Lucene search
+L

71 matches found

CVE
CVE
added 2018/05/17 3:0 p.m.51 views

CVE-2018-9972

This CVE (CVE-2018-9972) affects Foxit Reader 9.0.1.1049. The vulnerability stems from ConvertToPDF_x86.dll where improper validation of user-supplied data can cause a read past the end of an allocated object. This can lead to information disclosure and, in combination with other vulnerabilities,...

6.5CVSS6.5AI score0.02857EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2018/05/17 3:0 p.m.20 views

CVE-2018-9972

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

6.8AI score0.02857EPSS
SaveExploits0References2
CVE
CVE
added 2017/03/23 6:36 a.m.55 views

CVE-2016-5755

CVE-2016-5755 affects NetIQ Access Manager; versions 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 are vulnerable to clickjacking due to a missing SAMEORIGIN filter in the "high encryption" setting. The connected documents corroborate this description and identify the affected product and the s...

6.5CVSS6.4AI score0.00502EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2015/08/17 12:0 a.m.21 views

CVE-2015-5761

CoreText in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted font file, a different vulnerability than CVE-2015-5755...

6.8CVSS7.9AI score0.03396EPSS
SaveExploits0References8
NVD
NVD
added 2015/08/17 12:0 a.m.16 views

CVE-2015-5755

CoreText in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted font file, a different vulnerability than CVE-2015-5761...

6.8CVSS7.9AI score0.03396EPSS
SaveExploits0References8
CVE
CVE
added 2015/08/16 11:0 p.m.69 views

CVE-2015-5755

CVE-2015-5755 affects CoreText in Apple iOS < 8.4.1 and OS X

6.8CVSS8.7AI score0.03396EPSS
SaveExploits0References8Affected Software3
CVE
CVE
added 2014/09/09 10:0 a.m.47 views

CVE-2014-5755

The CVE-2014-5755 entry applies to the Verizon (com.wverizonwirelessbill) Android app version 0.1, where SSL/TLS connections do not verify X.509 certificates. Root cause: missing validation of server certificates, enabling man-in-the-middle attackers to spoof servers and access sensitive informat...

5.4CVSS6AI score0.00271EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2014/07/16 2:0 p.m.62 views

CVE-2013-5755

CVE-2013-5755 affects Yealink IP Phone SIP-T38G. The public records disclose a hardcoded credential issue in the web interface: config/.htpasswd contains user (s7C9Cx.rLsWFA), admin (uoCbM.VEiKQto), and var (jhl3iZAe./qXM) passwords, enabling remote access via unspecified vectors. Connected sourc...

10CVSS6.6AI score0.04337EPSS
SaveExploits10References1Affected Software1
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.34 views

Yealink VoIP Phone SIP-T38G - Default Credentials

No description provided by source. Title: Yealink VoIP Phone SIP-T38G Default Credentials Author: Mr.Un1k0d3r & Doreth.Z10 From RingZer0 Team Vendor Homepage: http://www.yealink.com/Companyprofile.aspx Version: VoIP Phone SIP-T38G CVE: CVE-2013-5755 Description: Web interface use hardcoded defaul...

10CVSS0.6AI score0.04337EPSS
SaveExploits10
exploitpack
exploitpack
added 2014/06/13 12:0 a.m.58 views

Yealink VoIP Phone SIP-T38G - Default Credentials

Yealink VoIP Phone SIP-T38G - Default Credentials Title: Yealink VoIP Phone SIP-T38G Default Credentials Author: Mr.Un1k0d3r & Doreth.Z10 From RingZer0 Team Vendor Homepage: http://www.yealink.com/Companyprofile.aspx Version: VoIP Phone SIP-T38G CVE: CVE-2013-5755 Description: Web interface use...

