80 matches found
CVE-2018-5726
CVE-2018-5726 affects MASTER IPCAMERA01 3.3.4.2103. The vulnerability enables unauthenticated remote attackers to obtain sensitive information via a crafted HTTP request, evidenced by disclosures of username, password, and configuration settings. Affected device: IP camera model indicated in sour...
CVE-2015-5726
The CVE-2015-5726 issue affects Botan BER decoder: an empty BIT STRING in ASN.1 data can cause a remote denial of service (application crash) in Botan 0.10.x before 1.10.10 and 1.11.x before 1.11.19. Debian advisories confirm fixes for botan1.10 in Jessie (upgrade to 1.10.8-2+deb8u1). If applicab...
Debian DSA-3565-1 : botan1.10 - security update
Several security vulnerabilities were found in botan1.10, a C++ library which provides support for many common cryptographic operations, including encryption, authentication, X.509v3 certificates and CRLs. - CVE-2015-5726 The BER decoder would crash due to reading from offset 0 of an empty vector...
[SECURITY] [DSA 3565-1] botan1.10 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3565-1 [email protected] https://www.debian.org/security/ Sebastien Delafond May 02, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3565-1] botan1.10 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3565-1 [email protected] https://www.debian.org/security/ Sebastien Delafond May 02, 2016 https://www.debian.org/security/faq -...
Debian: Security Advisory (DSA-3565-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DLA-449-1 botan1.10 - security update
Bulletin has no description...
Mageia: Security Advisory (MGASA-2016-0102)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Updated botan packages fix security vulnerability
The BER decoder would crash due to reading from offset 0 of an empty vector if it encountered a BIT STRING which did not contain any data at all. This can be used to easily crash applicatons reading untrusted ASN.1 data, but does not seem exploitable for code execution CVE-2015-5726. The BER...
CVE-2014-5726
The CVE-2014-5726 entry concerns the Android-based Security Service myBranch App (package com.tyfone.ssfcu.mbanking, version 7.88.00.145) that fails to verify X.509 certificates from SSL servers. This creates a MITM risk where an attacker could spoof servers and access sensitive data via a crafte...
CVE-2013-5726
Tweetbot 1.3.3 for Mac, and 2.8.5 for iPad and iPhone, does not require confirmation of 1 follow or 2 favorite actions, which allows remote attackers to automatically force the user to perform undesired actions, as demonstrated via the tweetbot:///follow/ URL...
CVE-2013-5726
Tweetbot 1.3.3 for Mac, and 2.8.5 for iPad and iPhone, does not require confirmation of 1 follow or 2 favorite actions, which allows remote attackers to automatically force the user to perform undesired actions, as demonstrated via the tweetbot:///follow/ URL...
Tweetbot Lack Of User Confirmation
Affected Vendor: http://tapbots.com/ - Affected Software: Tweetbot for Mac, iPad and iPhone - Affected Version: Mac: 1.3.3 - iPad: 2.8.5 - iPhone: 2.8.5 - Issue Type: Lack of user confirmation leading to Twitter action revealing the user's Twitter identity - Release Date: November 1, 2013 -...
Winamp < 5.601 MIDI Timestamp Stack Buffer Overflow
Binary data 5726.prm...
CVE-2008-5726
CVE-2008-5726 describes an SQL injection in stormBoards 1.0.1's thread.php that lets remote attackers execute arbitrary SQL commands via the id parameter. Affected software: stormBoards 1.0.1; vulnerable component: thread.php. Root cause: unsafely concatenated SQL queries exposed to user-supplied...
CVE-2008-5726
creationtimestamp| type| source ---|---|--- 2008-12-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7565...
CVE-2007-5726
CVE-2007-5726 affects Sun Solaris 10 SCTP: when a LISTEN socket exists, remote denial of service (panic) can occur via INIT processing. Remediation is patch 127716-01 (SPARC) or 127717-01 (x86); see SunAlerts 1000936.1. No exploitation details are provided in the supplied documents.
Solaris 10 (sparc) : 127716-01
SunOS 5.10: ip Patch. Date this patch was last updated by Sun : Oct/05/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0...
CVE-2006-5726
CVE-2006-5726 affects the UFS filesystem in Solaris 10. The vulnerability is triggered by the alloccgblk function when mounting crafted UFS filesystems with malformed data structures, allowing local users to cause a denial of service through memory corruption. The published entries (NVD, CVE, CVE...