29 matches found
CVE-2015-5883
CVE-2015-5883 affects Apple OS X Terminal prior to 10.11, where Terminal’s bidirectional text handling and text-selection logic treat directional override formatting characters differently. This mismatch can allow remote attackers to spoof the content of a text document via a crafted character se...
CVE-2014-5883
The CVE-2014-5883 entry concerns the 7-ELEVEN Android app version 2.08.000 that does not verify X.509 certificates from SSL servers. Root cause: missing certificate verification enables MITM attackers to spoof servers and access sensitive information via crafted certificates. Documented impact is...
CVE-2013-5883
Solaris 8 (SPARC) kernel component vulnerability CVE-2013-5883 affects the Solaris 8 kernel (sparc) as described in the Nessus plugin 110794-06. The vulnerability is locally exploitable, requires OS login plus additional authentication to the affected component, and can lead to privilege escalati...
CVE-2012-5883
Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.8.0 through 2.9.0, as used in Bugzilla 3.7.x and 4.0.x before 4.0.9, 4.1.x and 4.2.x before 4.2.4, and 4.3.x and 4.4.x before 4.4rc1, allows remote attackers to inject arbitrary web script or HTML via vectors...
CVE-2012-5883
CVE-2012-5883 is a cross-site scripting (XSS) vulnerability in the Flash component infrastructure of YUI (versions 2.8.0–2.9.0) used by Bugzilla 3.7.x/4.0.x (before 4.0.9), 4.1.x/4.2.x (before 4.2.4), and 4.3.x/4.4.x (before 4.4rc1). The issue allows remote attackers to inject arbitrary script/HT...
CVE-2012-5883
Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.8.0 through 2.9.0, as used in Bugzilla 3.7.x and 4.0.x before 4.0.9, 4.1.x and 4.2.x before 4.2.4, and 4.3.x and 4.4.x before 4.4rc1, allows remote attackers to inject arbitrary web script or HTML via vectors...
CVE-2008-5883
CVE-2008-5883 describes an absolute path traversal in mini-pub (front-end/dir.php) prior to version 0.3, where a full pathname supplied in the sDir parameter allows remote attackers to list arbitrary directories. Documents confirm the affected component and root cause; exploitation details are no...
CVE-2008-5883
creationtimestamp| type| source ---|---|--- 2008-10-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6734...
CVE-2006-5883
This CVE affects cPanel 10 and is caused by cross-site scripting (XSS) in the web interface, enabling remote authenticated users to inject arbitrary web script or HTML via (1) dir in seldir.html and (2) user/dir in newuser.html. The description explicitly states the vulnerability pattern and para...