CVE-2017-5847

The gstasfdemuxprocessextcontentdesc function in gst/asfdemux/gstasfdemux.c in gst-plugins-ugly in GStreamer allows remote attackers to cause a denial of service out-of-bounds heap read via vectors involving extended content descriptors...

CVE-2017-5847

CVE-2017-5847 affects the GStreamer gst-plugins-ugly package, specifically the asfdemux element (gst_asf_demux_process_ext_content_desc in gst/asfdemux/gstasfdemux.c). The vulnerability allows a remote attacker to trigger a denial of service via an out-of-bounds heap read when processing extended...

CVE-2016-5847

CVE-2016-5847 describes a local privilege-escalation in SAPCAR (SAPCAR archive tool) caused by a TOCTOU race condition when changing permissions of extracted files. A local attacker who can place files in the extraction directory can replace an extracted file with a hard link to another user’s fi...

SAP CAR Archive Tool Denial Of Service / Security Bypass

Advisory Information Title: SAP CAR Multiple Vulnerabilities Advisory ID: CORE-2016-0006 Advisory URL: http://www.coresecurity.com/advisories/sap-car-multiple-vulnerabilities Date published: 2016-08-09 Date of last update: 2016-08-09 Vendors contacted: SAP Release mode: Coordinated release 2...

SAP SAPCAR - Multiple Vulnerabilities

SAP SAPCAR - Multiple Vulnerabilities 1. Advisory Information Title: SAP CAR Multiple Vulnerabilities Advisory ID: CORE-2016-0006 Advisory URL: http://www.coresecurity.com/advisories/sap-car-multiple-vulnerabilities Date published: 2016-08-09 Date of last update: 2016-08-09 Vendors contacted: SAP...

CVE-2016-5847

creationtimestamp| type| source ---|---|--- 2016-08-10 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40230...

CVE-2015-5847

The Disk Images component in Apple iOS before 9 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors...

CVE-2015-5847

CVE-2015-5847 (Disk Images) is referenced across connected documents as a Mac OS X Disk Images memory-corruption vulnerability that could let a local user execute arbitrary code with kernel privileges. The core issue is a memory-corruption flaw in DiskImages. The Apple advisories imply remediatio...

CVE-2014-5847

CVE-2014-5847 affects the Android app Big Win Slots - Slot Machines (com.gosub60.BigWinSlots), version 1.11.2. The vulnerability is due to failure to verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and obtain sensitive information via crafted certificates. Exp...

CVE-2013-5847

Affected software: Oracle PeopleSoft Enterprise HRMS eCompensation component (PeopleSoft Products 9.1 and 9.2). Vulnerability: Unspecified vulnerability in eCompensation that allows remote authenticated users to affect confidentiality via unknown vectors related to eCompensation. Root cause/notes...

Mac OS X Security Update 2007-009

The remote host is missing Security Update 2007-009. One or more of the following components are affected: Address Book CFNetwork ColorSync Core Foundation CUPS Desktop Services Flash Player Plug-in GNU Tar iChat IO Storage Family Launch Services Mail perl python Quick Look ruby Safari Safari RSS...

CVE-2008-5847

Constructr CMS 3.02.5 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information by reading the hash column...

CVE-2008-5847

CVE-2008-5847 affects Constructr CMS up to version 3.02.5, where passwords are stored in cleartext in a MySQL database. The underlying issue is insecure password storage (cleartext in the hash column), enabling context-dependent attackers to read sensitive password information from the database. ...

Apple Mac OS X v10.5.1 2007-009 Multiple Security Vulnerabilities

CVE-2007-4708 CVE-2007-4709 CVE-2007-4710 CVE-2007-5847 CVE-2007-5848 CVE-2007-5849 CVE-2007-5850 CVE-2007-5851 CVE-2007-5853 CVE-2007-5854 CVE-2007-5855 CVE-2007-5856 CVE-2007-5857 CVE-2007-5859 CVE-2007-5876 CVE-2007-5860 CVE-2007-5861 These issues affect Mac OS X and various applications,...

CVE-2007-5847

CVE-2007-5847 is a race condition in the CFURLWriteDataAndPropertiesToResource API within Core Foundation on Mac OS X 10.4.11. The flaw causes created files to inherit insecure permissions, potentially allowing local users to access sensitive information. The vulnerability affects Mac OS X 10.4.1...

CVE-2006-5847

Cross-site scripting XSS vulnerability in index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the cat parameter...

CVE-2006-5847

CVE-2006-5847 is a Cross-site scripting (XSS) vulnerability in FreeWebshop 2.2.2 and earlier. The flaw exists in index.php via the cat parameter, allowing remote attackers to inject arbitrary web script or HTML. The provided documents do not include exploitation details, affected versions beyond ...