CVE-2014-5806

CVE-2014-5806 affects the Android application World of Tanks Assistant (ru.worldoftanks.mobile), version 1.7.5. The root cause is failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

IBM Domino 9.x < 9.0.1 Fix Pack 1 Multiple Vulnerabilities (uncredentialed check)

According to its version, the IBM Domino formerly IBM Lotus Domino on the remote host is 9.x prior to 9.0.1 Fix Pack 1 FP1. It is, therefore, affected by the following vulnerabilities : - A stack overflow issue exists due to the insecure '-z execstack' flag being used during compilation, which...

CVE-2013-5806

Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Swing, a different vulnerability than CVE-2013-5805...

Design/Logic Flaw

Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Swing, a different vulnerability than CVE-2013-5806...

CVE-2012-5806

The vulnerability CVE-2012-5806 affects the Zen Cart PayPal Payments Pro module. The issue is that the module does not verify that the server hostname matches a domain in the certificate’s CN or subjectAltName, enabling MITM-style spoofing with arbitrary valid certificates. The root cause is tied...

Fedora Update for gallery2 FEDORA-2012-5806

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2008-5806

SQL injection vulnerability in login.php in DeltaScripts PHP Classifieds 7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the adminusername parameter aka admin field. NOTE: some of these details are obtained from third party information...

CVE-2008-5806

CVE-2008-5806 affects DeltaScripts PHP Classifieds 7.5 and earlier: a SQL injection flaw in login.php allows remote attackers to inject arbitrary SQL via the admin_username parameter (aka admin field). The vulnerability stems from unsafely constructed queries in the login handling code. Impact is...

CVE-2007-5806

Cross-site scripting XSS vulnerability in Services/Utilities/classes/class.ilUtil.php in ILIAS 3.8.3 and earlier allows remote attackers to inject arbitrary web script or HTML via attributes inside a domain-name string in the 1 mailing or 2 forum component, as demonstrated using the style and...

CVE-2007-5806

CVE-2007-5806 is an XSS vulnerability in ILIAS 3.8.3 and earlier affecting the file Services/Utilities/classes/class.ilUtil.php . The issue allows remote attackers to inject arbitrary web script or HTML via attributes inside a domain-name string in the mailing or forum components, demonstrated us...

CVE-2006-5806

The CVE-2006-5806 issue affects the SSL VPN Client in Cisco Secure Desktop prior to version 3.1.1.45. The underlying flaw stores sensitive browser session information in a directory outside the CSD vault and does not restrict saving outside the vault, and the data is not cleared when the VPN conn...