CVE-2015-5447

Cross-site scripting XSS vulnerability in HP StoreOnce Backup system software before 3.13.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-5447

HP StoreOnce Backup System Software vulnerability CVE-2015-5447: a cross-site scripting (XSS) flaw exists in product versions before 3.13.1. The issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Connected sources reiterate XSS and, in CNVD, no...

CVE-2014-5447

Zarafa WebAccess 7.1.10 and WebApp 1.6 beta uses weak permissions 644 for config.php, which allows local users to obtain sensitive information by reading the PHP session files. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-0103...

CVE-2014-5447

Technical details for CVE-2014-5447 are not publicly available in the provided documents. No concrete exploit vectors or affected versions are disclosed here; monitor for updates.

Fedora Update for zarafa FEDORA-2014-9768

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 19 : zarafa-7.1.10-4.fc19 (2014-9768)

Fixed multiple incorrect default permissions CVE-2014-5447, CVE-2014-5448 and CVE-2014-5449 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora Update for zarafa FEDORA-2014-9754

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 20 : zarafa-7.1.10-4.fc20 (2014-9754)

Fixed multiple incorrect default permissions CVE-2014-5447, CVE-2014-5448 and CVE-2014-5449 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

IBM Forms Viewer - Unicode Buffer Overflow

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rexml/document' class Metasploit3 Msf::Exploit::Remote Rank = NormalRanking include REXML include...

IBM Forms Viewer XFDL Form Processing Stack Buffer Overflow (CVE-2013-5447)

A stack buffer overflow vulnerability exists in IBM Forms Viewer. The vulnerability is due to an error when processing XFDL forms and can be exploited to cause a stack-based buffer overflow. A remote attacker can exploit this vulnerability by enticing a user to download and process a specially...

CVE-2013-5447

creationtimestamp| type| source ---|---|--- 2014-01-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/30789 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/ibmformsviewerfontname.rb 2025-02-06...

IBM Forms Viewer - Unicode Buffer Overflow (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rexml/document' class Metasploit3 'IBM Forms Viewer Unicode Buffer Overflow', 'Description' = %q This module exploits a stack-based buffer...

IBM Forms Viewer Unicode Buffer Overflow

This Metasploit module exploits a stack-based buffer overflow in IBM Forms Viewer. The vulnerability is due to a dangerous usage of strcpy-like function, and occurs while parsing malformed XFDL files, with a long fontname value. This Metasploit module has been tested successfully on IBM Forms...

CVE-2013-5447

The CVE-2013-5447 issue is a stack-based buffer overflow in IBM Forms Viewer (4.0.x prior to 4.0.0.3 and 8.x prior to 8.0.1.1) triggered by XFDL forms with a long fontname value. The IBM security bulletin confirms remote code execution could occur if a crafted XFDL form is opened, affecting IBM F...

IBM Forms Viewer Unicode Buffer Overflow

This module exploits a stack-based buffer overflow in IBM Forms Viewer. The vulnerability is due to a dangerous usage of a strcpy-like function, and occurs while parsing malformed XFDL files containing a long fontname value. This module has been tested successfully on IBM Forms Viewer 4.0 on...

Sybase ASE Server Suspicious Command Detection

Binary data 5447.prm...

Team SHATTER Security Advisory: SQL Injection in Oracle Enterprise Manager (TARGET Parameter)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Team SHATTER Security Advisory SQL Injection in Oracle Enterprise Manager TARGET Parameter January 29, 2009 Risk Level: Medium Affected versions: Oracle Enterprise Manager 10g Grid Control 10.2.0.4 and previous patchsets Remote exploitable: Yes...

CVE-2008-5447

CVE-2008-5447 affects Oracle Enterprise Manager 10g Grid Control 10.2.0.4 and earlier. A SQL Injection flaw was identified in the TARGET parameter of the web page /em/console/reports/admin, allowing a user with at least VIEW privileges to execute SQL as the SYSMAN repository user with elevated pr...

CVE-2008-4778

creationtimestamp| type| source ---|---|--- 2008-04-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5414 2008-04-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5447...

CVE-2007-5447

CVE-2007-5447 affects ionCube Loader 6.5 for PHP 5.2.4. The ioncube_loader_win_5.2.dll does not enforce safe_mode or disable_functions, enabling context-dependent attackers to read arbitrary files via ioncube_read_file. This vulnerability is documented in the NVD entry for CVE-2007-5447 and is ec...