73 matches found
CVE-2016-5834
Cross-site scripting XSS vulnerability in the wpgetattachmentlink function in wp-includes/post-template.php in WordPress before 4.5.3 allows remote attackers to inject arbitrary web script or HTML via a crafted attachment name, a different vulnerability than CVE-2016-5833...
CVE-2016-5834
Cross-site scripting XSS vulnerability in the wpgetattachmentlink function in wp-includes/post-template.php in WordPress before 4.5.3 allows remote attackers to inject arbitrary web script or HTML via a crafted attachment name, a different vulnerability than CVE-2016-5833...
CVE-2016-5834
Cross-site scripting XSS vulnerability in the wpgetattachmentlink function in wp-includes/post-template.php in WordPress before 4.5.3 allows remote attackers to inject arbitrary web script or HTML via a crafted attachment name, a different vulnerability than CVE-2016-5833...
CVE-2016-5834
CVE-2016-5834 corresponds to a cross-site scripting (XSS) vulnerability in WordPress where the wp_get_attachment_link function in wp-includes/post-template.php could be exploited by a crafted attachment name to inject arbitrary script or HTML. Affected product: WordPress prior to version 4.5.3. R...
CVE-2015-5834
IOAcceleratorFamily in Apple iOS before 9 allows attackers to obtain sensitive kernel memory-layout information via a crafted app...
CVE-2015-5834
CVE-2015-5834 involves the IOAcceleratorFamily in iOS prior to version 9. A crafted app could cause a disclosure of the kernel memory layout. The root cause is a memory-disclosure path in IOAcceleratorFamily that was addressed by improved bounds checking. The impact is limited to information expo...
iOS vulnerability can lead to the Apple ID theft-vulnerability warning-the black bar safety net
In yesterday's release of the iOS 9 upgrade, Apple repair Alibaba Mobile Security Team discovered three security vulnerabilities: CVE-2 0 1 5-5 8 3 8, CVE-2 0 1 5-5 8 3 4, CVE-2 0 1 5-5 8 6 8 The. ! Wherein the CVE-2 0 1 5-5 8 3 8 this vulnerability can let hackers in a non-jailbroken iPhone 6 on...
CVE-2013-5834
CVE-2013-5834 concerns an unspecified local vulnerability in Oracle Solaris 8, affecting the ps utility and enabling local users to impact confidentiality, integrity, and availability via unknown vectors. Connected sources (NVD/NIST, Nessus plugins) confirm the affected product is Solaris 8 with ...
SuSE 10 Security Update : ndiswrapper (ZYPP Patch Number 5834)
The ndiswrapper was updated to fix multiple buffer overflows that can be exploited over a connected WLAN by using long ESSID stings. CVE-2008-4395 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...
CVE-2008-2791
creationtimestamp| type| source ---|---|--- 2008-06-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5834...
Unfixed XSS vulnerability at server16.kproxy.com
Security researcher Mutant, has submitted on 29/11/2007 a cross-site-scripting XSS vulnerability affecting server16.kproxy.com, which at the time of submission ranked 5834 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/11/2007. It is...
CVE-2007-5834
CVE-2007-5834 is an XSS vulnerability in BosDev BosNews 4 that lets remote attackers inject arbitrary script/HTML via a SCRIPT element in a news post. Supported details from NVD: CVSS2 base score 4.3 (Medium), vector AV:N/AC:M/Au:N/C:N/I:P/A:N; attack requires network access, no authentication, b...
CVE-2006-5834
OpenSolution Quick.Cms.Lite 0.3 is affected by a directory traversal vulnerability in general.php, exploitable via the sLanguage cookie parameter to include arbitrary files. Root cause: improper handling of the cookie value enables traversal sequences (..), leading to potential unauthorized file ...