56 matches found
CVE-2017-5892
ASUS RT-AC* and RT-N* routers with firmware older than 3.0.0.4.380.7378 expose a JSONP information-disclosure flaw that can reveal router data such as a network map. The vulnerability is covered by CVE-2017-5892. Most CSRF-related issues were fixed in firmware 3.0.0.4.380.7378; the JSONP informat...
CVE-2016-5892
Cross-site scripting XSS vulnerability in IBM 10x, as used in Multi-Enterprise Integration Gateway 1.x through 1.0.0.1 and B2B Advanced Communications before 1.0.0.52, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
CVE-2016-5892
The CVE-2016-5892 XSS vulnerability affects IBM 10x used in Multi-Enterprise Integration Gateway (MEIG) 1.x up to 1.0.0.1 and IBM B2B Advanced Communications up to 1.0.0.5_1/1.0.0.5_2. The root cause is cross‑site scripting in the Web UI, potentially enabling credential disclosure within a truste...
Gentoo Security Advisory GLSA 201401-13
Gentoo Linux Local Security Checks GLSA 201401-13 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
CVE-2014-5892
CVE-2014-5892 affects the Android app Greenbill (com.show.greenbill_G) version 2.0.3, where the SSL/TLS certificate verification is not performed. This enables man-in-the-middle attackers to spoof servers and potentially exfiltrate sensitive data via crafted certificates. The linked reports (NVD,...
[SECURITY] [DSA 2878-1] virtualbox security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2878-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 13, 2014 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 2878-1 (virtualbox - security update)
Matthew Daley discovered multiple vulnerabilities in VirtualBox, a x86 virtualisation solution, resulting in denial of service, privilege escalation and an information leak. OpenVAS Vulnerability Test $Id: deb2878.nasl 6735 2017-07-17 09:56:49Z teissa $ Auto-generated from advisory DSA 2878-1 usi...
CVE-2013-5892
Oracle VM VirtualBox prior to 3.2.20, 4.0.22, 4.1.30, 4.2.22, and 4.3.6 is affected by an unspecified local vulnerability in Core that can impact confidentiality, integrity and availability. Public advisories describe multiple CVEs (notably CVE-2013-5892 and related issues) and indicate that reme...
CVE-2013-5892
Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.20, 4.0.22, 4.1.30, 4.2.22, and 4.3.6 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core...
CVE-2012-5892
The CVE-2012-5892 entry pertains to Havalite CMS 1.1.0 and earlier, where improper access control allows remote attackers to download the configuration database (data/havalite.db3) from the web root. The root cause is insecure storage of sensitive data under the web root, enabling direct requests...
Fedora Update for python-docs FEDORA-2012-5892
Check for the Version of python-docs OpenVAS Vulnerability Test Fedora Update for python-docs FEDORA-2012-5892 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...
CVE-2008-5892
CVE-2008-5892 involves multiple SQL injection vulnerabilities in ClickAndEmail. The issues allow remote attackers to execute arbitrary SQL commands through (1) the ID parameter to admin_dblayers.asp in an update action, (2) the adminid parameter to admin_loginCheck.asp (the USERNAME field in admi...
openSUSE 10 Security Update : git (git-5892)
Insufficient quoting of shell characters allowed remote attackers to execute arbitrary commands via the git web interface CVE-2008-5517 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update git-5892...
Immunity Canvas: SSREADER
Name| ssreader ---|--- CVE| CVE-2007-5892 Exploit Pack| CANVAS Description| SSReader 4.0 Stack based buffer overflow Notes| CVE Name: CVE-2007-5892 VENDOR: SSReader Repeatability: Infinite client side - no crash CVE URL: https://vulners.com/cve/CVE-2007-5892 Date public: 11/07/2007 CVSS: 10.0...
CVE-2007-5892
CVE-2007-5892 affects SSReader 4.0 and earlier via the pdg2.dll ActiveX control. The issue is a stack-based buffer overflow triggered by a long argument to the Register method, enabling remote code execution. Affected: SSReader 4.0 and older; root cause: unchecked/overlong input in Register into ...
