104 matches found
CVE-2020-5432
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2020. Notes: none...
shuvodas.tk Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1172782 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Huawei EulerOS: Security Advisory for firefox (EulerOS-SA-2017-1092)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
simple-mqtt (1.0.0) potentially affected by CVE-2019-5432 via mqtt-packet (4.1.1)
mqtt-packet NPM version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on mqtt-packet and may be impacted: - simple-mqtt 1.0.0 Source cves: CVE-2019-5432 Source advisory: OSV:GHSA-WV67-9JQ7-8R69...
iopa-mqtt (>=0.2.0, <=1.3.3), iopa-mqtt-packet (>=0.2.16, <=1.3.7) +2 more potentially affected by CVE-2019-5432 via mqtt-packet (>=3.2.0, <=3.4.3)
mqtt-packet NPM version =3.2.0, =0.2.0, =0.2.16, =1.0.0, =1.0.1 - mqtt-stack 0.0.2 Source cves: CVE-2019-5432 Source advisory: OSV:GHSA-WV67-9JQ7-8R69...
mqtt-super (1.0.0) potentially affected by CVE-2019-5432 via mqtt-packet (6.0.0)
mqtt-packet NPM version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on mqtt-packet and may be impacted: - mqtt-super 1.0.0 Source cves: CVE-2019-5432 Source advisory: OSV:GHSA-WV67-9JQ7-8R69...
CVE-2019-5432
The CVE-2019-5432 entry concerns a malformed MQTT Subscribe packet that crashes MQTT Brokers when processed by the mqtt-packet library/minor versions below 3.5.1, 4.0.0–4.1.3, 5.0.0–5.6.1, and 6.0.0–6.1.2. The vulnerability arises during decoding, affecting MQTT Brokers that rely on these mqtt-pa...
iopa-mqtt (>=0.2.0, <=1.3.3), iopa-mqtt-packet (>=0.2.16, <=1.3.7) +2 more potentially affected by CVE-2019-5432 via mqtt-packet (>=3.2.0, <=3.4.3)
mqtt-packet NPM version =3.2.0, =0.2.0, =0.2.16, =1.0.0, =1.0.1 - mqtt-stack 0.0.2 Source cves: CVE-2019-5432 Source advisory: SNYK:JS-MQTTPACKET-174531...
simple-mqtt (1.0.0) potentially affected by CVE-2019-5432 via mqtt-packet (4.1.1)
mqtt-packet NPM version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on mqtt-packet and may be impacted: - simple-mqtt 1.0.0 Source cves: CVE-2019-5432 Source advisory: SNYK:JS-MQTTPACKET-174531...
CVE-2014-5432
creationtimestamp| type| source ---|---|--- 2019-03-26 19:32:09+00:00| seen| https://t.me/cibsecurity/3361...
CVE-2014-5432
Baxter SIGMA Spectrum Infusion System version 6.05 model 35700BAX with wireless battery module WBM version 16 is remotely accessible via Port 22/SSH without authentication. A remote attacker may be able to make unauthorized configuration changes to the WBM, as well as issue commands to access...
CVE-2014-5432
CVE-2014-5432 affects Baxter SIGMA Spectrum Infusion System v6.05 (model 35700BAX) with Wireless Battery Module (WBM) v16. The root cause includes unauthenticated remote SSH access (Port 22) and related credential exposure. Consequences: remote attacker could modify WBM configuration and retrieve...
CVE-2018-5432
The TIBCO Administrator server component of of TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition, and TIBCO Administrator - Enterprise Edition for z/Linux contains multiple vulnerabilities wherein a malicious user could theoretically perform cross-site scripting XSS attacks by way of...
CVE-2018-5432
The CVE-2018-5432 issue affects TIBCO Administrator - Enterprise Edition and TIBCO Administrator - Enterprise Edition for z/Linux. A cross-site scripting (XSS) vulnerability exists in the TIBCO Administrator server component, exploitable via manipulation of artifacts prior to uploading. Affected ...
DEBIAN-CVE-2017-5432
A use-after-free vulnerability occurs during certain text input selection resulting in a potentially exploitable crash. This vulnerability affects Thunderbird 52.1, Firefox ESR 45.9, Firefox ESR 52.1, and Firefox 53...
CVE-2017-5432
A use-after-free vulnerability occurs during certain text input selection resulting in a potentially exploitable crash. This vulnerability affects Thunderbird 52.1, Firefox ESR 45.9, Firefox ESR 52.1, and Firefox 53...
CVE-2017-5432
CVE-2017-5432 is a use-after-free in Firefox < 53 that can trigger a potentially exploitable crash during certain text-input selection. The vulnerability also affects related Mozilla products in older ESR/thunderbird branches (e.g., Thunderbird < 52.1; ESR
CVE-2017-5432
A use-after-free vulnerability occurs during certain text input selection resulting in a potentially exploitable crash. This vulnerability affects Thunderbird 52.1, Firefox ESR 45.9, Firefox ESR 52.1, and Firefox 53...
TIBCO Security Advisory: June 12, 2018 - TIBCO Administrator - Enterprise Edition -2018-5432
TIBCO Administrator - Enterprise Edition Cross-Site Scripting Vulnerability Original release date: June 12,2018 Last revised: -- CVE-2018-5432 Source: TIBCO Software Inc. TIBCO Administrator - Enterprise Edition Cross-Site Scripting Vulnerability Original release date: June 12, 2018 Last revised:...