10CVSS0.8AI score0.04337EPSS
SaveExploits10
Packet Storm
Packet Storm
added 2014/06/13 12:0 a.m.45 views

Yealink VoIP Phone SIP-T38G Default Credentials

Title: Yealink VoIP Phone SIP-T38G Default Credentials Author: Mr.Un1k0d3r & Doreth.Z10 From RingZer0 Team Vendor Homepage: http://www.yealink.com/Companyprofile.aspx Version: VoIP Phone SIP-T38G CVE: CVE-2013-5755 Description: Web interface use hardcoded default credential in /config/.htpasswd...

10CVSS0.8AI score0.04337EPSS
SaveExploits10
Exploit DB
Exploit DB
added 2014/06/13 12:0 a.m.51 views

Yealink VoIP Phone SIP-T38G - Default Credentials

Title: Yealink VoIP Phone SIP-T38G Default Credentials Author: Mr.Un1k0d3r & Doreth.Z10 From RingZer0 Team Vendor Homepage: http://www.yealink.com/Companyprofile.aspx Version: VoIP Phone SIP-T38G CVE: CVE-2013-5755 Description: Web interface use hardcoded default credential in /config/.htpasswd...

10CVSS5.2AI score0.04337EPSS
SaveExploits10
Tenable Nessus
Tenable Nessus
added 2013/07/12 12:0 a.m.57 views

Oracle Linux 5 : kernel (ELSA-2008-0957)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2008-0957 advisory. - i386 vDSO: use installspecialmapping Peter Zijlstra 460275 460276 CVE-2008-3527 - fs remove SUID when splicing into an inode Eric Sandeen 464451 4644...

7.1CVSS6.2AI score0.03209EPSS
SaveExploits7References9
Tenable Nessus
Tenable Nessus
added 2009/09/24 12:0 a.m.25 views

SuSE 10 Security Update : libxml2 (ZYPP Patch Number 5755)

This update fixes an integer overflow in libxml2 that could lead to memory corruption and arbitrary code execution. CVE-2008-4226 Thanks to: Drew Yao of Apple Product Security %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

10CVSS8.6AI score0.04051EPSS
SaveExploits1References2
CVE
CVE
added 2008/12/30 5:0 p.m.62 views

CVE-2008-5755

CVE-2008-5755 is a stack-based buffer overflow in IntelliTamper 2.07/2.08 that allows remote code execution via a crafted .map file containing a long URL. The vulnerability arises from improper handling when reading MAP files, leading to stack corruption and potential EIP overwrite (examples show...

9.3CVSS8.2AI score0.05815EPSS
SaveExploits3References4Affected Software1
Cvelist
Cvelist
added 2008/12/30 5:0 p.m.25 views

CVE-2008-5755

Stack-based buffer overflow in IntelliTamper 2.07 and 2.08 allows remote attackers to execute arbitrary code via a MAP file containing a long URL, possibly a related issue to CVE-2006-2494...

8AI score0.05815EPSS
SaveExploits3References4
Circl
Circl
added 2008/07/21 12:0 a.m.8 views

CVE-2008-5755

creationtimestamp| type| source ---|---|--- 2008-07-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6106 2008-12-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7582 2026-06-28 20:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mperlhfj3v2t...

9.3CVSS5.8AI score0.05815EPSS
SaveExploits3References3
Circl
Circl
added 2008/06/08 12:0 a.m.6 views

CVE-2008-2692

creationtimestamp| type| source ---|---|--- 2008-06-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5755...

7.5CVSS5.8AI score0.0101EPSS
SaveExploits1References1
OpenVAS
OpenVAS
added 2008/01/17 12:0 a.m.54 views

Debian Security Advisory DSA 1381-1 (linux-2.6)

The remote host is missing an update to linux-2.6 announced via advisory DSA 1381-1. OpenVAS Vulnerability Test $Id: deb13811.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1381-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

7.2CVSS1.2AI score0.0082EPSS
SaveExploits2
OpenVAS
OpenVAS
added 2008/01/17 12:0 a.m.67 views

Debian: Security Advisory (DSA-1381-2)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.2CVSS5.8AI score0.0082EPSS
SaveExploits2References3
Rows per page
Query Builder