CVE-2017-5543

CVE-2017-5543 affects Subrion CMS 4.0.5 where a vulnerable PHP file, includes/classes/ia.core.users.php, allows remote attackers to perform PHP Object Injection via crafted serialized data in a salt cookie during login. Public references and CVSS indicate a high-severity impact (NVD lists base sc...

CVE-2017-5543

includes/classes/ia.core.users.php in Subrion CMS 4.0.5 allows remote attackers to conduct PHP Object Injection attacks via crafted serialized data in a salt cookie in a login request...

CVE-2016-5543

Unspecified vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component in Oracle Financial Services Applications 12.0.0 and 12.1.0 allows remote attackers to affect confidentiality and integrity via vectors related to INFRA...

CVE-2016-5543

CVE-2016-5543 concerns Oracle FLEXCUBE Enterprise Limits and Collateral Management (Oracle Financial Services Applications 12.0.0/12.1.0). The vulnerability is described as unspecified in INFRA-related vectors that could affect confidentiality and integrity from remote access. Connected sources p...

CVE-2016-5543

Unspecified vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component in Oracle Financial Services Applications 12.0.0 and 12.1.0 allows remote attackers to affect confidentiality and integrity via vectors related to INFRA...

CVE-2014-5543

The CVE-2014-5543 entry applies to the Android app The Hidden Object - Alice Free (air.com.differencegames.hovisionsofalicefree) version 1.0.17, which does not verify X.509 certificates from SSL servers. This leads to potential MITM disclosure of sensitive information via crafted certificates. Th...

CVE-2013-5543

CVE-2013-5543 affects Cisco IOS XE on 1000 Series ASR routers. A vulnerability in the Zone-Based Firewall (ZBFW) handling allows remote attackers to trigger a device reload via malformed ICMP error packets bound to an active TCP/UDP session (Bug CSCtt26470). Affected versions are IOS XE 3.4 prior...

CVE-2012-5543

The CVE-2012-5543 issue affects the Drupal Feeds module (7.x-2.x) prior to 7.x-2.0-alpha6. The root cause is improper permission checks when a field is mapped to the node author, enabling remote attackers to create arbitrary nodes via a crafted source feed. Affected software is the Feeds module f...

SA-CONTRIB-2012-152 - Feeds - Access bypass

The feeds module enables you to import or aggregate data as nodes, users, taxonomy terms or simple database records. The module doesn't sufficiently check permissions when creating nodes on behalf of a user. This vulnerability is mitigated by the fact that an attacker must have control over the...

Microsoft Group Policy File Download Detection

Binary data 5543.prm...

SuSE 10 Security Update : GnuTLS (ZYPP Patch Number 5543)

Multiple issues have been fixed in gnutls. CVE-2008-1948 GNUTLS-SA-2008-1-1, CVE-2008-1949 GNUTLS-SA-2008-1-2 and CVE-2008-1950 GNUTLS-SA-2008-1-3 have been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

CVE-2007-5543

CVE-2007-5543 describes a stack-based buffer overflow in Miranda IM 0.6.8 and 0.7.0 triggered by a crafted Yahoo! Messenger packet, enabling remote code execution. The root cause is improper bounds checking in the packet handling path of the Yahoo Messenger-related code. Affected software: Mirand...

CVE-2008-5543

CVE-2008-5543 affects Symantec AntiVirus 10 when Internet Explorer 6/7 is used, enabling attackers to bypass malware-detection in HTML by prepending an MZ header (EXE info) and disguising the filename with no extension, .txt, or .jpg. The vulnerability mirrors a broader family seen in related CVE...

[Full-disclosure] Miranda IM Multiple Buffer Overflow Vulnerabilities

Miranda IM Multiple Buffer Overflow Vulnerabilities Summary Multiple buffer overflow vulnerabilities exist in Miranda IM, a popular open source instant messaging client. Scope These vulnerabilities have been verified in the following Miranda IM versions: 0.6.8 0.7.0 Note: one vulnerability in...

CVE-2006-5543

CVE-2006-5543 refers to a PHP remote file inclusion vulnerability in the PHP Generator of Object SQL Database (PGOSD), specifically in misc/function.php3. When register_globals is enabled, an attacker can cause arbitrary PHP code execution by supplying a URL in the path parameter. This is documen...