S2-045: Struts 2 Remote Code Execution vulnerability（CVE-2017-5638）

Based on the Jakarta plugin plugin Struts remote code execution vulnerability, a malicious user can upload a file by modifying the HTTP request header Content-Type value to trigger the vulnerability, and then execute the system command. Sound detection methodthe detection method by the constant...

Netgear DGN2200 / DGND3700 / WNDR4500 Information Disclosure Vulnerability

Netgear models DGN2200, DGND3700, and WNDR4500 suffer from multiple information disclosure vulnerabilities, one of which leaks the admin password. Title: Netgear DGN2200, DGND3700 and WNDR4500 Multiple Information Disclosure Vulnerabilities Author: Mandar jadhav Vendor Homepage:...

CVE-2015-5638

H2O Web Server vulnerability CVE-2015-5638: Directory traversal via the file.dir directive enables remote reading of arbitrary server files. A URL processing/normalization flaw in H2O up to versions 1.4.4 and 1.5.0-beta1 allows exploitation when file.dir is enabled. Affected versions: H2O before ...

CVE-2014-5638

The CVE-2014-5638 entry applies to the Huntington Mobile Android app (package com.huntington.m), version 2.1.222, which does not verify X.509 certificates from SSL servers. This creates a vulnerability where man-in-the-middle attackers could spoof legitimate servers and harvest sensitive informat...

Important: Red Hat Security Advisory: Red Hat Storage 2.0 security, bug fix, and enhancement update #4

Updated Red Hat Storage 2.0 packages that fix multiple security issues, several bugs, and add enhancements are now available. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

CVE-2012-5638

The setuplogging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content or bypass intended disk-quota restrictions via standard filesystem write operations...

CVE-2012-5638

CVE-2012-5638 concerns SANLock: the setup_logging function in log.h creates /var/log/sanlock.log with world-writable permissions, enabling a local user to overwrite log content or bypass quota constraints via standard filesystem writes. The issue is evidenced in multiple sources (NVD/NVD-derived ...

QNX 'debug' Service Detection

Binary data 5638.prm...

CVE-2009-1656

Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265, 275; and WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, 5687, 7655, 7656, and 7675 allows remote attackers to execute arbitrary commands via unknown attack vectors, aka "command injection vulnerability."...

CVE-2008-5638

CVE-2008-5638 : Multiple SQL injection vulnerabilities in Active Price Comparison 4 allow remote attackers to execute arbitrary SQL commands via the ProductID parameter to reviews.aspx or the linkid parameter to links.asp. The issue is evidenced by multiple sources (NVD entry and Exploit-DB listi...

CVE-2008-5638

creationtimestamp| type| source ---|---|--- 2008-11-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7289...

SuSE 10 Security Update : ipsec-tools (ZYPP Patch Number 5638)

Remote attackers could exploit memory leaks in the 'racoon' daemon to crash it. CVE-2008-3651 / CVE-2008-3652 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

CVE-2007-5638

The CVE-2007-5638 entry concerns Nortel UNIStim family devices (e.g., IP Softphone 2050, IP Phone 1140E and related BCM/IP phone lines). The underlying issue is that the 32-bit RUDP datagram ID field uses only 65,536 possible values, making it easier for remote attackers to guess the RUDP ID and ...