48 matches found
CVE-2023-5895
creationtimestamp| type| source ---|---|--- 2023-11-01 06:34:45+00:00| seen| https://t.me/cibsecurity/73286...
CVE-2023-5895
CVE-2023-5895 affects the PKP library (pkp/pkp-lib) prior to 3.3.0-16, with a DOM-based Cross-site Scripting (XSS) flaw caused by unescaped user input in the web output. Public references in Red Hat and OSV/NVD confirm the issue as XSS in pkp/pkp-lib, tracked across multiple sources. The vulnerab...
CVE-2023-5895 Cross-site Scripting (XSS) - DOM in pkp/pkp-lib
Cross-site Scripting XSS - DOM in GitHub repository pkp/pkp-lib prior to 3.3.0-16...
Ubuntu: Security Advisory (USN-5895-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
K95120415: NGINX Controller AVRD vulnerability CVE-2020-5895
Security Advisory Description AVRD uses world-readable and world-writable permissions on its socket, which allows processes or users on the local system to write arbitrary data into the socket. A local system attacker can make AVRD segmentation fault SIGSEGV by writing malformed messages to the...
CVE-2020-5895
CVE-2020-5895 affects NGINX Controller AVRD in versions 3.1.0–3.3.0, where AVRD sockets are world-readable and world-writable, allowing a local attacker to write arbitrary data and trigger a segmentation fault by sending malformed messages. Remediation: upgrade to 3.4.0 (per advisory) and/or depl...
CVE-2018-5895
CVE-2018-5895 affects Qualcomm qcacld, specifically the wma_process_utf_event() path in Android on Google Pixel/Nexus devices prior to the 2018-06-05 patch level. The issue is a buffer over-read caused by improper buffer length validation when writing into param_buf->num_wow_packet_buffer, lea...
CVE-2018-9974
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
Heap overflow
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
CVE-2018-9974
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
CVE-2018-9974
Foxit Reader 9.0.1.1049 is affected by CVE-2018-9974. The issue lies in ConvertToPDF_x86.dll where improper validation of the length of user-supplied data to a heap-based buffer allows remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious ...
CVE-2015-5895
CVE-2015-5895 affects SQLite versions before 3.8.10.2 used in Apple iOS up to iOS 9; the advisory notes unknown impact/attack vectors. The F5 advisory confirms the CVE and references remediation via updating SQLite to 3.8.10.2; separate entries corroborate the affected version. If deploying affec...
CVE-2014-5895
The CVE-2014-5895 entry applies to the ShopYourWay Android app (package com.sears.shopyourway) version 1.9. It documents a failure to verify X.509 certificates from SSL servers, enabling man‑in‑the‑middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The c...
Oracle Java SE Multiple Unspecified Vulnerabilities-01 (Jan 2014) - Windows
Oracle Java SE is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RHEL 5 / 6 : java-1.7.0-oracle (RHSA-2014:0030)
The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:0030 advisory. Oracle Java SE version 7 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit. This update fixes...
Critical: Red Hat Security Advisory: java-1.7.0-oracle security update
Updated java-1.7.0-oracle packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give...
CVE-2013-5895
CVE-2013-5895 is described as an unspecified vulnerability in Oracle Java SE 7u45 and JavaFX 2.2.45 that could affect confidentiality via unknown JavaFX-related vectors. The initial description does not specify exploit details, impact scope beyond confidentiality, or concrete CVE root cause. Publ...
KLA10511 Multiple vulnerabilities in Oracle products
An unspecified vulnerabilities were found in Oracle products. By exploiting this vulnerability malicious users can affect integrity, confidentiality and availability. This vulnerability can be exploited remotely via an unknown vectors related to 2D, Beans, CORBA, Deployment, Hotspot, Install, JAA...