50 matches found
CVE-2016-5661
Accela Civic Platform Citizen Access portal relies on the client to restrict file types for uploads, which allows remote authenticated users to execute arbitrary code via modified EventArgument and filename parameters...
Accela Civic Platform Citizen Access portal contains multiple vulnerabilities
Overview Accela Civic Platform Citizen Access portal contains cross-site scripting and arbitrary file upload vulnerabilities. Description CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' - CVE-2016-5660Accela Civic Platform Citizen Access portal contains ...
CVE-2015-5661
The SAND STUDIO AirDroid application 1.1.0 and earlier for Android mishandles implicit intents, which allows attackers to obtain sensitive information via a crafted application...
CVE-2014-5661
The Anger of Stick 3 (com.miniclip.angerofstick3) Android app v1.0.3 does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information. Root cause: missing certificate validation in the app’s TLS handling. Affected impact: ...
CVE-2012-5661
CVE-2012-5661 entry is rejected/not used and does not represent an active vulnerability.
CVE-2008-5661
The IPv4 Forwarding feature in Sun Solaris 10 and OpenSolaris snv47 through snv82, with certain patches installed, allows remote attackers to cause a denial of service panic via unknown vectors that trigger a NULL pointer dereference...
CVE-2008-5661
The CVE-2008-5661 issue affects Sun Solaris 10 and OpenSolaris (snv_47 through snv_82) where the IPv4 Forwarding feature can trigger a NULL pointer dereference via remote input, causing a denial of service (panic). The vulnerability is reported with patches installed on affected builds; the exact...
CVE-2007-5661
The CVE-2007-5661 issue affects Macrovision InstallShield InstallScript One-Click Install ActiveX control (12.0 before SP2). The OCI ActiveX loads DLLs from remote sites without validating the libraries, enabling remote code execution with the user’s privileges when a user visits a crafted web pa...
CVE-2006-5661
CVE-2006-5661 is an XSS vulnerability in VIRtech Netquery’s nquser.php that allows remote attackers to inject arbitrary web script via the User-Agent header. The issue is documented across multiple feeds, with CVSS 2.0 indicating a Network attack, no authentication, and partial impact to confiden...