CVE-2019-5452

Bypass lock protection in the Nextcloud Android app prior to version 3.6.2 causes leaking of thumbnails when requesting the Android content provider although the lock protection was not solved...

Security Bulletin: IBM Business Process Manager (BPM) document store is susceptible to XXE (XML External Entity) attacks. (CVE-2013-5452)

Summary An XML eXternal Entity XXE vulnerability has been reported for the embedded component used by IBM BPM document store. Vulnerability Details CVEID: CVE-2013-5452 DESCRIPTION: The IBM FileNet Business Process Framework is vulnerable to an XML external entity attack. A remote attacker could...

CVE-2017-5452

CVE-2017-5452 affects Firefox for Android prior to version 53. The issue allows a spoofed address bar on a page when the new page’s location bar is scrolled out of view if an HTML editable element is user-selected. Remediation per the advisory is upgrading to Firefox 53 or newer (the fixed versio...

CVE-2017-5452

Malicious sites can display a spoofed addressbar on a page when the existing location bar on the new page is scrolled out of view if an HTML editable page element is user selected. Note: This attack only affects Firefox for Android. Other operating systems are not affected. This vulnerability...

CVE-2018-5452

A Stack-based Buffer Overflow issue was discovered in Emerson Process Management ControlWave Micro Process Automation Controller: ControlWave Micro ProConOS v.4.01.280 firmware: CWM v.05.78.00 and prior. A stack-based buffer overflow vulnerability caused by sending crafted packets on Port 20547...

CVE-2018-5452

The CVE-2018-5452 vulnerability affects Emerson ControlWave Micro Process Automation Controller (ProConOS v.4.01.280; firmware CWM v.05.78.00 and earlier). It is a stack-based buffer overflow triggered by crafting packets to port 20547, which can cause the PLC to halt. Impact described includes p...

FreeBSD : mozilla -- multiple vulnerabilities (5e0a038a-ca30-416d-a2f5-38cbf5e7df33)

Mozilla Foundation reports : Please reference CVE/URL list for details %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2019 Jacques Vidrine and contributors Redistribution a...

CVE-2016-5452

CVE-2016-5452 affects Oracle Solaris 11.3 Verified Boot subcomponent. A local attacker could affect confidentiality by exploiting Verified Boot vulnerabilities; CVSS 3.0 indicates LOCAL, LOW complexity, LOW privileges required, with HIGH confidentiality impact. Connected sources confirm the issue...

Oracle Solaris Critical Patch Update : jul2016_SRU11_3_9_4_0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Verified Boot. The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged...

CVE-2015-5452

creationtimestamp| type| source ---|---|--- 2015-09-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38346...

CVE-2015-5452

WatchGuard XCS is affected. The CVE-2015-5452 issue is a SQL injection in WatchGuard XCS 9.2 and 10.0 prior to build 150522. The vulnerability can be triggered by crafting a request to borderpost/imp/compose.php3 that manipulates the sid cookie, allowing remote attackers to execute arbitrary SQL ...

CVE-2014-5452

CVE-2014-5452 affects HL7 C-CDA 1.1 and earlier via the CDA.xsl stylesheet. The underlying issue is that CDA.xsl does not anticipate invalid C-CDA documents with crafted XML attributes, enabling a remote XSS when a document contains a table improperly handled during unrestricted xsl:copy operatio...

CVE-2013-5452

IBM FileNet Business Process Framework 4.1.0 allows remote authenticated users to read arbitrary files or send TCP requests to intranet servers via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

CVE-2013-5452

CVE-2013-5452 affects IBM FileNet/IBM BPM 4.1.0 (IBM BPM document store component). The vulnerability is an XML External Entity (XXE) issue that allows remote authenticated users to read arbitrary files or to send TCP requests to intranet servers via XML data containing an external entity declara...

CVE-2012-5452

Multiple cross-site scripting XSS vulnerabilities in Subrion CMS 2.2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 multititle parameter to blocks/add/; 2 cost, 3 days, or 4 titleen parameter to plans/add/; 5 name or 6 titleen parameter to fields/group/add/ in...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Subrion CMS before 2.2.3 allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 admin/accounts/, 2 admin/manage/, or 3 admin/manage/blocks/edit/; or 4 group parameter to admin/configuration/. NOTE: The...

CVE-2012-5452

CVE-2012-5452 affects Subrion CMS 2.2.1, with multiple XSS vectors exploitable via parameters across blocks/add, plans/add, fields/group/add (admin/manage), and advsearch. The root cause is improper input handling that allows injection of arbitrary scripts/HTML into user-visible fields (e.g., mul...

CVE-2012-5452

creationtimestamp| type| source ---|---|--- 2012-10-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/22159...

Fedora Core 11 FEDORA-2009-5452 (openssl)

The remote host is missing an update to openssl announced via advisory FEDORA-2009-5452. OpenVAS Vulnerability Test $Id: fcore20095452.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-5452 openssl Authors: Thomas Reinke Copyright: Copyright c 2009...

CVE-2008-5452

Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...