Fedora 23 : webkitgtk3-2.4.10-1.fc23 (2016-1a7f7ffb58)

This update addresses the following vulnerabilities : - CVE-2015-1120 https://vulners.com/cve/CVE-2015-1120 - CVE-2015-1076 https://vulners.com/cve/CVE-2015-1076 - CVE-2015-1071 https://vulners.com/cve/CVE-2015-1071 - CVE-2015-1081 https://vulners.com/cve/CVE-2015-1081 - CVE-2015-1122...

CVE-2015-5788

The CVE-2015-5788 entry describes a flaw in WebKit Canvas handling on iOS prior to version 9 that allows remote attackers to bypass the same-origin policy and read sensitive image data via CANVAS-related vectors. The vulnerability affects the WebKit Canvas implementation and arises from insuffici...

IBM Domino 9.x < 9.0.1 Fix Pack 1 Multiple Vulnerabilities (uncredentialed check)

According to its version, the IBM Domino formerly IBM Lotus Domino on the remote host is 9.x prior to 9.0.1 Fix Pack 1 FP1. It is, therefore, affected by the following vulnerabilities : - A stack overflow issue exists due to the insecure '-z execstack' flag being used during compilation, which...

Critical: Red Hat Security Advisory: java-1.7.0-ibm security update

Updated java-1.7.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give...

CVE-2013-5788 vulnerabilities

Vulnerabilities for packages: openjdk-11-openj9, openjdk-8-openj9, openjdk-21-openj9, openjdk-25-openj9, openjdk-26-openj9, openjdk-17-openj9...

CVE-2013-5788

CVE-2013-5788 is part of a cluster of Java vulnerabilities disclosed in Oracle’s October 2013 CPU; IBM advisories enumerate this CVE among many in the IBM SDK for Java and WebSphere products. The IBM bulletins indicate affected IBM SDK Java Technology Edition versions (5, 6, 7, and 1.4.2) and num...

CVE-2012-5788

The PayPal IPN utility is vulnerable because it does not verify that the server hostname matches the CN/subjectAltName in the X.509 certificate, enabling MITM spoofing with any valid certificate via the PHP fsockopen-based connection. Affected component: PayPal IPN utility; underlying issue: miss...

CVE-2008-5788

Domain Seller Pro 1.5 is affected by a SQL injection in index.php via the id parameter. The underlying cause is unsafely constructed SQL queries that allow remote attackers to modify or retrieve data. Reported in multiple records (NVD, CVE-2008-5788 family) with CVSS v2 base score 7.5 (HIGH). Pub...

CVE-2008-5788

creationtimestamp| type| source ---|---|--- 2008-11-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7052...

Unfixed XSS vulnerability at www.mlgpro.com

Security researcher PaPPy, has submitted on 19/06/2008 a cross-site-scripting XSS vulnerability affecting www.mlgpro.com, which at the time of submission ranked 5788 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/07/2008. It is currently...

CVE-2007-5788

CVE-2007-5788 affects Grandstream HT-488 (firmware 0.1) with a buffer overflow in the SIP parser. A crafted SIP INVITE message can cause a remote denial of service (device crash). Connected records confirm the same vulnerability across multiple sources, but do not provide additional technical det...

CVE-2006-5788

CVE-2006-5788 is a documented PHP remote file inclusion in IPrimal Forums, affecting the scripts (1) index.php and (2) admin/index.php. The underlying issue allows a remote attacker to execute arbitrary PHP code by supplying a URL in the p parameter, as described in multiple sources. The availabl...