71 matches found
CVE-2019-5660
CVE-2019-5660 entry is rejected/not used and does not represent an active vulnerability entry.
Privilege Escalation
ABRT Automatic Bug Reporting Tool is a tool to help users to detect defects in applications and to create a bug report with all the information needed by a maintainer to fix it. It uses a plug-in system to extend its functionality. libreport provides an API for reporting different problems in...
Debian DSA-4128-1 : trafficserver - security update
Several vulnerabilities were discovered in Apache Traffic Server, a reverse and forward proxy server. They could lead to the use of an incorrect upstream proxy, or allow a remote attacker to cause a denial-of-service by application crash. C Tenable Network Security, Inc. The descriptive text and...
[SECURITY] [DSA 4128-1] trafficserver security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4128-1 [email protected] https://www.debian.org/security/ Sebastien Delafond March 02, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4128-1] trafficserver security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4128-1 [email protected] https://www.debian.org/security/ Sebastien Delafond March 02, 2018 https://www.debian.org/security/faq -...
CVE-2017-5660
There is a vulnerability in Apache Traffic Server ATS 6.2.0 and prior and 7.0.0 and prior with the Host header and line folding. This can have issues when interacting with upstream proxies and the wrong host being used...
CVE-2017-5660
There is a vulnerability in Apache Traffic Server ATS 6.2.0 and prior and 7.0.0 and prior with the Host header and line folding. This can have issues when interacting with upstream proxies and the wrong host being used...
UBUNTU-CVE-2017-5660
There is a vulnerability in Apache Traffic Server ATS 6.2.0 and prior and 7.0.0 and prior with the Host header and line folding. This can have issues when interacting with upstream proxies and the wrong host being used...
CVE-2017-5660
CVE-2017-5660 affects Apache Traffic Server (ATS) versions 6.2.0 and earlier and 7.0.0 and earlier due to a Host header/line folding issue that can interact with upstream proxies and cause the wrong host to be used. Several sources describe an input-validation/host-header vulnerability with poten...
CVE-2018-5660
CVE-2018-5660 affects the WordPress plugin responsive-coming-soon-page (version 1.1.18). The vulnerability is an XSS in the admin context via the parameter coming-soon_sub_title in wp-admin/admin.php, as described by multiple sources (NVD/CNVD). Technical details across connected documents confir...
CVE-2016-5660
CVE-2016-5660 is an XSS vulnerability in the Accela Civic Platform Citizen Access portal, specifically in AttachmentsList.aspx via the iframeid parameter. The issue allows remote attackers to inject arbitrary web script or HTML. Documents indicate vulnerability details but do not specify affected...
Accela Civic Platform Citizen Access portal contains multiple vulnerabilities
Overview Accela Civic Platform Citizen Access portal contains cross-site scripting and arbitrary file upload vulnerabilities. Description CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' - CVE-2016-5660Accela Civic Platform Citizen Access portal contains ...
CVE-2015-5660
Cross-site request forgery CSRF vulnerability in eXtplorer before 2.1.8 allows remote attackers to hijack the authentication of arbitrary users for requests that execute PHP code...
CVE-2015-5660
Extplorer before 2.1.8 is affected by a Cross‑Site Request Forgery (CSRF) vulnerability that enables an attacker to hijack the authentication of arbitrary users for requests that execute PHP code. The issue, CVE-2015-5660, is documented across multiple sources (NVD, CNVD, Debian DLA, OSV) and res...
CVE-2014-5660
The CVE-2014-5660 entry details a vulnerability in the Android app TN Members 1st FCU-RDC (com.metova.cuae.tmffcu) version 1.0.28, where X.509 certificate validation for SSL servers is not performed. This enables man-in-the-middle attackers to spoof servers and access sensitive information via a ...
Macrovision InstallShield Update Service Buffer Overflow
No description provided by source. $Id: macrovisiondownloadandexecute.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing...
CVE-2013-5660
WinArchiver 3.2 (PowerSoftware) is affected by a SEH-based buffer overflow in crafted ZIP handling, allowing remote code execution. Affected component: the WinArchiver ZIP processing path; root cause: SEH-based overflow leading to arbitrary code execution. Impact: remote attacker could execute co...
WinArchiver 3.2 SEH Buffer Overflow Vulnerability
WinArchiver version 3.2 suffers from a SEH-based buffer overflow vulnerability. Title: SEH BUFFER OVERFLOW IN WINARCHIVER V.3.2 Severity: Critical History: 24.Apr.2013 Vulnerability reported Authors: Josep Pi Rodriguez, Pedro Guillen Nuñez , Miguel Angel de Castro Simon Organization: RealPentesti...
