72 matches found
CVE-2026-5588
Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpkix on all pkix modules, Legion of the Bouncy Castle Inc. BCPKIX-FIPS bcpkix on All pkix modules, Legion of the Bouncy Castle Inc. BCPIX-LTS bcpkix on All pkix modules. This vulnerability...
CVE-2026-5588 PKIX draft CompositeVerifier accepts empty signature sequence as valid.
Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpkix on all pkix modules, Legion of the Bouncy Castle Inc. BCPKIX-FIPS bcpkix on All pkix modules, Legion of the Bouncy Castle Inc. BCPIX-LTS bcpkix on All pkix modules. This vulnerability...
CVE-2026-5588
CVE-2026-5588 is a vulnerability in the Bouncy Castle BC-JAVA family (bcpkix, bcprov, bcpix) where a broken or risky cryptographic algorithm is used by JcaContentVerifierProviderBuilder/JcaContentVerifierProviderBuilder, affecting BC-JAVA versions prior to 1.80.2, BC-PKIX 2.0.6–2.0.11 and 2.1.7–2...
Oracle Linux 8 : python3 (ELSA-2026-5588)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-5588 advisory. 3.6.8-74.0.1 - Add Oracle Linux distribution in platform.py Orabug: 20812544 3.6.8.openela.0 - Add openela to supported dists 3.6.8-74 - Security fix for...
CVE-2025-5588
The Image Editor by Pixo plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘download’ parameter in all versions up to, and including, 2.3.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-leve...
CVE-2025-5588
creationtimestamp| type| source ---|---|--- 2025-06-26 02:50:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19564 2025-06-26 08:29:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsiphw7s6v2i...
WordPress Image Editor by Pixo plugin <= 2.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via download Parameter vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via download Parameter vulnerability discovered by Peter Thaleikis in WordPress Plugin Image Editor by Pixo versions = 2.3.6...
CVE-2012-5588
The Email Field module 6.x-1.x before 6.x-1.3 for Drupal, when using a field permission module and the field contact field formatter is set to the full or teaser display mode, does not properly check permissions, which allows remote attackers to email the stored address via unspecified vectors...
CVE-2024-5588
creationtimestamp| type| source ---|---|--- 2025-02-14 10:01:40+00:00| seen| Telegram/646mn707z2aukIdMIE8y42TevMHCExiW9LUaPOyfXFp40gm...
CVE-2024-5588 itsourcecode Learning Management System processscore.php sql injection
A vulnerability was found in itsourcecode Learning Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file processscore.php. The manipulation of the argument LessonID leads to sql injection. The attack can be launched remotel...
CVE-2023-5588
creationtimestamp| type| source ---|---|--- 2023-10-16 02:36:11+00:00| seen| https://t.me/cibsecurity/72296...
CVE-2023-5588
CVE-2023-5588 affects kphrx pleroma: vulnerability in Pleroma.Emoji.Pack (lib/pleroma/emoji/pack.ex) where improper handling of the argument name enables path traversal. Multiple sources (NVD, OSV, GHSA, CVE lists) corroborate the issue as a path traversal vulnerability with high complexity and n...
RHEL 8 : kernel-rt (RHSA-2023:5588)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:5588 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...
SUSE CVE-2015-5588
Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to execute arbitrary code or cause a denial of service...
Ubuntu: Security Advisory (USN-5588-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RHEL 8 : openssl (RHSA-2020:5588)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:5588 advisory. OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength...
CVE-2020-5588
CVE-2020-5588 affects Cybozu Garoon 5.0.0–5.0.1 and is a path traversal vulnerability that allows an attacker with administrator rights to obtain unintended information via unspecified vectors. Connected sources (CyVDB/NVD/Red Hat/JVN/CVEs) describe multiple related vulnerabilities in Cybozu Garo...
CVE-2019-5588
A reflected Cross-Site-Scripting XSS vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4 under SSL VPN web portal may allow an attacker to execute unauthorized malicious script code via the "err" parameter of the error process HTTP requests...
CVE-2019-5588
CVE-2019-5588 is a reflected Cross-Site Scripting (XSS) vulnerability in Fortinet FortiOS FortiGate SSL VPN web portal, affecting FortiOS versions 6.0.0–6.0.4. The issue stems from insufficient input validation on the error page, allowing an attacker to inject script via the err parameter in HTTP...
CVE-2019-5588
A reflected Cross-Site-Scripting XSS vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4 under SSL VPN web portal may allow an attacker to execute unauthorized malicious script code via the "err" parameter of the error process HTTP requests...