Lucene search
+L

175 matches found

Tenable Nessus
Tenable Nessus
added 2015/08/11 12:00 a.m.30 views

Adobe AIR for Mac <= 18.0.0.180 Multiple Vulnerabilities (APSB15-16)

According to its version, the installation of Adobe AIR on the remote Mac OS X host is equal or prior to 18.0.0.180. It is, therefore, affected by multiple vulnerabilities : - Multiple type confusion errors exist that allow an attacker to execute arbitrary code. CVE-2015-5554, CVE-2015-5555,...

10CVSS6.5AI score0.65956EPSS
SaveExploits31References36
Tenable Nessus
Tenable Nessus
added 2015/08/11 12:00 a.m.44 views

Adobe AIR <= 18.0.0.180 Multiple Vulnerabilities (APSB15-19)

According to its version, the installation of Adobe AIR on the remote Windows host is equal or prior to 18.0.0.180. It is, therefore, affected by multiple vulnerabilities : - Multiple type confusion errors exist that allow an attacker to execute arbitrary code. CVE-2015-5554, CVE-2015-5555,...

10CVSS6.5AI score0.65956EPSS
SaveExploits31References36
CVE
CVE
added 2014/09/09 1:00 a.m.39 views

CVE-2014-5548

The CVE-2014-5548 entry pertains to The Christmas Words app (Android, 1.0.1) which does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and capture sensitive data via crafted certificates. Affected component is the Android app’s SSL certificat...

5.4CVSS6AI score0.00271EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2013/11/01 1:00 a.m.65 views

CVE-2013-5548

The CVE-2013-5548 issue affects Cisco IOS IKEv2 when using AES-GCM or AES-GMAC for Phase 2 SAs. The vulnerability is due to improper logic that enables or disables IPsec anti-replay protection, allowing remote attackers to bypass anti-replay protections on IPsec tunnel traffic. Affected component...

4.3CVSS7AI score0.01134EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2012/12/03 9:00 p.m.29 views

CVE-2012-5548

Cross-site scripting XSS vulnerability in the Time Spent module 6.x and 7.x for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

5.7AI score0.00931EPSS
SaveExploits0References2
CVE
CVE
added 2012/12/03 9:00 p.m.50 views

CVE-2012-5548

CVE-2012-5548 is a Drupal Time Spent module (6.x/7.x) XSS vulnerability caused by insufficient input sanitization. Reports in the Drup al security advisory note multiple vulnerabilities (XSS, CSRF, SQL injection) across all Time Spent module versions, with Drupal core unaffected. Remediation per ...

4.3CVSS5.9AI score0.00931EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2008/12/12 6:13 p.m.38 views

CVE-2008-5548

VirusBuster 4.5.11.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, as...

6.3AI score0.01905EPSS
SaveExploits0References4
CVE
CVE
added 2008/12/12 6:13 p.m.56 views

CVE-2008-5548

CVE-2008-5548 describes a malware-detection bypass involving VirusBuster 4.5.11.0 when using Internet Explorer 6 or 7. An attacker can place an MZ header at the start of an HTML document and alter the filename to have no extension, .txt, or .jpg, enabling remote bypass of malware detection as ill...

9.3CVSS6.2AI score0.01905EPSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2008/01/22 8:00 p.m.21 views

CVE-2008-0374

OKI C5510MFP Printer CU H2.15, PU 01.03.01, System F/W 1.01, and Web Page 1.00 sends the configuration of the printer in cleartext, which allows remote attackers to obtain the administrative password by connecting to TCP port 5548 or 7777...

10CVSS7.6AI score0.02077EPSS
SaveExploits0References6
Prion
Prion
added 2008/01/22 8:00 p.m.21 views

Default credentials

OKI C5510MFP Printer CU H2.15, PU 01.03.01, System F/W 1.01, and Web Page 1.00 sends the configuration of the printer in cleartext, which allows remote attackers to obtain the administrative password by connecting to TCP port 5548 or 7777...

10CVSS7.4AI score0.02077EPSS
SaveExploits0References6Affected Software1
CVE
CVE
added 2008/01/22 7:00 p.m.51 views

CVE-2008-0374

OKI C5510MFP Printer CU H2.15, PU 01.03.01, System F/W 1.01, Web Page 1.00 exposes its configuration in cleartext, allowing remote attackers to obtain the administrative password by connecting to TCP ports 5548 or 7777. The issue is confirmed across multiple sources; CVSS v3.1 base score 7.5 (HIG...

10CVSS7.7AI score0.02077EPSS
SaveExploits0References6Affected Software1
Positive Technologies
Positive Technologies
added 2008/01/22 12:00 a.m.10 views

PT-2008-2007 · Oki · Oki C5510Mfp Printer

Name of the Vulnerable Software and Affected Versions: OKI C5510MFP Printer CU H2.15, PU 01.03.01, System F/W 1.01, and Web Page 1.00 Description: The issue allows remote attackers to obtain the administrative password by connecting to TCP port 5548 or 7777, as the printer sends its configuration...

10CVSS7.6AI score0.02077EPSS
SaveExploits0References8
NVD
NVD
added 2007/10/18 8:17 p.m.26 views

CVE-2007-5548

Multiple stack-based buffer overflows in Command EXEC in Cisco IOS allow local users to gain privileges via unspecified vectors, aka 1 PSIRT-0474975756 and 2 PSIRT-0388256465. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information. However, since it is fr...

6.9CVSS6.9AI score0.00355EPSS
SaveExploits0References3
CVE
CVE
added 2007/10/18 8:00 p.m.53 views

CVE-2007-5548

Cisco IOS Multiple Vulnerabilities (CVE-2007-5548) involve multiple stack-based buffer overflows in the Command EXEC facility that allow a local user to gain privileges. The underlying cause and vectors are not specified in the report, and the disclosure originated from a vague pre-advisory. The ...

6.9CVSS6.9AI score0.00355EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2006/10/26 5:00 p.m.54 views

CVE-2006-5548

CVE-2006-5548 discusses a PHP remote file inclusion vulnerability in OTSCMS (Open Tibia Server Content Management System). The issue affects OTSCMS versions 2.0.0 through 2.1.3 and stems from an insecure usage of GLOBALS[config][directories][classes] in OTSCMS.php, allowing remote attackers to ex...

7.5CVSS7.9AI score0.03351EPSS
SaveExploits2References6Affected Software1
Rows per page
Query Builder