Ubuntu: Security Advisory (USN-5458-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 ESM : Vim vulnerabilities (USN-5458-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5458-1 advisory. It was discovered that Vim was incorrectly handling virtual column position operations, which could result in an out-of-bounds read. An attacker could...

Mozilla Firefox Security Advisory (MFSA2017-10) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

CVE-2020-5458

CVE-2020-5458 is rejected/not used and does not represent an active vulnerability entry.

CVE-2020-5458

...

CVE-2019-5458

Cross-site scripting XSS vulnerability in http-file-server all versions allows an attacker with access to the server file system to execute arbitrary JavaScript code in victim's browser...

CVE-2019-5458

CVE-2019-5458 concerns the Node.js module http-file-server. All versions are vulnerable to a Cross-Site Scripting (XSS) flaw in directory listings: the server fails to sanitize filenames, allowing stored/reflective JavaScript in the victim’s browser when a user browses the listing. Evidence in co...

Security Bulletin: IBM Operational Decision Manager and WebSphere ILOG JRules: Multiple security vulnerabilities in IBM JRE

Summary This Security Bulletin addresses the security vulnerabilities that have shipped with the IBM Java Runtime Environment JRE included in IBM Operational Decision Manager and IBM ILOG JRules. IBM ODM and ILOG JRules now include the most recent version of the IBM JRE which fixes the security...

CVE-2017-5458

CVE-2017-5458 describes a reflected XSS in Firefox where dragging a javascript: URL into the address bar can be executed by the victim. The vulnerability affects Firefox versions prior to 53; the issue arises from insufficient validation of javascript: URLs in the address bar during drag-and-drop...

KYOCERA Net Admin 3.4 - Cross Site Request Forgery - Add Admin Exploit

Exploit for linux platform in category web applications Vendor: KYOCERA Corporation Product https://global.kyocera.com Affected version: 3.4.0906 Summary: KYOCERA Net Admin is Kyocera's unified device management software that uses a web-based platform to give network administrators easy and...

CVE-2018-5458

Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have a vulnerability using SSL legacy encryption that could allow an attacker to gain unauthorized access to resources and information...

Ubuntu: Security Advisory (USN-3260-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-3260-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-5458

When a "javascript:" URL is drag and dropped by a user into the addressbar, the URL will be processed and executed. This allows for users to be socially engineered to execute an XSS attack on themselves. This vulnerability affects Firefox 53...

FreeBSD : mozilla -- multiple vulnerabilities (5e0a038a-ca30-416d-a2f5-38cbf5e7df33)

Mozilla Foundation reports : Please reference CVE/URL list for details %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2019 Jacques Vidrine and contributors Redistribution a...

CVE-2016-5458

The CVE-2016-5458 entry describes an unspecified vulnerability in the Oracle Communications EAGLE Application Processor’s APPL subcomponent within Oracle Communications Applications 16.0. The vulnerability is alleged to allow remote authenticated users to affect confidentiality and integrity via ...

PivotX Multiple Vulnerabilities (Jul 2015)

PivotX is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:pivotx:pivotx"; if description...

CVE-2015-5458

PivotX (fileupload.php) is affected by CVE-2015-5458: a session fixation vulnerability in PivotX before 2.3.11 allows remote attackers to hijack sessions via the sess parameter. Affected software: PivotX prior to 2.3.11; remediation is to upgrade to PivotX 2.3.11 or later (per CVE references).

CVE-2014-5458

SQL injection vulnerability in sqrlverify.php in php-sqrl allows remote attackers to execute arbitrary SQL commands via the message parameter...

CVE-2014-5458

SQL injection vulnerability in sqrlverify.php in php-sqrl allows remote attackers to execute arbitrary SQL commands via the message parameter...