CVE-2018-5474

CVE-2018-5474 affects Philips IntelliSpace Portal (ISP), specifically all 7.0.x and 8.0.x versions. The issue is an input validation vulnerability in the ISP that could allow a remote attacker to execute arbitrary code or cause the application to crash. The NVD records a high-severity CVSS v3 bas...

CVE-2008-5474

CVE-2008-5474 is rejected/not used; this CVE ID does not represent an active vulnerability entry.

CVE-2008-5474

...

CVE-2017-5474

Open redirect vulnerability CVE-2017-5474 affects Serendipity up to version 2.0.5 in comment.php. The issue arises from improper validation of the HTTP Referer header, enabling remote attackers to direct users to arbitrary sites (potential phishing). Affected product/component: Serendipity (comme...

CVE-2016-5474

Unspecified vulnerability in the Oracle Retail Service Backbone component in Oracle Retail Applications 14.0, 14.1, and 15.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to RSB Kernel...

CVE-2016-5474

Summary: CVE-2016-5474 affects Oracle Retail Applications (14.0–15.0) via the Oracle Retail Service Backbone (RSB). Connected sources indicate the vulnerability is in the Install subcomponent of RSB, with a remote attacker potentially compromising confidentiality, integrity, and availability. The...

CVE-2015-5474

BitTorrent and uTorrent are affected by a remote code execution vulnerability due to how URLs with the bittorrent: or magnet: protocols are handled. A crafted URL can inject arbitrary command line parameters and have them passed to the BitTorrent/uTorrent executable, enabling code execution under...

CVE-2013-5474

The CVE-2013-5474 entry describes a race condition in the IPv6 Virtual Fragmentation Reassembly (VFR) implementation in Cisco IOS. Affected software ranges include Cisco IOS releases 12.2–12.4 and 15.0–15.3, where processing fragmented IPv6 packets through the VFR path can be exploited by remote ...

Fedora 18 : python-django-horizon-2012.2-4.fc18 (2012-18185)

drop python-cloudfiles as requirement - fix CVE-2012-5474 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

CVE-2007-5474

CVE-2007-5474 affects Linksys WRT350N (firmware 2.00.17) using Atheros AR5416-AC1E. The vulnerability arises from incorrect parsing of the Atheros vendor-specific information element in an association request, allowing a too-long information element to cause a denial of service (device reboot or ...

CVE-2006-5474

The CVE-2006-5474 entry concerns OneOrZero Helpdesk versions before 1.6.5.4. Root cause: the forgot-password function generates passwords by concatenating the current timestamp with the username, enabling remote attackers to gain access to an arbitrary user via a password reset request. Impact: u...