123 matches found
SUSE-SU-2018:0172-1 Security update for rsync
This update for rsync fixes one issues. This security issue was fixed: - CVE-2018-5764: The parsearguments function in options.c did not prevent multiple --protect-args uses, which allowed remote attackers to bypass an argument-sanitization protection mechanism bsc1076503...
SUSE-SU-2018:0174-1 Security update for rsync
This update for rsync fixes one issues. This security issue was fixed: - CVE-2018-5764: The parsearguments function in options.c did not prevent multiple --protect-args uses, which allowed remote attackers to bypass an argument-sanitization protection mechanism bsc1076503...
CVE-2018-5764
The parsearguments function in options.c in rsyncd in rsync before 3.1.3 does not prevent multiple --protect-args uses, which allows remote attackers to bypass an argument-sanitization protection mechanism...
BELL-CVE-2018-5764 CVE-2018-5764 does not affect BellSoft software
Bulletin has no description...
CVE-2018-5764
The CVE concerns rsyncd’s parse_arguments in options.c, where multiple uses of --protect-args are not prevented, allowing remote bypass of the argument-sanitization protection mechanism. Affects rsync prior to 3.1.3 (upstream) and various vendor advisories reference mitigation through upgrading t...
CVE-2018-5764
The parsearguments function in options.c in rsyncd in rsync before 3.1.3 does not prevent multiple --protect-args uses, which allows remote attackers to bypass an argument-sanitization protection mechanism...
CVE-2018-5764
The parsearguments function in options.c in rsyncd in rsync before 3.1.3 does not prevent multiple --protect-args uses, which allows remote attackers to bypass an argument-sanitization protection mechanism...
faqs.rssing.com XSS vulnerability
Vulnerable URL: http://faqs.rssing.com/request.php?req=gsearch=%22%3E%3Cimg%20src=x%20onerror=prompt%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 21.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5764 VIP...
Rumba FTP Client 4.x - Stack buffer overflow (SEH) Exploit
Exploit for windows platform in category remote exploits Exploit Title: Rumba FTP 4.x Client Stackoverflow SEH Date: 29-10-2016 Exploit Author: Umit Aksu Vendor Homepage: http://community.microfocus.com/microfocus/mainframesolutions/rumba/w/knowledgebase/28731.rumba-ftp-4-x-security-update.aspx...
Micro Focus Rumba FTP Client 4.x Stack Overflow
Exploit Title: Rumba FTP Client 4.x stack overflow SEH Date: 29-10-2016 Exploit Author: Umit Aksu Vendor Homepage: http://community.microfocus.com/microfocus/mainframesolutions/rumba/w/knowledgebase/28731.rumba-ftp-4-x-security-update.aspx Software Link:...
Rumba FTP Client 4.x - Remote Stack Buffer Overflow (SEH)
Rumba FTP Client 4.x - Remote Stack Buffer Overflow SEH Exploit Title: Rumba FTP 4.x Client Stackoverflow SEH Date: 29-10-2016 Exploit Author: Umit Aksu Vendor Homepage: http://community.microfocus.com/microfocus/mainframesolutions/rumba/w/knowledgebase/28731.rumba-ftp-4-x-security-update.aspx...
Rumba FTP Client 4.x - Remote Stack Buffer Overflow (SEH)
Exploit Title: Rumba FTP 4.x Client Stackoverflow SEH Date: 29-10-2016 Exploit Author: Umit Aksu Vendor Homepage: http://community.microfocus.com/microfocus/mainframesolutions/rumba/w/knowledgebase/28731.rumba-ftp-4-x-security-update.aspx Software Link:...
CVE-2016-5764
Micro Focus Rumba FTP 4.X client buffer overflow makes it possible to corrupt the stack and allow arbitrary code execution. Fixed in: Rumba FTP 4.5 HF 14668. This can only occur if a client connects to a malicious server...
CVE-2016-5764
CVE-2016-5764 affects Micro Focus Rumba FTP Client 4.x. The vulnerability is a stack/buffer overflow caused by insufficient validation of user-supplied input in the Rumba FTP client, triggered when handling long directory names from a malicious FTP server. This could allow arbitrary code executio...
Apple Safari URI spoofing (CVE-2015-5764)
tl;dr Apple Safari for OS X was prone to URI spoofing vulnerability and more general a user interface spoofing. Apple released security updates for Safari 9 on OS X and assigned CVE-2015-5764. Accidentally this vulnerability was also present in iOS. Instant demo In Safari up to 8.0.8 : go to clic...
CVE-2015-5764
CVE-2015-5764 is a Safari UI spoofing vulnerability in iOS prior to iOS 9. The issue allows a remote attacker to spoof displayed URLs via unspecified vectors, enabling potential phishing-type deception. The CVE is listed among Safari 9 updates (Apple SA 2015-09-30-2) and Apple advises updating to...
CVE-2013-5764
CVE-2013-5764 affects Oracle Database Server’s Core RDBMS in versions 11.1.0.7, 11.2.0.3, and 12.1.0.1. The vulnerability is described as unspecified and allows remote authenticated users to impact availability via unknown vectors. Root cause and exact exploit details are not provided in the init...
CVE-2012-5764: IBM WebSphere Commerce password information disclosure
IBM WebSphere Commerce (V7.0 Feature Pack 5 with Bazaarvoice) stores two plain text passwords in a configuration file that could be accessible to a local authenticated user. This could allow the attacker to obtain sensitive information and potentially launch further attacks against the affected s...
Fedora Core 9 FEDORA-2009-5764 (ocsinventory)
The remote host is missing an update to ocsinventory announced via advisory FEDORA-2009-5764. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...
Immunity Canvas: WORKSIMPLE_RFI
Name| worksimplerfi ---|--- CVE| CVE-2008-5764 Exploit Pack| CANVAS Description| WorkSimple Remote File Include Notes| CVSS: 9.3 Repeatability: Infinite VENDOR: WorkSimple CVE Url: https://vulners.com/cve/CVE-2008-5764 CVE Name: CVE-2008-5764...