175 matches found
Adobe AIR for Mac <= 18.0.0.180 Multiple Vulnerabilities (APSB15-16)
According to its version, the installation of Adobe AIR on the remote Mac OS X host is equal or prior to 18.0.0.180. It is, therefore, affected by multiple vulnerabilities : - Multiple type confusion errors exist that allow an attacker to execute arbitrary code. CVE-2015-5554, CVE-2015-5555,...
Adobe AIR <= 18.0.0.180 Multiple Vulnerabilities (APSB15-19)
According to its version, the installation of Adobe AIR on the remote Windows host is equal or prior to 18.0.0.180. It is, therefore, affected by multiple vulnerabilities : - Multiple type confusion errors exist that allow an attacker to execute arbitrary code. CVE-2015-5554, CVE-2015-5555,...
CVE-2014-5548
The CVE-2014-5548 entry pertains to The Christmas Words app (Android, 1.0.1) which does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and capture sensitive data via crafted certificates. Affected component is the Android app’s SSL certificat...
CVE-2013-5548
The CVE-2013-5548 issue affects Cisco IOS IKEv2 when using AES-GCM or AES-GMAC for Phase 2 SAs. The vulnerability is due to improper logic that enables or disables IPsec anti-replay protection, allowing remote attackers to bypass anti-replay protections on IPsec tunnel traffic. Affected component...
CVE-2012-5548
Cross-site scripting XSS vulnerability in the Time Spent module 6.x and 7.x for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2012-5548
CVE-2012-5548 is a Drupal Time Spent module (6.x/7.x) XSS vulnerability caused by insufficient input sanitization. Reports in the Drup al security advisory note multiple vulnerabilities (XSS, CSRF, SQL injection) across all Time Spent module versions, with Drupal core unaffected. Remediation per ...
CVE-2008-5548
VirusBuster 4.5.11.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, as...
CVE-2008-5548
CVE-2008-5548 describes a malware-detection bypass involving VirusBuster 4.5.11.0 when using Internet Explorer 6 or 7. An attacker can place an MZ header at the start of an HTML document and alter the filename to have no extension, .txt, or .jpg, enabling remote bypass of malware detection as ill...
CVE-2008-0374
OKI C5510MFP Printer CU H2.15, PU 01.03.01, System F/W 1.01, and Web Page 1.00 sends the configuration of the printer in cleartext, which allows remote attackers to obtain the administrative password by connecting to TCP port 5548 or 7777...
Default credentials
OKI C5510MFP Printer CU H2.15, PU 01.03.01, System F/W 1.01, and Web Page 1.00 sends the configuration of the printer in cleartext, which allows remote attackers to obtain the administrative password by connecting to TCP port 5548 or 7777...
CVE-2008-0374
OKI C5510MFP Printer CU H2.15, PU 01.03.01, System F/W 1.01, Web Page 1.00 exposes its configuration in cleartext, allowing remote attackers to obtain the administrative password by connecting to TCP ports 5548 or 7777. The issue is confirmed across multiple sources; CVSS v3.1 base score 7.5 (HIG...
PT-2008-2007 · Oki · Oki C5510Mfp Printer
Name of the Vulnerable Software and Affected Versions: OKI C5510MFP Printer CU H2.15, PU 01.03.01, System F/W 1.01, and Web Page 1.00 Description: The issue allows remote attackers to obtain the administrative password by connecting to TCP port 5548 or 7777, as the printer sends its configuration...
CVE-2007-5548
Multiple stack-based buffer overflows in Command EXEC in Cisco IOS allow local users to gain privileges via unspecified vectors, aka 1 PSIRT-0474975756 and 2 PSIRT-0388256465. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information. However, since it is fr...
CVE-2007-5548
Cisco IOS Multiple Vulnerabilities (CVE-2007-5548) involve multiple stack-based buffer overflows in the Command EXEC facility that allow a local user to gain privileges. The underlying cause and vectors are not specified in the report, and the disclosure originated from a vague pre-advisory. The ...
CVE-2006-5548
CVE-2006-5548 discusses a PHP remote file inclusion vulnerability in OTSCMS (Open Tibia Server Content Management System). The issue affects OTSCMS versions 2.0.0 through 2.1.3 and stems from an insecure usage of GLOBALS[config][directories][classes] in OTSCMS.php, allowing remote attackers to ex...