170 matches found
CVE-2012-5535
gnome-system-log polkit policy allows arbitrary files on the system to be read...
CVE-2012-5535
gnome-system-log polkit policy allows arbitrary files on the system to be read...
CVE-2012-5535
gnome-system-log polkit policy allows arbitrary files on the system to be read...
CVE-2012-5535
gnome-system-log polkit policy allows arbitrary files on the system to be read...
CVE-2012-5535
CVE-2012-5535 concerns gnome-system-log polkit policy that allows reading arbitrary files on the system. The root cause is a polkit policy mistake that grants read access beyond intended scope. Impact: confidentiality is potentially HIGH (per CVSS-3.1), with non-trivial access possible without us...
CVE-2019-5535
VMware Workstation and Fusion contain a network denial-of-service vulnerability due to improper handling of certain IPv6 packets. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 4.7...
CVE-2019-5535
CVE-2019-5535 is a network denial-of-service vulnerability in VMware Workstation and Fusion caused by improper handling of certain IPv6 packets. The issue affects Workstation 15.x and Fusion 11.x prior to the fixed versions. From the VMware advisory (VMSA-2019-0014): exploitation requires sending...
VMware Fusion 11.0.x < 11.5.0 Multiple Vulnerabilities (VMSA-2019-0014)
The version of VMware Fusion installed on the remote macOS or Mac OS X host is 11.0.x prior to 11.5.0. It is, therefore, affected by the following issues: - A use-after-free error in the virtual sound device that allows a local attacker on the guest machine with low privileges to execute code on...
VMware ESXi, Workstation, Fusion, VMRC and Horizon Client updates address use-after-free and denial of service vulnerabilities. (CVE-2019-5527, CVE-2019-5535)
3a. ESXi, Workstation, Fusion, VMRC and Horizon Client use-after-free vulnerability - CVE-2019-5527 ESXi, Workstation, Fusion, VMRC and Horizon Client contain a use-after-free vulnerability in the virtual sound device. VMware has evaluated the severity of this issue to be in the Important severit...
VMSA-2019-0014:VMware ESXi, Workstation, Fusion, VMRC and Horizon Client updates address use-after-free and denial of service vulnerabilities.
VMware Security Advisories Advisory ID| VMSA-2019-0014.1 ---|--- Advisory Severity| Important CVSSv3 Range| 4.7-8.5 Synopsis| VMware ESXi, Workstation, Fusion, VMRC and Horizon Client updates address use-after-free and denial of service vulnerabilities. CVE-2019-5527, CVE-2019-5535 Issue Date|...
CVE-2018-5535
On F5 BIG-IP 14.0.0, 13.0.0-13.1.0, 12.1.0-12.1.3, or 11.5.1-11.6.3 specifically crafted HTTP responses, when processed by a Virtual Server with an associated QoE profile that has Video enabled, may cause TMM to incorrectly buffer response data causing the TMM to restart resulting in a Denial of...
CVE-2018-5535
CVE-2018-5535 affects F5 BIG-IP TMM when a Virtual Server uses a QoE profile with Video enabled. Specifically crafted HTTP responses may cause TMM to buffer data incorrectly, leading to a restart and a Denial of Service. Affected versions include BIG-IP 14.0.0, 13.0.0–13.1.0, 12.1.0–12.1.3, and 1...
CVE-2017-5535
CVE-2017-5535 affects TIBCO DataSynapse GridServer Manager components (GridServer Broker, GridServer Driver, GridServer Engine). The issue is improper use of encryption and weak ciphers, allowing potentially compromised traffic between components. Affected releases include GridServer Manager
CVE-2016-5535
creationtimestamp| type| source ---|---|--- 2018-01-05 01:08:45+00:00| seen| MISP/5a4ecbf4-1b24-4a5f-9f4d-4b7c98036464 2024-01-01 06:02:47+00:00| seen| https://t.me/arpsyndicate/2302 2026-07-26 07:02:20+00:00| seen| https://t.me/KaitNews/425 2026-07-27 00:01:56+00:00| seen|...
CVE-2016-5535
Oracle WebLogic Server (Oracle Fusion Middleware) is affected by CVE-2016-5535 due to unsafe deserialization in the WLS Security component, leading to remote code execution via unauthenticated Java objects in Apache Commons File Upload. Affected product versions include WebLogic Server 10.3.6.0, ...
Cross-Site Scripting (XSS) in qTranslate WordPress Plugin
Advisory ID: HTB23265 Product: qTranslate WordPress plugin Vendor: Qian Qin Vulnerable Versions: 2.5.39 and probably prior Tested Version: 2.5.39 Advisory Publication: July 1, 2015 without technical details Vendor Notification: July 1, 2015 Public Disclosure: July 29, 2015 Vulnerability Type:...
CVE-2015-5535
CVE-2015-5535 (qTranslate WordPress plugin) affects versions
WordPress qTranslate 2.5.39 Cross Site Scripting Vulnerability
WordPress qTranslate plugin version 2.5.39 suffers from a cross site scripting vulnerability. Product: qTranslate WordPress plugin Vendor: Qian Qin Vulnerable Versions: 2.5.39 and probably prior Tested Version: 2.5.39 Advisory Publication: July 1, 2015 without technical details Vendor Notificatio...
WordPress qTranslate 2.5.39 Cross Site Scripting
Advisory ID: HTB23265 Product: qTranslate WordPress plugin Vendor: Qian Qin Vulnerable Versions: 2.5.39 and probably prior Tested Version: 2.5.39 Advisory Publication: July 1, 2015 without technical details Vendor Notification: July 1, 2015 Public Disclosure: July 29, 2015 Vulnerability Type:...
CVE-2014-5535
CVE-2014-5535 affects The Baby Get Up - Kids Care (aka air.brown.jordansa.getup) Android app, version 1.0.3. The issue is that the app does not verify X.509 certificates when connecting to SSL servers, enabling potential MITM attackers to spoof servers and access sensitive data via a crafted cert...