CVE-2015-5864

CVE-2015-5864 : IOAudioFamily in Apple OS X before 10.11 allows a local attacker to obtain sensitive kernel memory-layout information via unspecified vectors. The vulnerability results in disclosure of kernel memory content. Public references indicate Apple fixed this issue by permuting kernel po...

Joomla Component com_5starhotels SQL Injection (CVE-2008-5864)

An SQL injection vulnerability has been reported in Joomla Com 5starhotels. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2014-5864

The CVE-2014-5864 entry affects the Swish payments Android app (se.bankgirot.swish) version 2. The root cause is failure to validate X.509 certificates from SSL servers, enabling Man-in-The-Middle attackers to spoof servers and obtain sensitive data via a crafted certificate. The CPE/affected com...

Oracle Solaris Critical Patch Update : oct2013_SRU11_1_11_4_0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: IPS repository daemon. The supported version that is affected is 11.1. Difficult to exploit vulnerability allows...

CVE-2013-5864

CVE-2013-5864 affects Oracle Solaris, specifically the USB hub driver in Solaris 10 and 11.1. The vulnerability is a local-privilege availability issue allowing a logged-on user to cause an OS hang or a frequently repeatable crash (DOS). Nessus data ties the issue to Solaris patch IDs 149638-02 (...

Solaris 10 (sparc) : 149638-05 (deprecated)

SunOS 5.10: USB patch. Date this patch was last updated by Sun : Jan/19/15 This plugin has been deprecated and either replaced with individual 149638 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2018/03/12...

CVE-2012-5864

The CVE-2012-5864 issue affects Sinapsi eSolar family web-based management interfaces (Light, eSolar, and DUO) prior to firmware 2.0.2870_2.2.12. The root cause is improper authentication: management pages do not require login, enabling remote attackers to obtain administrative access via direct ...

CVE-2008-5864

SQL injection vulnerability in the Top Hotel comtophotelmodule component 1.0 in the Hotel Booking Reservation System aka HBS 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php...

CVE-2008-5864

CVE-2008-5864 affects the Joomla! Hotel Booking Reservation System (HBS) component com_tophotelmodule, version 1.0.0, with the affected package described as Top Hotel. The root cause is an SQL injection vulnerability in the showhoteldetails action (index.php) triggered via the id parameter. This ...

CVE-2008-5864

creationtimestamp| type| source ---|---|--- 2008-12-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7538 2008-12-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7539 2008-12-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7567 2008-12-24...

Gentoo Security Advisory GLSA 200703-24 (mgv)

The remote host is missing updates announced in advisory GLSA 200703-24. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200704-06 (evince)

The remote host is missing updates announced in advisory GLSA 200704-06. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200611-20 (gv)

The remote host is missing updates announced in advisory GLSA 200611-20. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200704-06 (evince)

The remote host is missing updates announced in advisory GLSA 200704-06. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1214-2 (gv)

The remote host is missing an update to gv announced via advisory DSA 1214-2. The original update provided in DSA 1214-1 was insufficient; this update corrects this. For reference the original advisory below: Renaud Lifchitz discovered that gv, the PostScript and PDF viewer for X, performs...

SuSE 10 Security Update : evince (ZYPP Patch Number 2358)

Specially crafted Postscript files could be used to execute arbitrary code by causing a buffer overflow in evince. CVE-2006-5864 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

SuSE 10 Security Update : gv (ZYPP Patch Number 2267)

A stackoverflow in the postscript viewer gv could be used to exploited to execute code, if the user could be tricked into viewing a prepared postscript file. CVE-2006-5864 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

openSUSE 10 Security Update : gv (gv-2266)

A stackoverflow in the postscript viewer gv could be used to exploited to execute code, if the user could be tricked into viewing a prepared postscript file. CVE-2006-5864 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fr...

openSUSE 10 Security Update : evince (evince-2362)

Specially crafted Postscript files could be used to execute arbitrary code by causing a buffer overflow in evince CVE-2006-5864. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update evince-2362. Th...

Mandrake Linux Security Advisory : gv (MDKSA-2006:214-1)

Stack-based buffer overflow in the psgettext function in ps.c for GNU gv 3.6.2, and possibly earlier versions, allows user-assisted attackers to execute arbitrary code via a PostScript PS file with certain headers that contain long comments, as demonstrated using the DocumentMedia header. Package...