31 matches found
CVE-2025-5518
creationtimestamp| type| source ---|---|--- 2025-12-03 23:59:39+00:00| seen| https://infosec.exchange/users/timbmachine/statuses/115658343985215542 2025-12-04 13:57:58+00:00| seen| https://mstdn.social/users/jschauma/statuses/115661647115099251 2025-12-04 18:02:24+00:00| seen|...
CVE-2024-5518
creationtimestamp| type| source ---|---|--- 2025-02-14 10:03:08+00:00| seen| Telegram/FCpCY9W-tL9boIxdhZ0RVWtOS66JFOfkGbpkEiHMo3z0bNuP...
CVE-2024-5518 itsourcecode Online Discussion Forum change_profile_picture.php unrestricted upload
A vulnerability classified as critical has been found in itsourcecode Online Discussion Forum 1.0. This affects an unknown part of the file changeprofilepicture.php. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit ha...
CVE-2024-5518 itsourcecode Online Discussion Forum change_profile_picture.php unrestricted upload
A vulnerability classified as critical has been found in itsourcecode Online Discussion Forum 1.0. This affects an unknown part of the file changeprofilepicture.php. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit ha...
CVE-2024-5518
The CVE-2024-5518 entry concerns itsourcecode Online Discussion Forum 1.0. The vulnerability lies in the file change_profile_picture.php where the image parameter can be manipulated to achieve unrestricted uploads. It can be triggered remotely, and public exploitation has been disclosed (VDB-2665...
CVE-2012-5518
creationtimestamp| type| source ---|---|--- 2024-02-27 07:41:39+00:00| seen| https://t.me/ctinow/194056...
Debian DSA-5518-1 : libvpx - security update
The remote Debian 11 / 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5518 advisory. - VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding. CVE-2023-44488 Note that Nessus has not tested for this issue but has instead...
K03165684: vCMP vulnerability CVE-2018-5518
Security Advisory Description Malicious root users with access to a vCMP guest can disrupt service on adjacent vCMP guests running on the same host. Exploiting this vulnerability causes the vcmpd process on the adjacent vCMP guest to restart and produce a core file. This issue is only exploitable...
Ubuntu: Security Advisory (USN-5518-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 22.04 LTS : Linux kernel vulnerabilities (USN-5518-1)
The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5518-1 advisory. It was discovered that the eBPF implementation in the Linux kernel did not properly prevent writes to kernel objects in BPFBTFLOAD commands. A privileged...
CVE-2012-5518
CVE-2012-5518 concerns Red Hat VDSM: certificate generation during node creation allows the daemon to start and serve requests from anyone with a matching key/certificate. The NVD entry lists a CVSS base score of 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N; 3.1: CVSS:3.1 base 7.5, HIGH impact on integrity) a...
CVE-2019-5518
CVE-2019-5518 concerns an out-of-bounds read/write in the virtual USB 1.1 UHCI for VMware products. A guest VM with a virtual USB controller can potentially execute code on the host. Affected: VMware ESXi (6.0/6.5/6.7), Workstation (14.x/15.x), and Fusion (10.x/11.x). Root cause: out-of-bounds ac...
VMSA-2019-0005 : VMware ESXi, Workstation and Fusion updates address multiple security issues
a. VMware ESXi, Workstation and Fusion UHCI out-of-bounds read/write and TOCTOU vulnerabilities VMware ESXi, Workstation and Fusion contain an out-of-bounds read/write vulnerability and a Time-of-check Time-of-use TOCTOU vulnerability in the virtual USB 1.1 UHCI Universal Host Controller Interfac...
VMware ESXi, Workstation and Fusion updates address multiple security issues.
a. VMware ESXi, Workstation and Fusion UHCI out-of-bounds read/write and TOCTOU vulnerabilities VMware ESXi, Workstation and Fusion contain an out-of-bounds read/write vulnerability and a Time-of-check Time-of-use TOCTOU vulnerability in the virtual USB 1.1 UHCI Universal Host Controller Interfac...
F5 Networks BIG-IP : vCMP vulnerability (K03165684)
Malicious root users with access to a vCMP guest can disrupt service on adjacent vCMP guests running on the same host. Exploiting this vulnerability causes the vcmpd process on the adjacent vCMP guest to restart and produce a core file. This issue is only exploitable on a vCMP guest which is...
CVE-2018-5518
CVE-2018-5518 affects F5 BIG-IP vCMP guests. A root user on a vCMP guest can disrupt services on adjacent vCMP guests on the same host, by triggering a restart of the adjacent guest’s vcmpd process and creating a core file. Exploitation is possible only when the vulnerable guest runs in host-only...
CVE-2017-5518
GeniXCMS media-file upload feature up to version 0.0.8 is affected by an SSRF vulnerability. The issue arises when the upload mechanism processes a URL, enabling remote attackers to fetch internal network resources (e.g., intranet addresses). The CVE description consistently states SSRF via a URL...
CVE-2016-5518
Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.3.0 and 6.2.0.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to webfileservices...
CVE-2016-5518
CVE-2016-5518: Unspecified vulnerability in Oracle Agile Engineering Data Management (Oracle Supply Chain Products Suite) versions 6.1.3.0 and 6.2.0.0, specifically in the webfileservices subcomponent. Remote attackers could impact confidentiality, integrity, and availability. Documented impact i...
Apache Geronimo <= 2.1.3 - Multiple Directory Traversal Vulnerabilities
No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-09-018 Application: Apache Geronimo Application Server Versions Affected: 2.1 - 2.1.3 Vendor URL: http://geronimo.apache.org/ Bug: Directory Traversal File Upload Exploits: YES Reported: 10.12.2008 Vendor...