CVE-2023-5688

CVE-2023-5688 affects modoboa/modoboa prior to 2.2.2 and is described as a DOM-based Cross-site Scripting (XSS) vulnerability. The vulnerability is triggered through the browser environment, allowing an attacker to execute malicious scripts in a user’s session. Public references confirm the issue...

CVE-2023-5688 Cross-site Scripting (XSS) - DOM in modoboa/modoboa

Cross-site Scripting XSS - DOM in GitHub repository modoboa/modoboa prior to 2.2.2...

SUSE CVE-2012-5688

ISC BIND 9.8.x before 9.8.4-P1 and 9.9.x before 9.9.2-P1, when DNS64 is enabled, allows remote attackers to cause a denial of service assertion failure and daemon exit via a crafted query...

Ubuntu 22.10 : Libksba vulnerability (USN-5688-2)

The remote Ubuntu 22.10 host has packages installed that are affected by a vulnerability as referenced in the USN-5688-2 advisory. USN-5688-1 fixed vulnerabilities in Libksba. This update provides the corresponding update for Ubuntu 22.10. Tenable has extracted the preceding description block...

CVE-2019-5688

CVE-2019-5688 affects NVIDIA NVFlash/NVUFlash and GPUModeSwitch drivers. The vulnerability allows authenticated administrators to access device memory and registers of other devices not managed by NVIDIA, enabling privilege escalation, information disclosure, or DoS. Affected components include t...

Security Bulletin: NVIDIA NVFlash, GPUModeSwitch Tool - November 2019

NVIDIA has released a software security update for NVIDIA NVFlash Tool. This update addresses issues that may lead to escalation of privileges, information disclosure, or denial of service. This update is available only to NVIDIA OEMs and partners. Go to NVIDIA Product Security. Details This...

ILIAS CMS 5.2.3 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Cross Site Scripting in ILIAS CMS 5.2.3 Date: Apr 24, 2017 Software Link: https://www.ilias.de Exploit Author: Florian Kunushevci Contact: https://facebook.com/florianx00 CVE: CVE-2018-5688 Category: webapps 1. Description ILIAS...

ILIAS 5.2.4 - Cross-Site Scripting

ILIAS 5.2.4 - Cross-Site Scripting Exploit Title: Cross Site Scripting in ILIAS CMS 5.2.3 Date: Apr 24, 2017 Software Link: https://www.ilias.de Exploit Author: Florian Kunushevci Contact: https://facebook.com/florianx00 CVE: CVE-2018-5688 Category: webapps 1. Description ILIAS before 5.2.4 has X...

CVE-2018-5688

creationtimestamp| type| source ---|---|--- 2018-01-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43595...

ILIAS < 5.2.4 - Cross-Site Scripting

Exploit Title: Cross Site Scripting in ILIAS CMS 5.2.3 Date: Apr 24, 2017 Software Link: https://www.ilias.de Exploit Author: Florian Kunushevci Contact: https://facebook.com/florianx00 CVE: CVE-2018-5688 Category: webapps 1. Description ILIAS before 5.2.4 has XSS via the cmd parameter to the...

CVE-2018-5688

CVE-2018-5688 : ILIAS before 5.2.4 is vulnerable to cross-site scripting via the cmd parameter of displayHeader in setup/classes/class.ilSetupGUI.php (Setup component). This is confirmed by multiple sources (e.g., Exploit DB PoC for ILIAS

scotch-blog (>=0.1.0 <=0.1.7) potentially affected by CVE-2015-5688 via geddy (>=0.8.14 <=0.9.18)

geddy NPM version =0.8.14, =0.1.0, =0.1.7 Source cves: CVE-2015-5688 Source advisory: OSV:GHSA-333X-9VGQ-V2J4...

CVE-2015-5688

creationtimestamp| type| source ---|---|--- 2017-10-24 18:33:36+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-333x-9vgq-v2j4...

CVE-2017-5688

There is an escalation of privilege vulnerability in the Intel Solid State Drive Toolbox versions before 3.4.5 which allow a local administrative attacker to load and execute arbitrary code...

CVE-2017-5688

CVE-2017-5688 concerns Intel Solid State Drive Toolbox. The vulnerability affects Toolbox versions prior to 3.4.5 and enables a local, high-privilege attacker to load and execute arbitrary code. The issue is described as a local elevation of privilege; exploitation details are not provided in the...

CVE-2017-5688

There is an escalation of privilege vulnerability in the Intel Solid State Drive Toolbox versions before 3.4.5 which allow a local administrative attacker to load and execute arbitrary code...

CVE-2006-5688

...

CVE-2006-5688

CVE-2006-5688 entry is rejected/not used; does not correspond to an active vulnerability.

CVE-2016-5688

CVE-2016-5688 affects ImageMagick’s WPG parser. When a memory limit is set, processing a crafted WPG image can trigger a heap-based buffer overflow or invalid writes in SetPixelIndex/ScaleCharToQuantum, with unspecified impact. Affected versions are ImageMagick before 6.9.4-4 and 7.x before 7.0.1...

CVE-2016-5688

The WPG parser in ImageMagick before 6.9.4-4 and 7.x before 7.0.1-5, when a memory limit is set, allows remote attackers to have unspecified impact via vectors related to the SetImageExtent return-value check, which trigger 1 a heap-based buffer overflow in the SetPixelIndex function or an invali...