CVE-2014-5889

The CVE-2014-5889 incident concerns the Android Forums (com.tapatalk.androidforumscom) Android app, version 2.4.4.9, which fails to verify X.509 certificates when connecting to SSL servers. Root cause: improper TLS/SSL validation enabling man-in-the-middle attackers to spoof servers and access se...

Low: Red Hat Security Advisory: Red Hat Network Satellite server IBM Java Runtime security update

Updated java-1.6.0-ibm packages that fix several security issues are now available for Red Hat Network Satellite Server 5.4, 5.5, and 5.6. The Red Hat Security Response Team has rated this update as having Low security impact. Common Vulnerability Scoring System CVSS base scores, which give...

IBM Domino 9.x < 9.0.1 Fix Pack 1 Multiple Vulnerabilities (uncredentialed check)

According to its version, the IBM Domino formerly IBM Lotus Domino on the remote host is 9.x prior to 9.0.1 Fix Pack 1 FP1. It is, therefore, affected by the following vulnerabilities : - A stack overflow issue exists due to the insecure '-z execstack' flag being used during compilation, which...

RHEL 5 / 6 : java-1.7.0-oracle (RHSA-2014:0030)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:0030 advisory. Oracle Java SE version 7 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit. This update fixes...

Critical: Red Hat Security Advisory: java-1.7.0-oracle security update

Updated java-1.7.0-oracle packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give...

CVE-2013-5889

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5902, CVE-2014-0410, CVE-2014-0415, CVE-2014-0418, and CVE-2014-0424...

Design/Logic Flaw

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5889, CVE-2013-5902, CVE-2014-0410, CVE-2014-0418, and CVE-2014-0424...

Design/Logic Flaw

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5889, CVE-2014-0410, CVE-2014-0415, CVE-2014-0418, and CVE-2014-0424...

CVE-2013-5889

CVE-2013-5889 is an Oracle Java SE vulnerability in the Deployment component for Java 6u65 and 7u45 that allows remote attackers to compromise confidentiality, integrity and availability via unknown vectors. The connected documents confirm this CVE is part of the January 2014 Java CPU set and poi...

KLA10511 Multiple vulnerabilities in Oracle products

An unspecified vulnerabilities were found in Oracle products. By exploiting this vulnerability malicious users can affect integrity, confidentiality and availability. This vulnerability can be exploited remotely via an unknown vectors related to 2D, Beans, CORBA, Deployment, Hotspot, Install, JAA...

CVE-2012-5889

The CVE-2012-5889 entry describes a cross-site scripting (XSS) vulnerability in the powermail extension for TYPO3, affecting versions before 1.6.5. The vulnerability allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Practical impact is user browser script exe...

CVE-2008-5889

The CVE-2008-5889 entry describes a Cross-site scripting (XSS) vulnerability in Click&Rank’s user.asp, exploitable via the action parameter. The vulnerability is reflected/script-injected through user input, with a CVSSv2 base score of 4.3 (Medium) and no authentication required, according to NVD...

CVE-2008-2890

creationtimestamp| type| source ---|---|--- 2008-06-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5889...

CVE-2007-5889

CVE-2007-5889 describes PHP remote file inclusion vulnerabilities in IDMOS 1.0 Alpha (aka Phoenix). The affected components are the admin-facing scripts (admin.php, menu_add.php, menu_operation.php) under the administrator/ path, where a URL passed to site_absolute_path can cause arbitrary PHP co...

CVE-2006-5889

The CVE-2006-5889 issue affects BrewBlogger (BB) version 1.3.1, where a SQL injection vulnerability exists in printLog.php. The vulnerability allows remote attackers to inject arbitrary SQL commands through the id parameter, compromising the application’s data handling. This aligns with multiple ...