Oracle WebLogic Server Multiple Unspecified Vulnerabilities (cpujul2014, cpuapr2016)

Oracle WebLogic Server is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2015-5855

CVE-2015-5855 affects Apple iOS (pre‑9.0). A crafted Game Center app can disclose a player’s e‑mail address due to how Game Center handles user emails. Impact: information disclosure. Remediation: update to iOS 9 or later.

Important: Red Hat Security Advisory: Red Hat JBoss Data Virtualization 6.0.0 security update

Red Hat JBoss Data Virtualization 6.0.0 2015 roll up patch 1, which fixes multiple security issues and various bugs, is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base...

Important: Red Hat Security Advisory: Red Hat JBoss Data Virtualization 6.1.0 update

Red Hat JBoss Data Virtualization 6.1.0, which fixes multiple security issues and various bugs, is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give...

CVE-2014-5855

The CVE-2014-5855 entry affects the CJmall Android app (package com.cjoshppingphone) version 4.1.8. The vulnerability arises because the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive information via a crafted ce...

CVE-2013-5855

Oracle Mojarra 2.2.x before 2.2.6 and 2.1.x before 2.1.28 does not perform appropriate encoding when a 1 tag or 2 EL expression is used after a scriptor style block, which allows remote attackers to conduct cross-site scripting XSS attacks via application-specific vectors...

CVE-2013-5855

CVE-2013-5855 affects Oracle Mojarra JSF. The vulnerability is an XSS due to improper encoding when a (1) tag or (2) EL expression is used after a scriptor style block, enabling remote attackers to inject script via application-specific vectors. Affected are Mojarra 2.2.x before 2.2.6 and 2.1.x ...

VLC Media Player Multiple Vulnerabilities - July 13 (Windows)

This host is installed with VLC Media Player and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbvlcmediaplayermultvulnjul13win.nasl 8174 2017-12-19 12:23:25Z cfischer $ VLC Media Player Multiple Vulnerabilities - July 13 Windows Authors: Arun Kallavi Copyright: Copyright ...

CVE-2012-5855

The SHAddToRecentDocs function in VideoLAN VLC media player 2.0.4 and earlier might allow user-assisted attackers to cause a denial of service crash via a crafted file name that triggers an incorrect string-length calculation when the file is added to VLC. NOTE: it is not clear whether this issue...

CVE-2012-5855

CVE-2012-5855 affects VideoLAN VLC media player

VLC < 2.0.5 Multiple Vulnerabilities

The version of VLC media player installed on the remote Windows host is prior to 2.0.5. It is, therefore, affected by multiple vulnerabilities: - An exploitable denial of service vulnerability exists in the SHAddToRecentDocs function in VideoLAN VLC media player before 2.0.5. Allow user-assisted...

Mac OS X Security Update 2007-009

The remote host is missing Security Update 2007-009. One or more of the following components are affected: Address Book CFNetwork ColorSync Core Foundation CUPS Desktop Services Flash Player Plug-in GNU Tar iChat IO Storage Family Launch Services Mail perl python Quick Look ruby Safari Safari RSS...

CVE-2008-5855

The CVE-2008-5855 entry concerns myPHPscripts Login Session 2.0, where sensitive data is stored under the web root with insufficient access control. The underlying issue is exposure of a users.txt file, which can allow remote attackers to discover usernames, e-mail addresses, and password hashes ...

Apple Mac OS X v10.5.1 2007-009 Multiple Security Vulnerabilities

CVE-2007-4708 CVE-2007-4709 CVE-2007-4710 CVE-2007-5847 CVE-2007-5848 CVE-2007-5849 CVE-2007-5850 CVE-2007-5851 CVE-2007-5853 CVE-2007-5854 CVE-2007-5855 CVE-2007-5856 CVE-2007-5857 CVE-2007-5859 CVE-2007-5876 CVE-2007-5860 CVE-2007-5861 These issues affect Mac OS X and various applications,...

CVE-2007-5855

The CVE-2007-5855 entry is supported by connected documents: Apple Mail on Mac OS X 10.4.11 and 10.5.1 can use plaintext SMTP authentication via Account Assistant even when MD5 Challenge-Response is available, enabling potential remote sniffing of account activity. The issue is tied to the SMTP a...

CVE-2006-5855

Multiple buffer overflows in IBM Tivoli Storage Manager TSM before 5.2.9 and 5.3.x before 5.3.4 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long string in 1 the language field at logon that begins with a 0x18 byte, 2 two unspecified paramete...

DSquare Exploit Pack: D2SEC_TSM

Name| d2sectsm ---|--- CVE| CVE-2006-5855 Exploit Pack| D2ExploitPack Description| IBM Tivoli Storage Manager Server Buffer Overflow Notes|...

CVE-2006-5855

IBM Tivoli Storage Manager (TSM) Server is affected by CVE-2006-5855 due to multiple buffer overflows in the authentication/open registration paths. Vulnerable conditions involve: (1) a logon language field that begins with 0x18, (2) two unnamed parameters to SmExecuteWdsfSession, and (3) the con...

CVE-2006-5855

Multiple buffer overflows in IBM Tivoli Storage Manager TSM before 5.2.9 and 5.3.x before 5.3.4 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long string in 1 the language field at logon that begins with a 0x18 byte, 2 two unspecified paramete...

TSRT-06-14: IBM Tivoli Storage Manager Mutiple Buffer Overflow Vulnerabilities

TSRT-06-14: IBM Tivoli Storage Manager Mutiple Buffer Overflow Vulnerabilities http://www.tippingpoint.com/security/advisories/TSRT-06-14.html December 4, 2006 -- CVE ID: CVE-2006-5855 -- Affected Vendor: IBM -- Affected Products: Tivoli Storage Manager 5.2.9 Tivoli Storage Manager 5.3.4 --...