56 matches found
CVE-2016-5675
creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/nuuonvrminiauthrce.rb 2025-02-06 03:13:42+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:09:48+00:00| seen|...
Foxit Reader Multiple Code Execution Vulnerabilities (May 2018) - Windows
Foxit Reader is prone to multiple code execution vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2018-5675
CVE-2018-5675 affects Foxit Reader before 9.1 and Foxit PhantomPDF before 9.1. The flaw occurs in the processing of PDF files with embedded u3d images, where crafted data can trigger an out-of-bounds write in a buffer, allowing remote code execution under the current process. An attacker must ent...
CVE-2015-5675
The CVE-2015-5675 entry describes a Local Privilege Escalation/DoS in FreeBSD kernels due to the sys_amd64 IRET Handler. Affected: FreeBSD 9.3 and 10.1. Root cause: a mis-handling of IRET exceptions (#SS, #NP) in the kernel, which can allow a local user to gain privileges or trigger a kernel pani...
CVE-2017-5675
The CVE-2017-5675 issue affects a custom GoAhead web server used in Foscam, Vstarcam, and multiple white-label IP cameras. The mail.htm page’s mail-sending form allows an attacker to inject a command into the receiver1 field, which is then executed with root privileges. The vulnerability is trigg...
CVE-2016-5675
handledaylightsaving.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, NUUO Crystal 2.2.1 through 3.2.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to execute arbitrary PHP code via the NTPServer parameter...
CVE-2016-5675
handledaylightsaving.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, NUUO Crystal 2.2.1 through 3.2.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to execute arbitrary PHP code via the NTPServer parameter...
CVE-2016-5675
handledaylightsaving.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, NUUO Crystal 2.2.1 through 3.2.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to execute arbitrary PHP code via the NTPServer parameter...
CVE-2016-5675
CVE-2016-5675 affects NUUO NVRmini 2 (v1.7.5–v3.0.0), NVRsolo (v1.0.0–v3.0.0), NUUO Crystal (v2.2.1–v3.2.0), and NetGear ReadyNAS Surveillance (v1.1.1–v1.4.1). The flaw lies in handle_daylightsaving.php where the NTPServer parameter is not sanitized before being passed to system(), enabling an un...
FreeBSD-SA-15:21.amd64
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-15:21.amd64 Security Advisory The FreeBSD Project Topic: Local privilege escalation in IRET handler Category: core Module: sysamd64 Announced: 2015-08-25...
CVE-2014-5675
The CVE-2014-5675 entry concerns the Phonegram - Instagram Download (com.pinssible.padgram) Android app, version 1.9.5, which does not verify X.509 certificates from SSL servers. Root cause: lack of SSL certificate validation. Impact: enables man-in-the-middle attackers to spoof servers and acces...
CVE-2012-5675
CVE-2012-5675 affects Adobe ColdFusion 9.0 through 9.0.2 and ColdFusion 10. The vulnerability is a sandbox-permission bypass in shared-hosting environments that allows local users to bypass intended sandbox restrictions via unspecified vectors. The available connected documents confirm the affect...
CVE-2006-5675
creationtimestamp| type| source ---|---|--- 2009-10-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9958...
CVE-2009-1656
Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265, 275; and WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, 5687, 7655, 7656, and 7675 allows remote attackers to execute arbitrary commands via unknown attack vectors, aka "command injection vulnerability."...
CVE-2008-5675
Technical details are not publicly available in the provided documents; no concrete impact, vectors, or fixes are stated. Monitor for updates from official advisories.
CVE-2007-5675
CVE-2007-5675 affects the MultiXTpm Application Server, with the vulnerable component/function identified as the DebugPrint function. The root cause is described as a stack-based buffer overflow, allowing an attacker to supply a long string argument that could lead to remote code execution. Affec...