71 matches found
CVE-2018-9972
This CVE (CVE-2018-9972) affects Foxit Reader 9.0.1.1049. The vulnerability stems from ConvertToPDF_x86.dll where improper validation of user-supplied data can cause a read past the end of an allocated object. This can lead to information disclosure and, in combination with other vulnerabilities,...
CVE-2018-9972
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
CVE-2016-5755
CVE-2016-5755 affects NetIQ Access Manager; versions 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 are vulnerable to clickjacking due to a missing SAMEORIGIN filter in the "high encryption" setting. The connected documents corroborate this description and identify the affected product and the s...
CVE-2015-5761
CoreText in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted font file, a different vulnerability than CVE-2015-5755...
CVE-2015-5755
CoreText in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted font file, a different vulnerability than CVE-2015-5761...
CVE-2015-5755
CVE-2015-5755 affects CoreText in Apple iOS < 8.4.1 and OS X
CVE-2014-5755
The CVE-2014-5755 entry applies to the Verizon (com.wverizonwirelessbill) Android app version 0.1, where SSL/TLS connections do not verify X.509 certificates. Root cause: missing validation of server certificates, enabling man-in-the-middle attackers to spoof servers and access sensitive informat...
CVE-2013-5755
CVE-2013-5755 affects Yealink IP Phone SIP-T38G. The public records disclose a hardcoded credential issue in the web interface: config/.htpasswd contains user (s7C9Cx.rLsWFA), admin (uoCbM.VEiKQto), and var (jhl3iZAe./qXM) passwords, enabling remote access via unspecified vectors. Connected sourc...
Yealink VoIP Phone SIP-T38G - Default Credentials
No description provided by source. Title: Yealink VoIP Phone SIP-T38G Default Credentials Author: Mr.Un1k0d3r & Doreth.Z10 From RingZer0 Team Vendor Homepage: http://www.yealink.com/Companyprofile.aspx Version: VoIP Phone SIP-T38G CVE: CVE-2013-5755 Description: Web interface use hardcoded defaul...
Yealink VoIP Phone SIP-T38G - Default Credentials
Yealink VoIP Phone SIP-T38G - Default Credentials Title: Yealink VoIP Phone SIP-T38G Default Credentials Author: Mr.Un1k0d3r & Doreth.Z10 From RingZer0 Team Vendor Homepage: http://www.yealink.com/Companyprofile.aspx Version: VoIP Phone SIP-T38G CVE: CVE-2013-5755 Description: Web interface use...
Yealink VoIP Phone SIP-T38G Default Credentials
Title: Yealink VoIP Phone SIP-T38G Default Credentials Author: Mr.Un1k0d3r & Doreth.Z10 From RingZer0 Team Vendor Homepage: http://www.yealink.com/Companyprofile.aspx Version: VoIP Phone SIP-T38G CVE: CVE-2013-5755 Description: Web interface use hardcoded default credential in /config/.htpasswd...
Yealink VoIP Phone SIP-T38G - Default Credentials
Title: Yealink VoIP Phone SIP-T38G Default Credentials Author: Mr.Un1k0d3r & Doreth.Z10 From RingZer0 Team Vendor Homepage: http://www.yealink.com/Companyprofile.aspx Version: VoIP Phone SIP-T38G CVE: CVE-2013-5755 Description: Web interface use hardcoded default credential in /config/.htpasswd...
Oracle Linux 5 : kernel (ELSA-2008-0957)
The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2008-0957 advisory. - i386 vDSO: use installspecialmapping Peter Zijlstra 460275 460276 CVE-2008-3527 - fs remove SUID when splicing into an inode Eric Sandeen 464451 4644...
SuSE 10 Security Update : libxml2 (ZYPP Patch Number 5755)
This update fixes an integer overflow in libxml2 that could lead to memory corruption and arbitrary code execution. CVE-2008-4226 Thanks to: Drew Yao of Apple Product Security %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...
CVE-2008-5755
CVE-2008-5755 is a stack-based buffer overflow in IntelliTamper 2.07/2.08 that allows remote code execution via a crafted .map file containing a long URL. The vulnerability arises from improper handling when reading MAP files, leading to stack corruption and potential EIP overwrite (examples show...
CVE-2008-5755
Stack-based buffer overflow in IntelliTamper 2.07 and 2.08 allows remote attackers to execute arbitrary code via a MAP file containing a long URL, possibly a related issue to CVE-2006-2494...
CVE-2008-5755
creationtimestamp| type| source ---|---|--- 2008-07-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6106 2008-12-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7582 2026-06-28 20:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mperlhfj3v2t...
CVE-2008-2692
creationtimestamp| type| source ---|---|--- 2008-06-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5755...
Debian Security Advisory DSA 1381-1 (linux-2.6)
The remote host is missing an update to linux-2.6 announced via advisory DSA 1381-1. OpenVAS Vulnerability Test $Id: deb13811.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1381-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian: Security Advisory (DSA-1381-2)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...