153 matches found
CVE-2023-5688 Cross-site Scripting (XSS) - DOM in modoboa/modoboa
Cross-site Scripting XSS - DOM in GitHub repository modoboa/modoboa prior to 2.2.2...
SUSE CVE-2012-5688
ISC BIND 9.8.x before 9.8.4-P1 and 9.9.x before 9.9.2-P1, when DNS64 is enabled, allows remote attackers to cause a denial of service assertion failure and daemon exit via a crafted query...
Ubuntu 22.10 : Libksba vulnerability (USN-5688-2)
The remote Ubuntu 22.10 host has packages installed that are affected by a vulnerability as referenced in the USN-5688-2 advisory. USN-5688-1 fixed vulnerabilities in Libksba. This update provides the corresponding update for Ubuntu 22.10. Tenable has extracted the preceding description block...
CVE-2019-5688
CVE-2019-5688 affects NVIDIA NVFlash/NVUFlash and GPUModeSwitch drivers. The vulnerability allows authenticated administrators to access device memory and registers of other devices not managed by NVIDIA, enabling privilege escalation, information disclosure, or DoS. Affected components include t...
Security Bulletin: NVIDIA NVFlash, GPUModeSwitch Tool - November 2019
NVIDIA has released a software security update for NVIDIA NVFlash Tool. This update addresses issues that may lead to escalation of privileges, information disclosure, or denial of service. This update is available only to NVIDIA OEMs and partners. Go to NVIDIA Product Security. Details This...
ILIAS CMS 5.2.3 Cross Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: Cross Site Scripting in ILIAS CMS 5.2.3 Date: Apr 24, 2017 Software Link: https://www.ilias.de Exploit Author: Florian Kunushevci Contact: https://facebook.com/florianx00 CVE: CVE-2018-5688 Category: webapps 1. Description ILIAS...
ILIAS 5.2.4 - Cross-Site Scripting
ILIAS 5.2.4 - Cross-Site Scripting Exploit Title: Cross Site Scripting in ILIAS CMS 5.2.3 Date: Apr 24, 2017 Software Link: https://www.ilias.de Exploit Author: Florian Kunushevci Contact: https://facebook.com/florianx00 CVE: CVE-2018-5688 Category: webapps 1. Description ILIAS before 5.2.4 has X...
ILIAS < 5.2.4 - Cross-Site Scripting
Exploit Title: Cross Site Scripting in ILIAS CMS 5.2.3 Date: Apr 24, 2017 Software Link: https://www.ilias.de Exploit Author: Florian Kunushevci Contact: https://facebook.com/florianx00 CVE: CVE-2018-5688 Category: webapps 1. Description ILIAS before 5.2.4 has XSS via the cmd parameter to the...
CVE-2018-5688
creationtimestamp| type| source ---|---|--- 2018-01-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43595...
CVE-2018-5688
CVE-2018-5688 : ILIAS before 5.2.4 is vulnerable to cross-site scripting via the cmd parameter of displayHeader in setup/classes/class.ilSetupGUI.php (Setup component). This is confirmed by multiple sources (e.g., Exploit DB PoC for ILIAS
CVE-2015-5688
creationtimestamp| type| source ---|---|--- 2017-10-24 18:33:36+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-333x-9vgq-v2j4...
CVE-2017-5688
There is an escalation of privilege vulnerability in the Intel Solid State Drive Toolbox versions before 3.4.5 which allow a local administrative attacker to load and execute arbitrary code...
CVE-2017-5688
CVE-2017-5688 concerns Intel Solid State Drive Toolbox. The vulnerability affects Toolbox versions prior to 3.4.5 and enables a local, high-privilege attacker to load and execute arbitrary code. The issue is described as a local elevation of privilege; exploitation details are not provided in the...
CVE-2017-5688
There is an escalation of privilege vulnerability in the Intel Solid State Drive Toolbox versions before 3.4.5 which allow a local administrative attacker to load and execute arbitrary code...
CVE-2006-5688
CVE-2006-5688 entry is rejected/not used; does not correspond to an active vulnerability.
CVE-2016-5688
The WPG parser in ImageMagick before 6.9.4-4 and 7.x before 7.0.1-5, when a memory limit is set, allows remote attackers to have unspecified impact via vectors related to the SetImageExtent return-value check, which trigger 1 a heap-based buffer overflow in the SetPixelIndex function or an invali...
CVE-2016-5688
CVE-2016-5688 affects ImageMagick’s WPG parser. When a memory limit is set, processing a crafted WPG image can trigger a heap-based buffer overflow or invalid writes in SetPixelIndex/ScaleCharToQuantum, with unspecified impact. Affected versions are ImageMagick before 6.9.4-4 and 7.x before 7.0.1...
SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2016:1784-1)
ImageMagick was updated to fix 66 security issues. These security issues were fixed : - CVE-2014-9810: SEGV in dpx file handler. bsc983803. - CVE-2014-9811: Crash in xwd file handler bsc984032. - CVE-2014-9812: NULL pointer dereference in ps file handling bsc984137. - CVE-2014-9813: Crash on...
[SECURITY] [DSA 3652-1] imagemagick security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3652-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 25, 2016 https://www.debian.org/security/faq -...