversal sequences to gain file system access on the managed station (arbitrary file read)....

CVE-2019-5377

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-5377

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-5377

The CVE-2019-5377 entry concerns Hewlett Packard Enterprise Intelligent Management Center (IMC) PLAT, affected prior to 7.3 E0506P09. The connected documents confirm a remote code execution flaw due to an insecure handling of the sshConfig expression language, specifically abuse of the beanName p...

Elasticsearch ESA-2015-06

Elasticsearch versions prior to 1.6.1 are vulnerable to an attack that can result in remote code execution. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid119499; scriptversion"1.2"; scriptcvsdate"Date: 2019/11/01"; scriptcveid"CVE-2015-5377";...

Security Bulletin: Multiple security vulnerabilities in Elasticsearch might affect Process Federation Server in IBM Business Process Manager (BPM) - CVE-2015-5531, CVE-2015-5377

Summary IBM Process Federation Server is an optional component that is shipped with IBM Business Process Manager BPM V8.5.6.0. It allows the collection of task information of existing IBM Business Process Manager environments to provide a federated task list. IBM Process Federation Server uses th...

CVE-2017-5377

Concrete details found: CVE-2017-5377 is a memory–corruption vulnerability in Skia triggered when using transforms to create gradients, affecting Firefox versions earlier than 51.0.1. The underlying issue is a memory-safety defect in Skia that can cause a crash and potentially enable exploitation...

CVE-2014-5377

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/manageenginedeviceexpertusercreds.rb 2025-02-06 03:13:41+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23...

Type confusion

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2018-9943

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2018-9943

Foxit Reader 9.0.0.29935 is affected by a type-confusion vulnerability in the openList handling that enables remote code execution when a user visits a malicious page or opens a malicious file. Root cause: improper validation of user-supplied data leading to type confusion; attack context is the ...

Design/Logic Flaw

DISPUTED Elasticsearch before 1.6.1 allows remote attackers to execute arbitrary code via unspecified vectors involving the transport protocol. NOTE: ZDI appears to claim that CVE-2015-3253 and CVE-2015-5377 are the same vulnerability...

UBUNTU-CVE-2015-5377

DISPUTED Elasticsearch before 1.6.1 allows remote attackers to execute arbitrary code via unspecified vectors involving the transport protocol. NOTE: ZDI appears to claim that CVE-2015-3253 and CVE-2015-5377 are the same vulnerability...