Lucene search
+L

56 matches found

Circl
Circl
added 2018/05/29 3:50 p.m.14 views

CVE-2016-5675

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/nuuonvrminiauthrce.rb 2025-02-06 03:13:42+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:09:48+00:00| seen|...

10CVSS9.3AI score0.70877EPSS
SaveExploits7References1
OpenVAS
OpenVAS
added 2018/05/25 12:00 a.m.29 views

Foxit Reader Multiple Code Execution Vulnerabilities (May 2018) - Windows

Foxit Reader is prone to multiple code execution vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

8.8CVSS9.7AI score0.04005EPSS
SaveExploits9References1
CVE
CVE
added 2018/05/24 9:00 p.m.53 views

CVE-2018-5675

CVE-2018-5675 affects Foxit Reader before 9.1 and Foxit PhantomPDF before 9.1. The flaw occurs in the processing of PDF files with embedded u3d images, where crafted data can trigger an out-of-bounds write in a buffer, allowing remote code execution under the current process. An attacker must ent...

8.8CVSS8.8AI score0.03957EPSS
SaveExploits1References3Affected Software2
CVE
CVE
added 2017/10/10 4:00 p.m.71 views

CVE-2015-5675

The CVE-2015-5675 entry describes a Local Privilege Escalation/DoS in FreeBSD kernels due to the sys_amd64 IRET Handler. Affected: FreeBSD 9.3 and 10.1. Root cause: a mis-handling of IRET exceptions (#SS, #NP) in the kernel, which can allow a local user to gain privileges or trigger a kernel pani...

7.8CVSS7.4AI score0.00568EPSS
SaveExploits0References5Affected Software1
CVE
CVE
added 2017/03/13 6:14 a.m.98 views

CVE-2017-5675

The CVE-2017-5675 issue affects a custom GoAhead web server used in Foscam, Vstarcam, and multiple white-label IP cameras. The mail.htm page’s mail-sending form allows an attacker to inject a command into the receiver1 field, which is then executed with root privileges. The vulnerability is trigg...

9CVSS8.6AI score0.01713EPSS
SaveExploits1References2Affected Software1
NVD
NVD
added 2016/08/31 3:59 p.m.28 views

CVE-2016-5675

handledaylightsaving.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, NUUO Crystal 2.2.1 through 3.2.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to execute arbitrary PHP code via the NTPServer parameter...

10CVSS9.8AI score0.70877EPSS
SaveExploits7References3
OSV
OSV
added 2016/08/31 3:59 p.m.9 views

CVE-2016-5675

handledaylightsaving.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, NUUO Crystal 2.2.1 through 3.2.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to execute arbitrary PHP code via the NTPServer parameter...

9.8CVSS9.7AI score
SaveExploits0References3
Cvelist
Cvelist
added 2016/08/31 3:00 p.m.47 views

CVE-2016-5675

handledaylightsaving.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, NUUO Crystal 2.2.1 through 3.2.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to execute arbitrary PHP code via the NTPServer parameter...

8.5AI score0.70877EPSS
SaveExploits7References3
CVE
CVE
added 2016/08/31 3:00 p.m.89 views

CVE-2016-5675

CVE-2016-5675 affects NUUO NVRmini 2 (v1.7.5–v3.0.0), NVRsolo (v1.0.0–v3.0.0), NUUO Crystal (v2.2.1–v3.2.0), and NetGear ReadyNAS Surveillance (v1.1.1–v1.4.1). The flaw lies in handle_daylightsaving.php where the NTPServer parameter is not sanitized before being passed to system(), enabling an un...

10CVSS8.3AI score0.70877EPSS
SaveExploits7References3Affected Software1
FreeBSD Advisory
FreeBSD Advisory
added 2015/08/25 12:00 a.m.12 views

FreeBSD-SA-15:21.amd64

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-15:21.amd64 Security Advisory The FreeBSD Project Topic: Local privilege escalation in IRET handler Category: core Module: sysamd64 Announced: 2015-08-25...

7.8CVSS7.2AI score0.00568EPSS
SaveExploits0
CVE
CVE
added 2014/09/09 1:00 a.m.44 views

CVE-2014-5675

The CVE-2014-5675 entry concerns the Phonegram - Instagram Download (com.pinssible.padgram) Android app, version 1.9.5, which does not verify X.509 certificates from SSL servers. Root cause: lack of SSL certificate validation. Impact: enables man-in-the-middle attackers to spoof servers and acces...

5.4CVSS6AI score0.00271EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2012/12/12 11:00 a.m.63 views

CVE-2012-5675

CVE-2012-5675 affects Adobe ColdFusion 9.0 through 9.0.2 and ColdFusion 10. The vulnerability is a sandbox-permission bypass in shared-hosting environments that allows local users to bypass intended sandbox restrictions via unspecified vectors. The available connected documents confirm the affect...

4.4CVSS6.5AI score0.00719EPSS
SaveExploits0References1Affected Software1
Circl
Circl
added 2009/10/15 12:00 a.m.8 views

CVE-2006-5675

creationtimestamp| type| source ---|---|--- 2009-10-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9958...

10CVSS5.8AI score0.01468EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2009/05/16 6:00 p.m.23 views

CVE-2009-1656

Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265, 275; and WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, 5687, 7655, 7656, and 7675 allows remote attackers to execute arbitrary commands via unknown attack vectors, aka "command injection vulnerability."...

7.9AI score0.03589EPSS
SaveExploits0References7
CVE
CVE
added 2008/12/18 10:00 p.m.55 views

CVE-2008-5675

Technical details are not publicly available in the provided documents; no concrete impact, vectors, or fixes are stated. Monitor for updates from official advisories.

10CVSS6.3AI score0.01541EPSS
SaveExploits0References5Affected Software1
CVE
CVE
added 2007/10/24 11:00 p.m.55 views

CVE-2007-5675

CVE-2007-5675 affects the MultiXTpm Application Server, with the vulnerable component/function identified as the DebugPrint function. The root cause is described as a stack-based buffer overflow, allowing an attacker to supply a long string argument that could lead to remote code execution. Affec...

7.5CVSS8.1AI score0.03068EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder