CVE-2015-5866

CVE-2015-5866 concerns Apple OS X IOHIDFamily memory corruption. The vulnerability exists in IOHIDFamily on OS X versions prior to 10.11, allowing a crafted app to execute arbitrary code in a privileged context or cause a denial of service (memory corruption). The primary affected component is IO...

CVE-2012-5866

CVE-2012-5866 is an XSS vulnerability in Achievo 1.4.5, caused by an input sanitation error in include.php when handling the HTTP GET parameter field. An attacker can inject arbitrary HTML/JavaScript into a user’s browser. A PoC demonstrates script execution via include.php?field=... The HTB advi...

CVE-2014-5866

The provided data confirms CVE-2014-5866 affects the CA DMV (gov.ca.dmv) application 2 for Android, where the app does not verify X.509 certificates from SSL servers. This lack of certificate verification enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a ...

Oracle Solaris Critical Patch Update : oct2013_SRU11_1_12_5_0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: Cacao. Supported versions that are affected are 10 and 11.1. Difficult to exploit vulnerability allows successful...

CVE-2013-5866

Oracle Solaris 11.1 contains a Kernel-related vulnerability identified as CVE-2013-5866. The connected Nessus patch plugin indicates this flaw as a Kernel issue that, if exploited (requires local OS access), can lead to a complete DoS via system hangs/crashes and potential unauthorized data acces...

Multiple vulnerabilities in Achievo

Advisory ID: HTB23126 Product: Achievo Vendor: www.achievo.org Vulnerable Versions: 1.4.5 and probably prior Tested Version: 1.4.5 Vendor Notification: November 14, 2012 Public Disclosure: December 5, 2012 Vulnerability Type: SQL Injection CWE-89, Cross-Site Scripting CWE-79 CVE References:...

Achievo 1.4.5 - Multiple Vulnerabilities (2)

Advisory ID: HTB23126 Product: Achievo Vendor: www.achievo.org Vulnerable Versions: 1.4.5 and probably prior Tested Version: 1.4.5 Vendor Notification: November 14, 2012 Public Disclosure: December 5, 2012 Vulnerability Type: SQL Injection CWE-89, Cross-Site Scripting CWE-79 CVE References:...

Achievo 1.4.5 - Multiple Vulnerabilities (2)

Achievo 1.4.5 - Multiple Vulnerabilities 2 Advisory ID: HTB23126 Product: Achievo Vendor: www.achievo.org Vulnerable Versions: 1.4.5 and probably prior Tested Version: 1.4.5 Vendor Notification: November 14, 2012 Public Disclosure: December 5, 2012 Vulnerability Type: SQL Injection CWE-89,...

Achievo 1.4.5 Cross Site Scripting / SQL Injection Vulnerabilities

Achievo version 1.4.5 suffers from cross site scripting and remote SQL injection vulnerabilities. Product: Achievo Vendor: www.achievo.org Vulnerable Versions: 1.4.5 and probably prior Tested Version: 1.4.5 Vendor Notification: November 14, 2012 Public Disclosure: December 5, 2012 Vulnerability...

Achievo 1.4.5 Cross Site Scripting / SQL Injection

Advisory ID: HTB23126 Product: Achievo Vendor: www.achievo.org Vulnerable Versions: 1.4.5 and probably prior Tested Version: 1.4.5 Vendor Notification: November 14, 2012 Public Disclosure: December 5, 2012 Vulnerability Type: SQL Injection CWE-89, Cross-Site Scripting CWE-79 CVE References:...

SuSE 10 Security Update : ethereal (ZYPP Patch Number 5866)

This update fixes problems that could crash wireshark when processing compressed data CVE-2008-3933 and Q.931 packets. CVE-2008-4685 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

CVE-2008-5866

The CVE-2008-5866 entry concerns Proxim Wireless Tsunami MP.11 2411 with firmware 3.0.3 that ships with a default SNMP read/write community set to public. This default configuration enables remote attackers to obtain sensitive information or modify SNMP variables. Publicly available connected doc...

CVE-2006-5866

CVE-2006-5866 describes a directory traversal in phpManta prior to or including 1.0.2 via the file parameter to Mdoc/view-sourcecode.php, enabling remote attackers to read and potentially include arbitrary files. The affected component is phpManta’s Mdoc/view-sourcecode.php; root cause is directo...