PT-2015-1357

Name of the Vulnerable Software and Affected Versions AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442, 5343, 5342, 5341, and 5021 DSL modems version 1.0.2.0 and earlier Description The issue is caused by a stack-based buffer overflow in the firmware of the affected devices, allowin...

CVE-2015-2797: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442, 5343, 5342, 5341, and 5021 DSL modems with firmware 1.0.2.0 and earlier allows remote attackers to execute arbitrary code via a long string in the redirect parameter to cgi-bin/login...

CVE-2013-5443

CVE-2013-5443 is a CSRF vulnerability in IBM Cognos Express that can allow an attacker to hijack the authentication of an authenticated user. Affected versions include Cognos Express 9.0, 9.5, 10.1 (all before their IFIX 2) and 10.2.1 before FP1. The IBM Security Bulletin lists remediation by app...

Oracle Server Suspicious Command Detection

Binary data 5443.prm...

Oracle Secure Backup Multiple Denial Of Service vulnerabilities

Oracle Secure Backup Multiple Denial Of Service vulnerabilities 2009.January.13 Fortinet's FortiGuard Global Security Research Team Discovers multiple vulnerabilities in Oracle Secure Backup Summary: ======== Multiple Denial Of Service vulnerabilities exist Oracle Secure Backup 10.2.0.2 through...

CVE-2008-5443

CVE-2008-5443 affects Oracle Secure Backup 10.2.0.2. It is a Denial of Service vulnerability triggered by malformed NDMP mover get state (NDMP_MOVER_GET_STATE) packets, allowing remote attackers to crash the service and impact availability. Related advisories (Fortinet/FGA-2009-02 and SecurityVUL...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE-2008-5442 and CVE-2008-5443...

CVE-2007-5443

CVE-2007-5443 describes multiple cross-site scripting (XSS) vulnerabilities in CMS Made Simple 1.1.3.1. The description specifies remote attackers can inject arbitrary script or HTML via vectors related to (1) the anchor tag and (2) listtags, but the exact technical vectors are not detailed in th...

CVE-2006-5443

The CVE-2006-5443 entry concerns XIAO Gang’s WWW Interactive Mathematics Server (WIMS) prior to 3.60. A remote attacker could modify unspecified data via unspecified vectors related to "variable rights", with impact described as partial integrity loss. The connected sources confirm product and af...