CVE-2014-5458

CVE-2014-5458 describes a SQL injection in the PHP project php-sqrl, specifically in sqrl_verify.php, where the message parameter can be manipulated to execute arbitrary SQL commands. This is a remote-exploit concern affecting the affected code path in php-sqrl. The connected documents confirm th...

IBM Domino 9.x < 9.0.1 Fix Pack 1 Multiple Vulnerabilities (uncredentialed check)

According to its version, the IBM Domino formerly IBM Lotus Domino on the remote host is 9.x prior to 9.0.1 Fix Pack 1 FP1. It is, therefore, affected by the following vulnerabilities : - A stack overflow issue exists due to the insecure '-z execstack' flag being used during compilation, which...

SuSE 11.2 / 11.3 Security Update : IBM Java 7 (SAT Patch Numbers 8565 / 8566)

IBM Java 7 SR6 has been released and fixes lots of bugs and security issues. More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11...

SuSE 11.2 / 11.3 Security Update : IBM Java 6 (SAT Patch Numbers 8549 / 8550)

IBM Java 6 SR15 has been released and fixes lots of bugs and security issues. More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 1...

Critical: Red Hat Security Advisory: java-1.7.0-ibm security update

Updated java-1.7.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give...

VMware Workstation 8.x < 8.0.5 Multiple Vulnerabilities (VMSA-2012-0015)

The VMware Workstation 8.x install detected on the remote host is earlier than 8.0.5 and is, therefore, potentially affected by the following vulnerabilities : - Certain processes, when created, have weak security permissions assigned. It is possible to commandeer these process threads, which cou...

CVE-2012-5458

Summary (CVE-2012-5458) VMware Workstation 8.x (pre-8.0.5) and VMware Player 4.x (pre-4.0.5) on Windows are affected by a flaw where certain created host process threads have weak permissions. This weak permission set can allow a local attacker with access to the host OS to escalate privileges on...

VMSA-2012-0015:VMware Hosted Products and OVF Tool address security issues

VMSA-2012-0015 VMware Hosted Products and OVF Tool address security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2012-0015 VMware Security Advisory Synopsis: VMware Hosted Products and OVF Tool address security issues VMware Security Advisory Issue date: 2012-11-08...

CVE-2008-5458

Technical details about CVE-2008-5458 are not publicly provided in the connected documents. Monitor for updates.

CVE-2007-5458

CVE-2007-5458 describes an SQL injection in index.php of the KwsPHP newsletter module 1.0. The vulnerability occurs when magic_quotes_gpc is disabled, allowing remote attackers to inject arbitrary SQL via the newsletter parameter. This is supported by multiple connected records (NVD/NVD listing, ...

CVE-2006-5458

PHP remote file inclusion vulnerability in common.php in Hinton Design phpht Topsites allows remote attackers to execute arbitrary PHP code via a URL in the phphtrealpath parameter...

CVE-2006-5458

Affected software : Hinton Design phpht Topsites. Vulnerability : CVE-2006-5458 is a PHP remote file inclusion in common.php triggered by a URL in the phpht_real_path parameter, allowing remote code execution. Root cause : improper handling of user-supplied phpht_real_path leading to inclusion of...