41 matches found
Ubuntu 16.04 ESM / 18.04 ESM : gThumb vulnerabilities (USN-5681-1)
The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5681-1 advisory. It was discovered that gThumb did not properly managed memory under certain circumstances. An attacker could possibly use this issue to cause...
Ubuntu: Security Advisory (USN-5681-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-5681
creationtimestamp| type| source ---|---|--- 2020-12-24 07:54:41+00:00| seen| https://t.me/cibsecurity/21263...
CVE-2020-5681
Untrusted search path vulnerability in self-extracting files created by EpsonNet SetupManager versions 2.2.14 and earlier, and Offirio SynergyWare PrintDirector versions 1.6x/1.6y and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2020-5681
CVE-2020-5681 affects EpsonNet SetupManager (versions up to 2.2.14) and Offirio SynergyWare PrintDirector (up to 1.6x/1.6y). It is an untrusted search path vulnerability (DLL search order) in self‑extracting files, enabling privilege elevation via a Trojan horse DLL in an unspecified directory. S...
PrestaShop <= 1.7.2.4 Multiple Vulnerabilities
PrestaShop is prone to multiple vulnerabilities. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2018-5681
PrestaShop 1.7.2.4 is affected by a cross-site scripting (XSS) vulnerability that can be triggered via the Source Code editing option on the Pages > Edit page screen. The issue is documented in CVE-2018-5681 with notes that the vulnerability exists in the 1.7.2.4 release and is disclosed by mu...
D-Link 850L Router Cookie Overflow Remote Code Execution (CVE-2016-5681)
There exists a Remote Code Execution vulnerability within D-Link 850L Routers. This is due to the way the D-Link Routers handle cookie validation. A successful attack could lead to unauthorized remote code execution...
CVE-2012-5681
CVE-2012-5681 is rejected/not used; this candidate does not represent an active vulnerability entry.
CVE-2017-5681
The RSA-CRT implementation in the Intel QuickAssist Technology QAT Engine for OpenSSL versions prior to 0.5.19 may allow remote attackers to obtain private RSA keys by conducting a Lenstra side-channel attack...
CVE-2017-5681
The CVE-2017-5681 entry concerns the RSA-CRT implementation in the Intel QuickAssist Technology (QAT) Engine for OpenSSL before version 0.5.19. The vulnerability enables remote attackers to potentially obtain private RSA keys via a Lenstra side-channel attack. Affected component: QAT Engine’s RSA...
CVE-2016-5681
Stack-based buffer overflow in dws/api/Login on D-Link DIR-850L B1 2.07 before 2.07WWB05, DIR-817 Ax, DIR-818LW Bx before 2.05b03beta03, DIR-822 C1 3.01 before 3.01WWb02, DIR-823 A1 1.00 before 1.00WWb05, DIR-895L A1 1.11 before 1.11WWb04, DIR-890L A1 1.09 before 1.09b14, DIR-885L A1 1.11 before...
CVE-2016-5681
CVE-2016-5681 is a stack-based buffer overflow in D-Link DIR-850L B1, DIR-817 Ax, DIR-818LW Bx, DIR-822 C1, DIR-823 A1, DIR-895L A1, DIR-890L A1, DIR-885L A1, DIR-880L A1, DIR-868L B1, and DIR-868L C1 where a long session cookie to dws/api/Login can cause remote code execution. Public sources con...
D-Link routers contain buffer overflow vulnerability
Overview D-Link DIR routers contain a stack-based buffer overflow vulnerability, which may allow a remote attack to execute arbitrary code. Description CWE-121:Stack-based Buffer Overflow - CVE-2016-5681A stack-based buffer overflow occurs in the function within the cgibin binary which validates...
CVE-2015-5681
CVE-2015-5681 affects the WordPress Powerplay Gallery plugin, version 3.3. It describes an unrestricted file upload vulnerability in upload.php that allows a remote attacker to upload a file with an executable extension and then access it via a direct request to the file in *_uploadfolder/big/, p...
CVE-2014-5681
The CVE-2014-5681 entry concerns the XDA-Developers Android app (package com.quoord.tapatalkxda.activity, version 3.9.8) failing to verify X.509 certificates from SSL servers. This weakens TLS and enables man-in-the-middle attackers to spoof servers and access sensitive information via a crafted ...
Gentoo Security Advisory GLSA 200903-30 (opera)
The remote host is missing updates announced in advisory GLSA 200903-30. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...
Gentoo Security Advisory GLSA 200903-30 (opera)
The remote host is missing updates announced in advisory GLSA 200903-30. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
CVE-2008-5681
Opera before 9.63 is affected by CVE-2008-5681: the feed preview does not block unspecified scripted URLs, allowing a remote attacker to read existing subscriptions and force subscriptions to arbitrary feed URLs. Gentoo GLSA 200903-30/Opera advisories recommend upgrading to Opera 9.64 or later as...