219 matches found
GLSA-201412-01 : QEMU: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201412-01 QEMU: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in QEMU. Please review the CVE identifiers referenced below for details. Impact : A context-dependent attacker could cause a Denial of Service...
CVE-2014-5388
Off-by-one error in the pciread function in the ACPI PCI hotplug interface hw/acpi/pcihp.c in QEMU allows local guest users to obtain sensitive information and have other unspecified impact related to a crafted PCI device that triggers memory corruption...
CVE-2014-5388
CVE-2014-5388 : In QEMU, an off-by-one error in the pci_read function of the ACPI PCI hotplug interface (hw/acpi/pcihp.c) can allow a local guest user to obtain sensitive information and trigger memory corruption. Connected advisories confirm public fixes in vendor updates (e.g., SUSE-SU-2016-278...
Ubuntu 14.04 LTS : QEMU vulnerabilities (USN-2409-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2409-1 advisory. Laszlo Ersek discovered that QEMU incorrectly handled memory in the vga device. A malicious guest could possibly use this issue to read arbitrary host...
Fedora 21 : qemu-2.1.1-1.fc21 (2014-10761)
Rebased to version 2.1.1 - CVE-2014-5388: out of bounds memory access bz 1132962, bz 1132956 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...
White Label CMS 1.5 - CSRF & Persistent XSS
No description provided by source. Exploit Title: White Label CMS v 1.5 CSRF w/ persistent XSS Date: 21/10/2012 Exploit Author: pcsjj Vendor Homepage: http://www.videousermanuals.com/white-label-cms/ Version: 1.5 Software Link: http://plugins.svn.wordpress.org/white-label-cms/branches/ Downloads:...
CVE-2013-5388
The vulnerability CVE-2013-5388 affects IBM Lotus Domino iNotes (versions: 8.5.3 before FP5 IF2 and 9.0 before IF5). It is a cross-site scripting (XSS) flaw in the iNotes web interface allowing remote attackers to inject arbitrary script/HTML via unspecified vectors. Underlying cause is an XSS is...
CVE-2012-5388
CVE-2012-5388 is an XSS vulnerability in the White Label CMS plugin for WordPress (wlcms-plugin.php) version 1.5. It allows remote authenticated administrators to inject arbitrary web script or HTML via the wlcms_o_developer_name parameter during a save action to wp-admin/admin.php. This is relat...
White Label CMS 1.5 Cross Site Request Forgery / Cross Site Scripting
Exploit Title: White Label CMS v 1.5 CSRF w/ persistent XSS Date: 21/10/2012 Exploit Author: pcsjj Vendor Homepage: http://www.videousermanuals.com/white-label-cms/ Version: 1.5 Software Link: http://plugins.svn.wordpress.org/white-label-cms/branches/ Downloads: 110,313 CVE : CVE-2012-5387 CSRF,...
CVE-2012-5388
creationtimestamp| type| source ---|---|--- 2012-10-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/22156...
White Label CMS v 1.5 CSRF / Persistent XSS
CVE : CVE-2012-5387 CSRF, CVE-2012-5388 XSS Exploit Title: White Label CMS v 1.5 CSRF w/ persistent XSS Date: 21/10/2012 Exploit Author: pcsjj Vendor Homepage: http://www.videousermanuals.com/white-label-cms/ Version: 1.5 Software Link: http://plugins.svn.wordpress.org/white-label-cms/branches/...
Microsoft SQL Server Suspicious Command Detection
Binary data 5388.prm...
Immunity Canvas: WEBDESKTOP_INCLUDE
Name| webdesktopinclude ---|--- CVE| CVE-2007-5388 Exploit Pack| CANVAS Description| webDesktop remote file include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: webDesktop CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5388 CVE Name: CVE-2007-5388...
CVE-2007-5388
CVE-2007-5388 affects WebDesktop 0.1 and describes PHP remote file inclusion vulnerabilities that allow an attacker to execute arbitrary PHP code by passing a URL to the app parameter (apps/apps.php) or the wsk parameter (wsk/wsk.php). The underlying cause is a remote file inclusion flaw in these...
Sql injection
SQL injection vulnerability in news.php in webSPELL 4.01.02, when registerglobals is enabled, allows remote attackers to execute arbitrary SQL commands via the showonly parameter to index.php, a different vector than CVE-2006-5388...
CVE-2006-5388
SQL injection vulnerability in index.php in WebSPELL 4.01.01 and earlier allows remote attackers to execute arbitrary SQL commands via the getsquad parameter, a different vector than CVE-2006-4783...
CVE-2006-5388
Technical details about CVE-2006-5388 are not provided in the connected documents. The initial description mentions a SQL injection in WebSPELL 4.01.01 and earlier via the getsquad parameter, but no further specifics are supplied here. Monitor for updates.
