54 matches found
CVE-2014-5881
The CVE-2014-5881 issue affects Yahoo! Japan Box for Android (jp.co.yahoo.android.ybox) where the app fails to verify SSL server certificates in versions up to 1.5.4 (and earlier), enabling man-in-the-middle attackers to decrypt or spoof traffic. Root cause: improper SSL certificate verification ...
CVE-2013-5881
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.14 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB, a different vulnerability than CVE-2014-0431...
CVE-2013-5881
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.14 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB, a different vulnerability than CVE-2014-0431...
CVE-2014-0431
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.14 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB, a different vulnerability than CVE-2013-5881...
CVE-2013-5881
Technical details about CVE-2013-5881 are not publicly provided in the supplied documents. Monitoring for updates from vendor advisories and OpenVAS entries is recommended.
CVE-2013-5881
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.14 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB, a different vulnerability than CVE-2014-0431...
CVE-2012-5881
Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.4.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to charts.swf, a similar issue to CVE-2010-4207...
CVE-2012-5881
Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.4.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to charts.swf, a similar issue to CVE-2010-4207...
CVE-2012-5881
Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.4.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to charts.swf, a similar issue to CVE-2010-4207...
CVE-2012-5881
CVE-2012-5881 concerns a cross-site scripting (XSS) vulnerability in the YUI library’s Flash component infrastructure (charts.swf) affecting YUI versions 2.4.0–2.9.0. An attacker could inject arbitrary script/HTML via vectors related to charts.swf, allowing execution of code in a victim’s browser...
CVE-2008-5881
CVE-2008-5881 describes multiple directory traversal vulnerabilities in playSMS 0.9.3 . Remote attackers can cause the application to include and execute arbitrary local files via directory traversal sequences in the parameters: (1) gateway_module to plugin/gateway/gnokii/init.php and (2) themes_...
CVE-2008-5881
creationtimestamp| type| source ---|---|--- 2009-01-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7687...
CVE-2006-5881
CVE-2006-5881 describes a SQL injection in cl_CatListing.asp of Dynamic Dataworx NuCommunity 1.0, exploitable via the cl_cat_ID parameter. The CVSS vector (AV:N/AC:L/Au:N/C:P/I:P/A:P) yields a base score of 7.5 (HIGH), indicating partial disclosure, integrity, and availability impacts. The provid...