CVE-2017-5798

creationtimestamp| type| source ---|---|--- 2017-04-25 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41927...

CVE-2016-5798

CVE-2016-5798 affects Fatek Automation PM Designer V3 (version 2.1.2.2) and FV Designer (version 1.2.8.0). The issue is a stack-based buffer overflow triggered by sending additional valid packets, leading to a crash; a separate vulnerability could trigger a remote buffer overflow on the Fatek Com...

CVE-2015-5798

WebKit, as used in Apple iTunes before 12.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in...

CVE-2015-5798

WebKit, as used in Apple iTunes before 12.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in...

CVE-2015-5798

CVE-2015-5798 affects WebKit used by Apple iTunes prior to 12.3. The vulnerability arises in iTunes Store browsing and allows a man‑in‑the‑middle to trigger memory corruption and potentially arbitrary code execution or a denial-of-service (application crash). Affected product: Apple iTunes before...

CVE-2014-5798

The CVE-2014-5798 issue affects the Android app smart.calculator (aka nh.smart.calculator) version 2, where X.509 certificates from SSL servers are not verified. This allows MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. No explicit remediation or affe...

CVE-2013-5798

Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.2.0.0 and 11.1.2.1.0 allows remote attackers to affect integrity via unknown vectors related to End User Self Service...

CVE-2013-5798

CVE-2013-5798 affects Oracle Fusion Middleware’s Oracle Identity Manager (versions 11.1.2.0.0 and 11.1.2.1.0). The vulnerability relates to End User Self Service and allows remote modification of integrity via unknown vectors; exploitation details are not provided in the available documents. Orac...

CVE-2008-5798

The CVE-2008-5798 entry concerns the TYPO3 cms_poll extension (CMS Poll system) vulnerable to an SQL injection in versions before 0.1.1. The root cause is an SQL injection vulnerability in the cms_poll component, allowing remote attackers to execute arbitrary SQL commands via unspecified vectors....

openSUSE 10 Security Update : imp (imp-5798)

This update fixes a XSS vulnerability in imp. CVE-2008-4182 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update imp-5798. The text description of this plugin is C SUSE LLC...

CVE-2007-5798

IBM WebSphere Application Server 6.1.x before Fix Pack 13 (6.1.0.13) is affected by multiple XSS vulnerabilities in uddigui/navigateTree.do of the UDDI user console. The issue allows remote attackers to inject arbitrary web script or HTML via the keyField, nameField, valueField, and frameReturn p...

CVE-2006-5798

The CVE-2006-5798 entry describes a SQL injection vulnerability in default.asp of the Xenis.creator CMS, exploitable via the contid parameter to allow remote execution of arbitrary SQL commands. The vulnerability is triggered through user-supplied contid data, enabling partial confidentiality and...