64 matches found
SUSE SLED12 / SLES12 Security Update : kdump (SUSE-SU-2016:2553-1)
This update for kdump provides several fixes and enhancements : - Refresh kdumprd if /etc/hosts or /etc/nsswitch.conf is changed. bsc943214 - Add a separate systemd service to rebuild kdumprd at boot. bsc943214 - Improve network setup in the kdump environment by reading configuration from wicked ...
openSUSE Security Update : kdump (openSUSE-2016-1215)
This update for kdump provides several fixes and enhancements : - Refresh kdumprd if /etc/hosts or /etc/nsswitch.conf is changed. bsc943214 - Add a separate systemd service to rebuild kdumprd at boot. bsc943214 - Improve network setup in the kdump environment by reading configuration from wicked ...
CVE-2015-5759
WebKit in Apple iOS before 8.4.1 allows remote attackers to spoof clicks via a crafted web site that leverages tap events...
CVE-2015-5759
CVE-2015-5759 concerns WebKit in Apple iOS prior to 8.4.1, where a crafted web site exploiting tap events can cause spoofed clicks on other pages. The issue is tied to WebKit’s handling of tap events, enabling a remote attacker to mislead user input. Affected product: iOS devices with WebKit (pre...
CVE-2014-5759
The CVE-2014-5759 entry concerns the Android app “Awesome Antivirus 2014” (com.yoursite.top5antivirus2014) version 1. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a...
CVE-2013-5759
CVE-2013-5759 is a duplicate/rejected candidate; it is not an independent vulnerability. Connected records identify CVE-2013-5758 as the authentic entry describing a remote command execution via cgi-bin/cgiServer.exx on Yealink SIP-T38G, where remote authenticated users can execute system command...
Yealink VoIP Phone SIP-T38G - Privileges Escalation
No description provided by source. Title: Yealink VoIP Phone SIP-T38G Privileges Escalation Author: Mr.Un1k0d3r & Doreth.Z10 From RingZer0 Team Vendor Homepage: http://www.yealink.com/Companyprofile.aspx Version: VoIP Phone SIP-T38G CVE: CVE-2013-5759 Description: Using the fact that cgiServer.ex...
Yealink VoIP Phone SIP-T38G - Multiple Vulnerabilities
Exploit for hardware platform in category remote exploits Title: Yealink VoIP Phone SIP-T38G Privileges Escalation Author: Mr.Un1k0d3r & Doreth.Z10 From RingZer0 Team Vendor Homepage: http://www.yealink.com/Companyprofile.aspx Version: VoIP Phone SIP-T38G CVE: CVE-2013-5759 Description: Using the...
Yealink VoIP Phone SIP-T38G - Privilege Escalation
Yealink VoIP Phone SIP-T38G - Privilege Escalation Title: Yealink VoIP Phone SIP-T38G Privileges Escalation Author: Mr.Un1k0d3r & Doreth.Z10 From RingZer0 Team Vendor Homepage: http://www.yealink.com/Companyprofile.aspx Version: VoIP Phone SIP-T38G CVE: CVE-2013-5759 Description: Using the fact...
Yealink VoIP Phone SIP-T38G - Local File Inclusion
Title: Yealink VoIP Phone SIP-T38G Local File Inclusion Author: Mr.Un1k0d3r & Doreth.Z10 From RingZer0 Team Vendor Homepage: http://www.yealink.com/Companyprofile.aspx Version: VoIP Phone SIP-T38G CVE: CVE-2013-5756, CVE-2013-5757 Description: Web interface contain a vulnerability that allow any...
Yealink VoIP Phone SIP-T38G - Privilege Escalation
Title: Yealink VoIP Phone SIP-T38G Privileges Escalation Author: Mr.Un1k0d3r & Doreth.Z10 From RingZer0 Team Vendor Homepage: http://www.yealink.com/Companyprofile.aspx Version: VoIP Phone SIP-T38G CVE: CVE-2013-5759 Description: Using the fact that cgiServer.exx run under the root privileges we...
Yealink VoIP Phone SIP-T38G Privilege Escalation
Title: Yealink VoIP Phone SIP-T38G Privileges Escalation Author: Mr.Un1k0d3r & Doreth.Z10 From RingZer0 Team Vendor Homepage: http://www.yealink.com/Companyprofile.aspx Version: VoIP Phone SIP-T38G CVE: CVE-2013-5759 Description: Using the fact that cgiServer.exx run under the root privileges we...
CVE-2012-5759
The IBM WebSphere DataPower XC10 Appliance 2.0.0.0 through 2.0.0.3 and 2.1.0.0 through 2.1.0.2 allows remote authenticated users to bypass intended administrative-role requirements and perform arbitrary JMX operations via unspecified vectors...
CVE-2012-5759
CVE-2012-5759 affects IBM WebSphere DataPower XC10 Appliance (versions 2.0.0.0–2.0.0.3 and 2.1.0.0–2.1.0.2). The issue allows remote authenticated users to bypass administrative-role requirements and perform arbitrary JMX operations via unspecified vectors. Impact is described as enabling adminis...
SuSE 11.1 Security Update : tomcat6 (SAT Patch Number 5759)
This update fixes a regression in parameter passing in urldecoding of parameters that contain spaces. In addition, multiple weaknesses in HTTP DIGESTS have been fixed CVE-2011-1184 : - The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33 and...
CVE-2008-5759
Cross-site scripting XSS vulnerability in FlatnuX CMS aka Flatnuke3 2008-12-11 allows remote attackers to inject arbitrary web script or HTML via the name parameter in an updaterecord action to index.php in the 08Files module. NOTE: the provenance of this information is unknown; the details are...
CVE-2008-5759
CVE-2008-5759 is a cross-site scripting (XSS) vulnerability in FlatnuX CMS (aka Flatnuke3). The affected component is the 08_Files module (index.php) and the issue arises from the name parameter in an updaterecord action, allowing remote attackers to inject arbitrary web script or HTML. The docum...
