Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : HTTP-Daemon vulnerability (USN-5520-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-5520-1 advisory. It was discovered that HTTP-Daemon incorrectly handled certain crafted requests. A remote attacker could possibly use this issue to perfor...

CVE-2020-5520

creationtimestamp| type| source ---|---|--- 2020-01-27 12:37:43+00:00| seen| https://t.me/cveNotify/446...

CVE-2020-5520

The CVE-2020-5520 entry concerns the netprint App for iOS (3.2.3 and earlier) failing to verify server X.509 certificates, enabling potential MITM attacks to spoof servers and access sensitive data via a crafted certificate. Documented impact is data disclosure through compromised TLS validation;...

SOCA Access Control System 180612 Cross Site Request Forgery

SOCA Access Control System 180612 CSRF Add Admin Exploit Vendor: SOCA Technology Co., Ltd Product web page: http://www.socatech.com Affected version: 180612, 170000 and 141007 Summary: The company's products include Proximity and Fingerprint access control system, Time and Attendance, Electric...

SOCA Access Control System 180612 - CSRF (Add Admin) Vulnerability

Exploit for php platform in category web applications SOCA Access Control System 180612 CSRF Add Admin Exploit Vendor: SOCA Technology Co., Ltd Product web page: http://www.socatech.com Affected version: 180612, 170000 and 141007 Summary: The company's products include Proximity and Fingerprint...

ESXi 6.5 / 6.7 Multiple Vulnerabilities (VMSA-2019-0006) (Remote Check)

The remote VMware ESXi host is version 6.5 or 6.7 and is missing a security patch. It is, therefore, vulnerable to multiple vulnerabilities, including: - An out-of-bounds read vulnerability exists in the vertex shader component of the 3D-acceleration feature could allow an authenticated attacker ...

VMware Fusion 10.x < 10.1.6 / 11.x < 11.0.3 Multiple Vulnerabilities (VMSA-2019-0005) (macOS)

The version of VMware Fusion installed on the remote macOS or Mac OS X host is 10.x prior to 10.1.6 or 11.x prior to 11.0.3. It is, therefore, affected by multiple vulnerabilities, including: - An out-of-bounds read vulnerability exists in the vertex shader component of the 3D-acceleration featur...

VMSA-2019-0006 : VMware ESXi, Workstation and Fusion updates address multiple out-of-bounds read vulnerabilities

a. VMware ESXi, Workstation and Fusion vertex shader out-of-bounds read vulnerability VMware ESXi, Workstation and Fusion updates address an out-of-bounds vulnerability with the vertex shader functionality. Exploitation of this issue requires an attacker to have access to a virtual machine with 3...

F5 Networks BIG-IP : Appliance mode tmsh access vulnerability (K02043709)

On a BIG-IP system configured in Appliance mode, the TMOS Shell tmsh may allow an administrative user to use the dig utility to gain unauthorized access to file system resources. CVE-2018-5520 Note : Appliance mode is designed to meet the needs of customers in especially sensitive sectors by...

CVE-2018-5520

CVE-2018-5520 affects F5 BIG-IP in Appliance mode where the TMOS Shell (tmsh) can be exploited via the dig utility to access file-system resources. The vulnerability allows unauthorized disclosure of information. Affected product scope includes BIG-IP versions: 11.x (11.2.1–11.6.3.1), 12.x (12.1....

significados.com.br XSS vulnerability

Vulnerable URL: https://www.significados.com.br////?s=%27;%22%3E;;--%3E%3C/SCRIPT%3E-%3C/style%3E-%3C/title%3E-%3C/BoDy%3E-%3Cmarquee%3E-%3Ch1%3EOmniGooch%3C/h1%3E-%3C/marquee%3E-%3Csvg/onload=alert%27XSSPOSED%27;%3E;%27 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| X...

PT-2017-5202 · Cisco · Asa 5540 +10

Name of the Vulnerable Software and Affected Versions: ASA 5515-X Adaptive Security Appliance Adaptive Security Appliance ASA Software versions 9.4.x through 9.4.0, 9.2.x through 9.2.3, 8.4.x through 8.4.6, 8.2.x through 8.2.4 ASA 5510 Adaptive Security Appliance Adaptive Security Appliance ASA...

Unauthorized access vulnerability in HP Photosmart 5520 series printers

The HP Photosmart 5520 series is a mid-range inkjet printer. An unauthorized access vulnerability exists in the HP Photosmart 5520 series printer. The vulnerability allows an attacker to enter the backend of the printer and view sensitive information or perform unauthorized operations...

CVE-2016-5520

CVE-2016-5520 entry is rejected/not used per the Initial Description.

CVE-2017-5520

The media rename feature in GeniXCMS through 0.0.8 does not consider alternative PHP file extensions when checking uploaded files for PHP content, which enables a user to rename and execute files with the .php6, .php7 and .phtml extensions...

CVE-2017-5520

CVE-2017-5520 affects GeniXCMS up to version 0.0.8. The issue is in the media rename feature, which does not consider alternative PHP file extensions when checking uploaded files for PHP content, allowing an attacker to rename and execute files with .php6, .php7, or .phtml extensions. The connect...

CVE-2015-5520

Cross-site scripting XSS vulnerability in the Users module in Orchard 1.7.3 through 1.8.2 and 1.9.x before 1.9.1 allows remote attackers to inject arbitrary web script or HTML via the username when creating a new user account, which is not properly handled when deleting an account...

CVE-2015-5520

Cross-site scripting XSS vulnerability in the Users module in Orchard 1.7.3 through 1.8.2 and 1.9.x before 1.9.1 allows remote attackers to inject arbitrary web script or HTML via the username when creating a new user account, which is not properly handled when deleting an account...

CVE-2015-5520

CVE-2015-5520 is an XSS vulnerability in Orchard CMS. The Users module on Orchard versions 1.7.3–1.8.2 and 1.9.x prior to 1.9.1 allows remote attackers to inject arbitrary script or HTML via the username when creating a new user account, with the issue not being properly handled during account de...

CVE-2014-5520

CVE-2014-5520 concerns XRMS CRM (likely version 1.99.2) with an SQL injection in the user_id parameter of plugins/webform/new-form.php, not properly sanitized by plugins/useradmin/fingeruser.php. The vulnerability allows remote attackers to execute arbitrary SQL commands, per the NVD entry. The p...