Riverbed RiOS Insecure Cryptographic Storage

Riverbed RiOS insecure cryptographic storage CVE-2017-5670 Description Riverbed Steelhead hardware appliances are used to optimize and accelerate network traffic. There can be implemented as TLS endpoints, so they have a secure vault aimed to store private TLS certificates for servers. The secure...

CVE-2016-5670

CVE-2016-5670 affects Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040, which use non-random default credentials (admin:admin) for the web management interface. This hard-coded credential baseline enables remote attackers to gain privileged, unauthenticated access vi...

CVE-2015-5670

CVE-2015-5670 affects Enisys Gw (Techno Project Japan Co.) prior to version 1.4.1, with an XSS vulnerability (CWE-79) that allows remote injection of arbitrary script/HTML via unspecified vectors. The JVN entries and NVD description confirm the issue and specify affected versions as 1.4.0 and ear...

Gentoo Security Advisory GLSA 201402-16

Gentoo Linux Local Security Checks GLSA 201402-16 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

CVE-2014-5670

CVE-2014-5670 affects the Android app SAS: Zombie Assault 3 (package com.ninjakiwi.sas3zombieassault), version 2.56. Root cause: the app does not verify X.509 certificates when communicating with SSL servers, enabling MITM attackers to spoof servers and obtain sensitive information via a crafted ...

openSUSE Security Update : freetype2 (openSUSE-SU-2013:0165-1)

BNC795826, CVE-2012-5668.patch bdf Fix Savannah bug 37905. - src/bdf/bdflib.c bdfparsestart: Reset propssize' to zero in case of allocation error; this value gets used in a loop in - BNC795826, CVE-2012-5669.patch bdf Fix Savannah bug 37906. - src/bdf/bdflib.c bdfparseglyphs: Use correct array...

CVE-2013-5670

Cross-site scripting XSS vulnerability in spell-check-savedicts.php in the htmlarea SpellChecker module, as used in Serendipity before 1.7.3 and possibly other products, allows remote attackers to inject arbitrary web script or HTML via the torlist parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in spell-check-savedicts.php in the SpellChecker module in Xinha, as used in WikiWig 5.01 and possibly other products, allow remote attackers to inject arbitrary web script or HTML via the 1 topdict or 2 torlist parameter. NOTE: this issue might b...

CVE-2013-5670

Cross-site scripting XSS vulnerability in spell-check-savedicts.php in the htmlarea SpellChecker module, as used in Serendipity before 1.7.3 and possibly other products, allows remote attackers to inject arbitrary web script or HTML via the torlist parameter...

CVE-2013-5670

CVE-2013-5670 is a cross-site scripting (XSS) vulnerability in the htmlarea SpellChecker module’s spell-check-savedicts.php, affecting Serendipity prior to 1.7.3. The issue allows remote attackers to inject arbitrary web script or HTML via the to_r_list parameter. The vulnerability is due to impr...

CVE-2012-5670

Summary (CVE-2012-5670): FreeType before 2.4.11 is vulnerable due to an error in the _bdf_parse_glyphs function and an ENCODING field with a negative value when processing BDF fonts. This can lead to an out-of-bounds write and crash (denial of service), with potential for broader impact described...

freetype

New freetype packages are available for Slackware 12.1, 12.2, 13.0, 13.1, 13.37, 14.0, and -current to fix security issues. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/freetype-2.4.11-i486-1slack14.0.txz: Upgraded. This release fixes several security bugs that could...

[USN-1686-1] FreeType vulnerabilities

========================================================================== Ubuntu Security Notice USN-1686-1 January 14, 2013 freetype vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: ...

[BSA-078] Security Update for freetype

I uploaded new packages for freetype which fixed the following security problems: CVE-2012-5668: NULL Pointer Dereference in bdffreefont. CVE-2012-5669: Out-of-bounds read in bdfparseglyphs. CVE-2012-5670: Out-of-bounds write in bdfparseglyphs. For the squeeze-backports distribution the problems...

CVE-2008-5670

Textpattern (Txp CMS) 4.0.5 is affected by a vulnerability in the password reset workflow: it does not require the old password, enabling a password change after session hijacking. This is documented across multiple sources (NVD/NVD-derived entries). Impact described as allowing remote attackers ...

CVE-2008-6633

creationtimestamp| type| source ---|---|--- 2008-05-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5670...

CVE-2007-5670

CVE-2007-5670 corresponds to a directory traversal vulnerability in IBM Informix Dynamic Server (IDS) prior to 10.00.xC7W1. The issue arises from improper handling of the DBLANG environment variable, allowing local users to gain privileges by referencing modified NLS message files through directo...

CVE-2006-5670

CVE-2006-5670 is a PHP-based remote file inclusion vulnerability in the free image hosting package (Free Image Hosting 1.0 and earlier). It allows an attacker to remotely execute arbitrary PHP code by supplying a crafted URL in the AD_BODY_TEMP parameter to forgot_pass.php. The vulnerability desc...