CVE-2020-5720

CVE-2020-5720 concerns MikroTik WinBox (pre-3.21) with a path traversal flaw enabling creation of arbitrary files in directories that WinBox can write to. The vulnerability arises when the application processes paths without proper filtering, potentially exploited if the device connects to a mali...

CVE-2019-5720

CVE-2019-5720 affects FrontAccounting 2.4.6. The vulnerability is a SQL Injection in includes/db/class.reflines_db.inc, exploitable via the reference field using the void_transaction.php?filterType parameter, potentially allowing an attacker to extract the entire database. Connected sources (RH, ...

CVE-2018-5720

CVE-2018-5720 affects the DODOCOOL DC38 3-in-1 N300 Mini Wireless Range Extend RTN2-AW.GD.R3465.1.20161103. The issue is a Cross-site Request Forgery (CSRF) that lets an attacker hijack user authentication to modify settings, including changing usernames/passwords and the Wi‑Fi password. Public r...

CVE-2016-5720

CVE-2016-5720 corresponds to DLL hijacking in Microsoft Skype for Windows, caused by untrusted search paths involving msi.dll, dpapi.dll, or cryptui.dll located in the current working directory. The connected OpenVAS/Kaspersky/CNVD entries confirm this as a DLL-search-path issue in Skype’s instal...

CVE-2016-5720

creationtimestamp| type| source ---|---|--- 2016-09-27 19:54:25+00:00| published-proof-of-concept| https://t.me/FullDisclosure/94...

CVE-2015-5720

Malware Information Sharing Platform (MISP) versions prior to 2.3.90 expose multiple cross-site scripting (XSS) vulnerabilities in the template-creation feature. Attack vectors involve add.ctp, edit.ctp, and ajaxification.js, enabling remote attackers to inject arbitrary web script or HTML. The p...

CVE-2015-5720

Multiple cross-site scripting XSS vulnerabilities in the template-creation feature in Malware Information Sharing Platform MISP before 2.3.90 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 add.ctp, 2 edit.ctp, and 3 ajaxification.js...

Gentoo Security Advisory GLSA 201312-13

Gentoo Linux Local Security Checks GLSA 201312-13 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

CVE-2014-5720

The CVE-2014-5720 entry covers the Android app Bike Race Free - Top Free Game (package com.topfreegames.bikeracefreeworld), version 4.3, which does not verify X.509 certificates from SSL servers. This improper certificate validation enables man-in-the-middle attackers to spoof servers and obtain ...

CVE-2012-2569

Cross-site scripting XSS vulnerability in Synametrics Technologies Xeams 4.4 Build 5720 allows remote attackers to inject arbitrary web script or HTML via the body of an email...

Cross site scripting

Cross-site scripting XSS vulnerability in Synametrics Technologies Xeams 4.4 Build 5720 allows remote attackers to inject arbitrary web script or HTML via the body of an email...

CVE-2012-2569

Cross-site scripting XSS vulnerability in Synametrics Technologies Xeams 4.4 Build 5720 allows remote attackers to inject arbitrary web script or HTML via the body of an email...

GLSA-201312-13 : Wireshark: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201312-13 Wireshark: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Wireshark. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly execute arbitrary...

[ MDVSA-2013:238 ] wireshark

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:238 http://www.mandriva.com/en/support/security/ Package : wireshark Date : September 19, 2013 Affected: Business Server 1.0, Enterprise Server 5.0 Problem Description: Multiple vulnerabilities was found and...

Wireshark Multiple Vulnerabilities-01 (Sep 2013) - Mac OS X

Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...

Wireshark Multiple Vulnerabilities-01 (Sep 2013) - Windows

Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...

Updated wireshark package fixes security vulnerabilities

The ASSA R3 dissector could go into an infinite loop CVE-2013-5719. The RTPS dissector could overflow a buffer CVE-2013-5720. The MQ dissector could crash CVE-2013-5721. The LDAP dissector could crash CVE-2013-5722. The Netmon file parser could crash wpna-sec-2013-60...

CVE-2013-5720

Buffer overflow in the RTPS dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2013-5720

Buffer overflow in the RTPS dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2013-5720

Wireshark is affected by CVE-2013-5720. The RTPS dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 is vulnerable due to a buffer overflow, allowing remote attackers to cause a denial of service (crash) via a crafted packet. Affected versions: Wireshark 1.8.x (pre-1.8.10) and 1.1...