CVE-2017-5821

CVE-2017-5821 is a remote, unauthenticated command-injection in HPE Intelligent Management Center (iMC) PLAT, dbman service, allowing arbitrary OS command execution via opcode 10006. Affected product/version: iMC PLAT before 7.3 E0504P04. Public details come from ZDI-17-339 and CP AI advisories; ...

HPE Intelligent Management Center dbman RestoreZipFile Command Injection (CVE-2017-5821)

A command injection vulnerability exists in the dbman component of HPE Intelligent Management Center. The vulnerability is due to missing validation of user-provided parameters when handling RestoreZipFile commands. A remote, unauthenticated attacker can exploit the vulnerability by sending a...

H3C / HPE Intelligent Management Center PLAT < 7.3 E0504P04 Multiple Vulnerabilities

The version of HPE Intelligent Management Center iMC PLAT installed on the Windows host is prior to 7.3 E0504P04. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists that allows an unauthenticated, remote attacker to execute arbitrary code. CVE-2017-5815 - A...

CVE-2016-5821

CVE-2016-5821 affects Huawei HiSuite for Windows. A local attacker can exploit insecure ACLs on the HiSuite service directory to perform DLL hijacking (via SspiCli.dll or USERENV.dll, among others) and escalate to SYSTEM. Affected versions include HiSuite up to 4.0.3.301 (and variants like 4.0.4....

Huawei HiSuite For Windows 4.0.3.301 Privilege Escalation

Vendor: Huawei, www.huawei.com Affected Product: HiSuite for Windows Affected Version: = 4.0.3.301 CVE ID: CVE-2016-5821 OVE ID: OVE-20160624-0001 Severity: High Author: Benjamin Gnahm @mitp0sh, Blue Frost Security GmbH Title: Huawei HiSuite Insecure Service Directory ACLs A privilege escalation...

UBUNTU-CVE-2015-5821

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5821

CVE-2015-5821 details (concrete in sources): WebKit, as used in Apple iOS prior to 9 and iTunes prior to 12.3, is vulnerable to remote exploitation via a crafted web site. The underlying issue is memory corruption that can lead to arbitrary code execution or memory corruption resulting in an appl...

CVE-2015-5821

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2014-5821

CVE-2014-5821 affects the Android app Guitar Tuner Free - GuitarTuna (com.ovelin.guitartuna) version 2.4.5. The root cause is failure to verify X.509 certificates from SSL servers, allowing MITM attackers to spoof servers and access sensitive information via a crafted certificate. No remediation ...

CVE-2013-5821

The CVE-2013-5821 entry relates to a vulnerability in the Solaris RPC (Remote Procedure Call) component across Oracle Solaris versions 8, 9, 10 and 11.1. The Nessus/NVD data describe a local, easily exploitable flaw that can affect confidentiality, integrity, and availability, requiring OS login ...

Mandriva Linux Security Advisory : lynx (MDVSA-2013:101)

Updated lynx package fixes security vulnerability : Lynx does not verify that the server's certificate is signed by a trusted certification authority, which allows man-in-the-middle attackers to spoof SSL servers via a crafted certificate, related to improper use of a certain GnuTLS function...

Ubuntu Update for lynx-cur USN-1642-1

Ubuntu Update for Linux kernel vulnerabilities USN-1642-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN16421.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for lynx-cur USN-1642-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net Thi...

Citrix MetaFrame IMA Authentication Processing Buffer Overflow (CVE-2006-5821)

The Citrix MetaFrame products are remote access and application publishing products built on Citrix' Independent Computing Architecture ICA. The products allow for access and control of the remote hosts as well as deploying applications. There exists a buffer overflow vulnerability in Citrix...

CVE-2008-5821

CVE-2008-5821 is a memory-leak denial-of-service vulnerability in WebKit.dll used by Apple Safari 3.2 on Windows Vista SP1. The root cause is a memory leak triggered by a long ALINK attribute inside a BODY element of an HTML document, allowing remote attackers to exhaust memory and crash the brow...

CVE-2008-5821

creationtimestamp| type| source ---|---|--- 2009-01-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32694 2009-01-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32695 2010-04-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12408...

CVE-2007-5821

CVE-2007-5821 affects DM Guestbook 0.4.1 and earlier, allowing remote attackers to perform local file inclusion via a .. in the lng parameter (guestbook.php, admin/admin.guestbook.php, or auto/glob_new.php) or the lngdefault parameter to auto/ch_lng.php. The underlying issue is a directory traver...

CVE-2006-5821

CVE-2006-5821 affects Citrix MetaFrame XP 1.0/2.0 and Presentation Server 3.0/4.0. The flaw is a heap-based overflow in ImaSystem.dll’s IMA_SECURE_DecryptData1 during decryption of authentication data via the IMA service (ImaSrv.exe). An attacker can supply invalid size values through the IMA por...

[Full-disclosure] ZDI-06-038: Citrix MetaFrame IMA Management Module Remote Heap Overflow

ZDI-06-038: Citrix MetaFrame IMA Management Module Remote Heap Overflow http://www.zerodayinitiative.com/advisories/ZDI-06-038.html November 9, 2006 -- CVE ID: CVE-2006-5821 -- Affected Vendor: Citrix -- Affected Products: Citrix MetaFrame XP 1.0 Citrix MetaFrame XP 2.0 Citrix MetaFrame...