[ASA-201805-20] bind: denial of service

Arch Linux Security Advisory ASA-201805-20 ========================================== Severity: Medium Date : 2018-05-20 CVE-ID : CVE-2018-5736 CVE-2018-5737 Package : bind Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-706 Summary ======= The package bind before...

CVE-2016-5737

The CVE-2016-5737 entry describes a vulnerability in the OpenStack puppet-gerrit module (OpenStack-infra). The root cause is that Gerrit configuration improperly marks text/html as a safe mimetype, which could allow remote attackers to perform cross-site scripting (XSS) via a crafted review. The ...

CVE-2015-5737

FortiClient prior to version 5.2.4 is affected by CVE-2015-5737 (and related CIS-CWE IVs) due to several drivers (mdare64_48.sys, mdare32_48.sys, mdare32_52.sys, mdare64_52.sys, Fortishield.sys) that improperly restrict access to process and Windows registry management APIs. The IOCTL 0x2220c8 ex...

CVE-2014-5737

The CVE-2014-5737 entry relates to the CDsoft (com.wCDSOFT) Android app version 0.2 failing to verify X.509 certificates from SSL servers. This creates susceptibility to man-in-the-middle attacks, enabling an attacker to spoof servers and access sensitive information via a crafted certificate. Co...

CVE-2008-5737

CVE-2008-5737 is a SQL injection vulnerability affecting Nodstrum MySQL Calendar (versions 1.1 and 1.2). The flaw occurs in index.php where the username parameter can be manipulated to execute arbitrary SQL commands, enabling an attacker to access or modify data. The CVSSv2 base score is 7.5 (Hig...

CVE-2008-5737

SQL injection vulnerability in index.php in Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2008-5737

creationtimestamp| type| source ---|---|--- 2008-12-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7551...

Design/Logic Flaw

The password reset feature in PunBB 1.2.16 and earlier uses predictable random numbers based on the system time, which allows remote authenticated users to determine the new password via a brute force attack on a seed that is based on the approximate creation time of the targeted account. NOTE:...

CVE-2007-5737

Technical details about CVE-2007-5737 are not publicly provided in the supplied documents. The description notes an unrestricted file upload in Korean GHBoard, but no affected versions, vectors, or fixes are given here. Monitor for updates.

CVE-2006-5737

PunBB is affected by CVE-2006-5737. The vulnerability arises from a predictable cookie_seed value that can be derived from the time of registration/installation of the superadmin account, which may allow local users to perform unauthorized actions. The available sources describe the root cause as...