SmartFoxServer 2X 2.17.0 Remote Code Execution

SmartFoxServer 2X 2.17.0 God Mode Console Remote Code Execution Vendor: gotoAndPlay Product web page: https://www.smartfoxserver.com Affected version: Server: 2.17.0 Remote Admin: 3.2.6 SmartFoxServer 2X, Pro, Basic Summary: SmartFoxServer SFS is a comprehensive SDK for rapidly developing...

CVE-2020-5628

UNIQLO App for Android versions 7.3.3 and earlier allows remote attackers to lead a user to access an arbitrary website via the vulnerable App. As a result, if the access destination is a malicious website, the user may fall victim to the social engineering attack...

CVE-2020-5628

UNIQLO App for Android versions 7.3.3 and earlier allows remote attackers to lead a user to access an arbitrary website via the vulnerable App. As a result, if the access destination is a malicious website, the user may fall victim to the social engineering attack...

CVE-2020-5628

The CVE-2020-5628 issue affects UNIQLO App for Android (versions up to 7.3.3). It is a remote-access vulnerability described as multiple access restriction bypass flaws that can let an attacker lure a user to an arbitrary website via the vulnerable app, potentially enabling social engineering. Th...

CVE-2015-5628

Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and earlier, CENTUM VP Entry R5.04.20 and earlier, ProSafe-RS R3.02.10 and earlier, Exaopc R3.72.00 and earlier, Exaquant...

CVE-2015-5628

Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and earlier, CENTUM VP Entry R5.04.20 and earlier, ProSafe-RS R3.02.10 and earlier, Exaopc R3.72.00 and earlier, Exaquant...

CVE-2012-5628

CVE-2012-5628 affects gofer prior to 0.68. It arises from world-writable permissions on /var/lib/gofer/journal/watchdog, enabling a local attacker to cause a denial of service by removing journal entries. Multiple sources corroborate the issue and point to upgrading to version 0.68 as the remedy....

Fedora 25 : mujs (2017-dc6023e849)

Security fix for CVE-2016-10132, CVE-2016-10133, CVE-2016-10141, CVE-2017-5627, CVE-2017-5628. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...

Fedora 24 : mujs (2017-624e2eeda0)

Security fix for CVE-2016-10132, CVE-2016-10133, CVE-2016-10141, CVE-2017-5627, CVE-2017-5628. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...

openSUSE Security Update : mupdf (openSUSE-2017-271)

This update for mupdf fixes the following vulnerabilities : - CVE-2017-5627: Integer overflow in the mujs implementation boo1022503 - CVE-2017-5628: Integer overflow in the mujs implementation boo1022504 - CVE-2017-5896: heap overflow boo1023761, boo1024679 - NULL pointer dereference in dodrawpag...

CVE-2017-5628

CVE-2017-5628 affects Artifex MuJS prior to commit 8f62ea10a0af68e56d5c00720523ebcba13c2e6a. The MakeDay function in jsdate.c does not validate the month, leading to an integer overflow when parsing a specially crafted JavaScript file. This could impact robustness of parsing and, per the CVE desc...

CVE-2016-5628

Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: DML...

CVE-2016-5628

CVE-2016-5628 affects Oracle MySQL 5.7.13 and earlier. The vulnerability is described as unspecified and relates to Server: DML, with impact on availability. The connected documents confirm the issue but do not provide concrete exploit details, affected version ranges beyond 5.7.13 and earlier, o...

MySQL 5.7.x < 5.7.14 Multiple Vulnerabilities

The version of MySQL running on the remote host is 5.7.x prior to 5.7.14. It is, therefore, affected by multiple vulnerabilities : - Multiple unspecified flaws exist in the InnoDB subcomponent that allow an authenticated, remote attacker to cause a denial of service condition. CVE-2016-3495,...

MySQL 5.7.x < 5.7.14 Multiple Vulnerabilities

The version of MySQL running on the remote host is 5.7.x prior to 5.7.14. It is, therefore, affected by multiple vulnerabilities : - Multiple unspecified flaws exist in the InnoDB subcomponent that allow an authenticated, remote attacker to cause a denial of service condition. CVE-2016-3495,...

CVE-2014-5628

The CVE-2014-5628 entry concerns the Android app The Wonder Zoo - Animal rescue (com.gameloft.android.ANMP.GloftZRHM) version 1.6.1, which does not verify X.509 certificates from SSL servers. This weakens TLS trust, allowing a man-in-the-middle to spoof servers and obtain sensitive information vi...

CVE-2013-5628

CVE-2013-5628 pertains to multiple vulnerabilities in Zoom Telephonics ADSL Modem/Router models (X3, X4, X5, ADSL Bridge 5715, USB 5510B). Public sources describe directory traversal and unauthenticated access to administrative panels, enabling bypass of authentication and enabling administrative...

CVE-2008-5628

CVE-2008-5628 corresponds to an SQL injection in index.php of CMS little 0.0.1, enabling remote attackers to execute arbitrary SQL commands via the term parameter. Affected component: index.php in CMS little 0.0.1. Root cause: unsafeguarded SQL construction through user-supplied term parameter. R...

Immunity Canvas: TOWEL_INCLUDE

Name| towelinclude ---|--- CVE| CVE-2007-5628 Exploit Pack| CANVAS Description| ToweLS remote file include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: ToweLS CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5628 CVE Name: CVE-2007-5628...

CVE-2007-5628

The CVE-2007-5628 issue affects The Online Web Library Site (TOWels) 0.1, where a PHP remote file inclusion is possible via the pageHeaderFile parameter in src/scripture.php, allowing remote code execution. The underlying cause is a vulnerable inclusion of a URL-specified file without proper vali...