46 matches found
RHEL 9 : java-11-openjdk (RHSA-2022:5695)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:5695 advisory. The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. The following...
OpenBMCS 2.4 Secret Disclosure
OpenBMCS 2.4 Secrets Disclosure Vendor: OPEN BMCS Product web page: https://www.openbmcs.com Affected version: 2.4 Summary: Building Management & Controls System BMCS. No matter what the size of your business, the OpenBMCS software has the ability to expand to hundreds of controllers. Our product...
OpenBMCS 2.4 Secret Disclosure Vulnerability
OpenBMCS 2.4 Secrets Disclosure Vendor: OPEN BMCS Product web page: https://www.openbmcs.com Affected version: 2.4 Summary: Building Management & Controls System BMCS. No matter what the size of your business, the OpenBMCS software has the ability to expand to hundreds of controllers. Our product...
CVE-2019-5695
The CVE-2019-5695 issue concerns NVIDIA GeForce Experience (pre-3.20.1) and Windows GPU Display Driver across all versions, where the local service provider component improperly loads Windows system DLLs without path/signature validation (a DLL preloading/binary planting flaw). This can enable a ...
Security Bulletin: NVIDIA GeForce Experience - November 2019
NVIDIA has released a software security update for NVIDIA® GeForce Experience™. This update addresses issues that may lead to code execution, information disclosure, or denial of service. To protect your system, download and install this software update through the GeForce Experience Downloads...
CVE-2018-5695
The WpJobBoard plugin 4.4.4 for WordPress allows SQL injection via the order or sort parameter to the wpjb-job or wpjb-alerts module, with a request to wp-admin/admin.php...
CVE-2018-5695
The CVE refers to WPJobBoard plugin for WordPress, version 4.4.4, where SQL injection is possible via the order or sort parameter passed to the wpjb-job or wpjb-alerts modules, triggered by a request to wp-admin/admin.php. This aligns with CNVD-2018-01254 and NVD details, which describe a paramet...
WpJobBoard v4.4.4 - Multiple SQL Injection Vulnerabilities
Document Title: =============== WpJobBoard v4.4.4 - Multiple SQL Injection Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1940 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-5695 CVE-ID: ======= CVE-2018-5695 Release Date:...
WpJobBoard v4.4.4 - Multiple SQL Injection Vulnerabilities
Document Title: =============== WpJobBoard v4.4.4 - Multiple SQL Injection Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1940 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-5695 CVE-ID: ======= CVE-2018-5695 Release Date:...
CVE-2015-5695
Designate 2015.1.0 through 1.0.0.0b1 as packaged in OpenStack Kilo does not enforce RecordSets per domain, and Records per RecordSet quotas when processing an internal zone file transfer, which might allow remote attackers to cause a denial of service infinite loop via a crafted resource record s...
CVE-2015-5695
CVE-2015-5695 affects OpenStack Designate (Kilo: 2015.1.0 through 1.0.0.0b1). The vulnerability arises because quotas for RecordSets per domain and Records per RecordSet are not enforced when processing internal zone file transfers, which can allow a remote attacker to trigger an infinite loop in...
CVE-2017-5695
CVE-2017-5695 describes a data corruption vulnerability in Intel SSD firmware affecting various consumer/enterprise drives (e.g., 540s, Pro 5400s, E 5400s, DC S3100 series). The issue allows local attackers with physical drive access to cause a denial of service via unspecified vectors. Lenovo an...
CVE-2006-5695
This CVE entry is rejected and does not represent an active vulnerability entry.
CVE-2012-5695
CVE-2012-5695 describes CSRF vulnerabilities in Bulb Security SPF (Smartphone Pentest Framework) affecting versions 0.1.2–0.1.4. The issues allow an attacker to hijack administrator authentication to trigger requests that perform (1) shell metacharacter actions, (2) SQL injection, or (3) sending ...
CVE-2014-5695
The CVE-2014-5695 entry affects the Android app Hello Kitty Cafe (com.sd.google.helloKittyCafe) version 1.4.0, where SSL certificate verification is not performed for servers. This allows a man-in-the-middle to spoof servers and capture sensitive information via a crafted certificate. The core ca...
CVE-2013-5695 Multilple Cross Site Scripting (XSS) Attacks in Ops View
CVE-2013-5695 Multilple Cross Site Scripting XSS Attacks in Ops View Versions: Opsview pre 4.4.1 Author: J. Oquendo joquendo at e-fensive dot net I. ADVISORY Title: Multilple Cross Site Scripting XSS Attacks in Ops View Date published: 2013-10-28 Vendor contacted: 2013-09-04 II. BACKGROUND Opsvie...
CVE-2013-5695
CVE-2013-5695 affects Opsview prior to 4.4.1 with multiple XSS weaknesses exposed in web UI endpoints: /admin/auditlog, /info/host/, /viewport/, /login, and /status/service/recheck via various parameters (id, PATH_INFO, back, from). The root cause is unvalidated user input that allows injection o...
YouSendIt Client Detection
Binary data 5695.prm...
CVE-2008-5695
wp-admin/options.php in WordPress MU before 1.3.2, and WordPress 2.3.2 and earlier, does not properly validate requests to update an option, which allows remote authenticated users with manageoptions and uploadfiles capabilities to execute arbitrary code by uploading a PHP script and adding this...