38 matches found
CVE-2018-5911
CVE-2018-5911 describes a buffer overflow in Qualcomm WLAN/SDP WLAN functionality caused by an improper check of buffer size before copying, affecting Snapdragon Auto, Snapdragon Consumer IoT, Snapdragon Industrial IoT, and Snapdragon Mobile in listed Snapdragon/SDM devices (e.g., SD 625/636/675,...
CVE-2019-5911
CVE-2019-5911 affects UNLHA32.DLL (Win32, versions up to 2.67.1.2) where the installers insecurely load DLLs due to an untrusted DLL search path, enabling arbitrary code execution with the invoking user’s privileges. The issue is a DLL search path/LoadLibrary flaw (CWE-427) in the installer workf...
CVE-2015-5911
Multiple unspecified vulnerabilities in Twisted in Wiki Server in Apple OS X Server before 5.0.3 allow attackers to have an unknown impact via an XML document...
CVE-2015-5911
CVE-2015-5911 affects Apple OS X Server Wiki Server (Twisted) before 5.0.3, with multiple unspecified vulnerabilities that can be triggered via an XML document. The root cause, specific impact, and exploit details are not provided in the supplied documents. No explicit remediation is stated beyon...
CVE-2014-5911
The CVE-2014-5911 entry concerns the Android app Free App Icons & Icon Packs (package com.jellytap.cooliconfinder ) version 1.4 , which does not verify X.509 certificates from TLS servers. This enables a man-in-the-middle attacker to spoof servers and obtain sensitive information via a crafted ce...
CVE-2013-5911
The CVE-2013-5911 entry describes a cross-site scripting (XSS) vulnerability in Tenable SecurityCenter’s devform.php, affecting versions 4.6 through 4.7. The underlying cause is improper validation of user-supplied input to the message parameter, allowing an attacker to inject arbitrary HTML/Java...
CVE-2013-5911
Cross-site scripting XSS vulnerability in devform.php in Tenable SecurityCenter 4.6 through 4.7 allows remote attackers to inject arbitrary web script or HTML via the message parameter...
CVE-2012-5911
CVE-2012-5911: XSS in b2evolution 4.1.3 (blogs/blog1.php) allows remote attackers to inject arbitrary script via the message body. No remediation details are provided in the supplied documents.
CVE-2012-5911
Cross-site scripting XSS vulnerability in blogs/blog1.php in b2evolution 4.1.3 allows remote attackers to inject arbitrary web script or HTML via the message body...
Exim < 4.76 dkim_exim_verify_finish Remote Format String Vulnerability
Binary data 5911.prm...
SuSE 10 Security Update : pam_mount (ZYPP Patch Number 5911)
This update fixes the temp-flle handling in the passwdehd script that allowed a symlink attack. CVE-2008-5138 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
CVE-2008-5911
RealNetworks Helix Server (and Helix Mobile Server) versions 11.x before 11.1.8 and 12.x before 12.0.1 are affected by multiple buffer overflow vulnerabilities triggered by RTSP requests. The CVE-2008-5911 entry covers issues including heap overflow via RTSP SETUP, DESCRIBE, and NTLM authenticati...
RealNetworks Helix Server RTSP Proxy-Require heap overflow
Added: 03/18/2008 CVE: CVE-2008-5911 BID: 33059 Background RealNetworks Helix Server is a media server supporting multiple formats and platforms. Problem A heap overflow vulnerability allows remote attackers to execute arbitrary commands by sending a long, specially crafted Proxy-Require header i...
RealNetworks Helix Server RTSP Proxy-Require heap overflow
Added: 03/18/2008 CVE: CVE-2008-5911 BID: 33059 Background RealNetworks Helix Server is a media server supporting multiple formats and platforms. Problem A heap overflow vulnerability allows remote attackers to execute arbitrary commands by sending a long, specially crafted Proxy-Require header i...
CVE-2007-5911
Multiple stack-based buffer overflows in the AxMetaStream ActiveX control in AxMetaStream.dll 3.3.2.26 in Viewpoint Media Player 3.2 allow remote attackers to execute arbitrary code via a long string argument to the 1 BroadcastKey, 2 BroadcastKeyFileURL, 3 Component, 4 ComponentClassID, 5...
CVE-2007-5911
CVE-2007-5911 affects Viewpoint Media Player 3.2 via the AxMetaStream ActiveX control (AxMetaStream.dll 3.3.2.26). The vulnerability consists of multiple stack-based buffer overflows that allow remote attackers to execute arbitrary code when passing long strings to any of the following methods: B...
CVE-2007-5911
Multiple stack-based buffer overflows in the AxMetaStream ActiveX control in AxMetaStream.dll 3.3.2.26 in Viewpoint Media Player 3.2 allow remote attackers to execute arbitrary code via a long string argument to the 1 BroadcastKey, 2 BroadcastKeyFileURL, 3 Component, 4 ComponentClassID, 5...
CVE-2006-5911
CVE-2006-5911 concerns multiple PHP remote file inclusion vulnerabilities in Campware Campsite prior to 2.6.2. The flaw allows an attacker to cause arbitrary PHP code execution by supplying a URL in the g_documentRoot parameter to a large set of Campware PHP scripts (including Alias.php, Article....