69 matches found
CVE-2015-5771
Quartz Composer Framework in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted QuickTime file...
CVE-2015-5771
CVE-2015-5771 affects Apple OS X Quartz Composer Framework. Based on the provided documents, the vulnerability arises from memory corruption in the framework’s handling/parsing of QuickTime files, allowing remote attackers to execute arbitrary code or cause an application crash on OS X versions p...
CVE-2014-5771
Credit Union of Texas Mobile (Fi_Mobile.CUOT) Android app 1.1 is vulnerable due to lack of X.509 certificate validation in SSL/TLS, allowing MITM attacker to spoof servers and access sensitive data via crafted certificates. Affected: CUOT Android app v1.1. No remediation details provided in the c...
CVE-2013-5771
CVE-2013-5771 concerns Oracle Database Server XML Parser vulnerabilities in Oracle Database Server versions 11.1.0.7, 11.2.0.2, 11.2.0.3, and 12.1.0.1. The issue, described as an unspecified vulnerability in the XML Parser component, could allow remote attackers to affect confidentiality and avai...
Oracle Database Multiple Vulnerabilities (October 2013 CPU) (BEAST)
The remote Oracle database server is missing the October 2013 Critical Patch Update CPU. It is, therefore, affected by multiple security vulnerabilities in the following components : - Core RDBMS - Oracle Security service - XML Parser %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
CVE-2008-5771
CVE-2008-5771 describes a directory traversal vulnerability in test.php of PHP Weather 2.2.2. The language parameter can be manipulated to trigger directory traversal, enabling remote attackers to include and execute arbitrary local files. This represents a potential server-side impact on affecte...
CVE-2008-5771
creationtimestamp| type| source ---|---|--- 2008-12-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7451...
CVE-2007-5771
CVE-2007-5771 affects Flatnuke 3 (aka FlatnuX). The issue allows remote attackers to obtain administrative access by manipulating a myforum%00 cookie. The description in multiple sources confirms remote exploitation without user interaction, enabling elevation of privileges to an admin level. No ...
CVE-2006-5771
CVE-2006-5771 is an XSS vulnerability affecting Arkoon SSL360 1.0 and 2.0 prior to 2.0/2. The issue enables remote attackers to inject arbitrary web script or HTML via unspecified vectors. Documents confirm the affected product and versions; no explicit exploit details or vectors are provided in ...