RHEL 8 : mariadb:10.3 (RHSA-2020:5654)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:5654 advisory. MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. The following packages have been upgraded ...

CVE-2020-5654

CVE-2020-5654 is a session-fixation vulnerability in the TCP/IP function of MELSEC iQ-R series firmware. A remote, unauthenticated attacker can stop the network functions of affected modules by sending a specially crafted packet. Affected MELSEC iQ-R components include EtherNet/IP Network Interfa...

CVE-2019-5654

CVE-2019-5654 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2019-5654

...

Cross-Site Scripting

Overview Versions of dojo prior to 1.2.0 are vulnerable to Cross-Site Scripting XSS. The package fails to sanitize HTML code in user-controlled input, allowing attackers to execute arbitrary JavaScript in the victim's browser. Recommendation Upgrade to version 1.2.0 or later. References - CVE -...

CVE-2013-5654

creationtimestamp| type| source ---|---|--- 2019-02-16 00:24:15+00:00| seen| https://t.me/cibsecurity/2594 2019-02-21 20:19:24+00:00| seen| https://t.me/cibsecurity/2666...

CVE-2013-5654

The CVE-2013-5654 entry describes a vulnerability in YingZhi Python Programming Language v1.9 where an attacker can perform arbitrary anonymous uploads to the device’s storage. The available description states this is a vulnerability affecting YingZhi’s Python runtime, enabling uploads without au...

CVE-2018-5654

CVE-2018-5654 concerns the WordPress plugin weblizar-pinterest-feeds (version 1.1.1). The issue is a cross-site scripting (XSS) vulnerability exploitable through the wp-admin/admin-ajax.php endpoint via the PFFREE_Access_Token parameter. All connected sources identify an XSS in this plugin, with ...

CVE-2017-5654

Apache Ambari Hive View vulnerability (CVE-2017-5654) affects Ambari 2.4.x before 2.4.3 and 2.5.0. An authorized user of the Ambari Hive View may obtain unauthorized read access to host files where the Ambari server runs. Root cause described in sources as an XML/insjection fault enabling reads f...

CVE-2016-5654

Misys FusionCapital Opics Plus is affected by CVE-2016-5654. A remote authenticated attacker could exploit a man-in-the-middle to tamper with the xmlMessageOut parameter and escalate privileges to administrator. The issue is tied to Misys FusionCapital Opics Plus and is described in CNVD/CERT ent...

CVE-2015-5654

Dojo Toolkit (before 1.2) is vulnerable to Cross-Site Scripting (XSS) due to improper validation of user-supplied input, enabling remote attackers to inject script/HTML via unspecified vectors. Several vendor advisories confirm this CVE-2015-5654 issue and recommend upgrading Dojo to a version wi...

CVE-2012-5654

The CVE concerns Nodewords: D6 Meta Tags module for Drupal (pre-6.x-1.14). The flaw is that when configured to auto-generate description meta tags from node text, it does not properly filter node content, allowing remote attackers to read sensitive information via the description, dc.description,...

SuSE 11.1 Security Update : libxml2 (SAT Patch Number 5654)

A heap-based buffer overflow during decoding of entity references with overly long names has been fixed. CVE-2011-3919 has been assigned. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The...

Sql injection

Multiple SQL injection vulnerabilities in MyioSoft EasyBookMarker 4.0 allow remote attackers to execute arbitrary SQL commands via the 1 deletefolder and 2 deletelink parameters to unspecified vectors, possibly to a plugins/bookmarker/bookmarkerbackend.php or b ajaxp.php, different vectors than...

CVE-2008-5654

Summary (CVE-2008-5654): SQL injection vulnerability in the loginADP function of ajaxp.php in MyioSoft EasyCalendar 4.0 (and earlier per related CVE-2008-1344) allows remote attackers to execute arbitrary SQL commands via the rsargs parameter, reachable through the username parameter. This is a d...

CVE-2007-5654

LiteSpeed Web Server prior to 3.2.4 is affected by CVE-2007-5654 (Mime Type Injection). An attacker can trigger use of an arbitrary MIME type for a file by sending a request containing a null-byte sequence (%00.) followed by a new extension, which can lead to viewing sensitive content (e.g., read...

Sun Network Security Services (NSS) vulnerable to DoS due to an unspecified vulnerability

Overview The NSS libraries used in the Sun One Application Server and the Sun Java System web server contain an unspecified vulnerability that may allow an attacker to create a denial-of-service condition. Description The Sun One Application Server provides a Java 2 Platform for delivering Java...

CVE-2006-5654

CVE-2006-5654 concerns the NSS component used by Sun Java System Web Server 6.0 (pre-SP10) and ONE Application Server 7 (pre-Update 3) when SSLv2 is enabled, allowing remote authenticated users to cause a denial of service. Connected documents indicate related NSS issues (e.g., CVE-2006-5201) and...