CVE-2020-5894

The CVE-2020-5894 issue affects NGINX Controller webserver versions 3.0.0–3.3.0. The root cause is that server-side session tokens are not invalidated after logout, enabling a remote attacker who has a valid token to reuse it until it expires. The official advisory indicates that upgrades to 3.4....

CVE-2018-5894

Improper Validation of Array Index in Multimedia While parsing an mp4 file in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, an out-of-bounds access can occur...

CVE-2018-5894

CVE-2018-5894 describes an out-of-bounds access caused by improper validation of an array index when parsing an mp4 in Snapdragon Automotive, Snapdragon Mobile, and Snapdragon Wear. The vulnerability affects multimedia parsing code, with exploitation possible via a crafted file over a network; ho...

CVE-2016-5894

IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 7.0 and 8.0 is vulnerable to information disclosure vulnerability. A local user could view a plain text password in a Unix console. IBM Reference : 1997408...

CVE-2016-5894

CVE-2016-5894 affects IBM WebSphere Commerce (Enterprise/Professional/Express/Developer) 7.0 and 8.0. The vulnerability is an information disclosure where a local user could view a plain text password in a Unix console, implying credential exposure and potential unauthorized access on affected sy...

CVE-2015-5894

CVE-2015-5894 affects Apple OS X

CVE-2014-5894

CVE-2014-5894 affects the AireTalk: Text, Call, & More! (com.pingshow.amper) Android app, version 2.0.73. The issue is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2013-5894

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.13 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB...

CVE-2013-5894

CVE-2013-5894 is an unspecified vulnerability in the MySQL Server component of Oracle MySQL 5.6.13 and earlier. It allows remote authenticated users to affect availability via unknown InnoDB-related vectors. The vulnerability is listed among multiple MySQL issues in F5 advisories, confirming its ...

CVE-2013-5894

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.13 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB...

CVE-2012-5894

Summary: CVE-2012-5894 describes a SQL injection in Havalite CMS up to version 1.1.0, via the postId parameter in hava_post.php, enabling remote arbitrary SQL execution. The connected documents consistently identify the affected software as Havalite CMS 1.1.0 and earlier and attribute the issue t...

iTunes < 10.2.2 Multiple Vulnerabilities

Binary data 5894.prm...

CVE-2008-5894

Directory traversal vulnerability in index.php in Mediatheka 4.2 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter...

CVE-2008-5894

CVE-2008-5894 is a directory traversal vulnerability in Mediatheka 4.2. The flaw resides in index.php, where the lang parameter can be manipulated (..) to cause local file inclusion and execution. Attackers could leverage this to read or potentially execute arbitrary local files on the affected s...

openSUSE 10 Security Update : epiphany (epiphany-5894)

The epiphany packages explicitly require mozilla-xulrunner181 versions so they need to be supplied together with the mozilla-xulrunner181 update. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Updat...

CVE-2008-5894

creationtimestamp| type| source ---|---|--- 2008-12-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7458...

Gentoo Security Advisory GLSA 200803-31 (mit-krb5)

The remote host is missing updates announced in advisory GLSA 200803-31. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200803-31 (mit-krb5)

The remote host is missing updates announced in advisory GLSA 200803-31. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

SuSE 10 Security Update : Kerberos (ZYPP Patch Number 4852)

This update fixes multiple vulnerabilities in krb5. It's unlikely that those vulnerabilities can actually be exploited. CVE-2007-5894 / CVE-2007-5902 / CVE-2007-5971 / CVE-2007-5972 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

CVE-2007-5894

The reply function in ftpd.c in the gssftp ftpd in MIT Kerberos 5 krb5 does not initialize the length variable when authtype has a certain value, which has unknown impact and remote authenticated attack vectors. NOTE: the original disclosure misidentifies the conditions under which the...