Lucene search
+L

38 matches found

CVE
CVE
added 2019/06/14 5:02 p.m.288 views

CVE-2018-5911

CVE-2018-5911 describes a buffer overflow in Qualcomm WLAN/SDP WLAN functionality caused by an improper check of buffer size before copying, affecting Snapdragon Auto, Snapdragon Consumer IoT, Snapdragon Industrial IoT, and Snapdragon Mobile in listed Snapdragon/SDM devices (e.g., SD 625/636/675,...

7.8CVSS7.9AI score0.00216EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2019/02/13 6:00 p.m.46 views

CVE-2019-5911

CVE-2019-5911 affects UNLHA32.DLL (Win32, versions up to 2.67.1.2) where the installers insecurely load DLLs due to an untrusted DLL search path, enabling arbitrary code execution with the invoking user’s privileges. The issue is a DLL search path/LoadLibrary flaw (CWE-427) in the installer workf...

7.8CVSS7.7AI score0.00796EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2015/09/18 10:00 a.m.30 views

CVE-2015-5911

Multiple unspecified vulnerabilities in Twisted in Wiki Server in Apple OS X Server before 5.0.3 allow attackers to have an unknown impact via an XML document...

8.9AI score0.01968EPSS
SaveExploits0References3
CVE
CVE
added 2015/09/18 10:00 a.m.66 views

CVE-2015-5911

CVE-2015-5911 affects Apple OS X Server Wiki Server (Twisted) before 5.0.3, with multiple unspecified vulnerabilities that can be triggered via an XML document. The root cause, specific impact, and exploit details are not provided in the supplied documents. No explicit remediation is stated beyon...

10CVSS8.6AI score0.01968EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2014/09/17 10:00 a.m.44 views

CVE-2014-5911

The CVE-2014-5911 entry concerns the Android app Free App Icons & Icon Packs (package com.jellytap.cooliconfinder ) version 1.4 , which does not verify X.509 certificates from TLS servers. This enables a man-in-the-middle attacker to spoof servers and obtain sensitive information via a crafted ce...

5.4CVSS6AI score0.00271EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2013/09/24 10:00 a.m.64 views

CVE-2013-5911

The CVE-2013-5911 entry describes a cross-site scripting (XSS) vulnerability in Tenable SecurityCenter’s devform.php, affecting versions 4.6 through 4.7. The underlying cause is improper validation of user-supplied input to the message parameter, allowing an attacker to inject arbitrary HTML/Java...

4.3CVSS5.9AI score0.00931EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2013/09/24 10:00 a.m.38 views

CVE-2013-5911

Cross-site scripting XSS vulnerability in devform.php in Tenable SecurityCenter 4.6 through 4.7 allows remote attackers to inject arbitrary web script or HTML via the message parameter...

5.7AI score0.00931EPSS
SaveExploits0References2
CVE
CVE
added 2012/11/17 9:00 p.m.67 views

CVE-2012-5911

CVE-2012-5911: XSS in b2evolution 4.1.3 (blogs/blog1.php) allows remote attackers to inject arbitrary script via the message body. No remediation details are provided in the supplied documents.

4.3CVSS5.9AI score0.01327EPSS
SaveExploits1References6Affected Software1
Cvelist
Cvelist
added 2012/11/17 9:00 p.m.37 views

CVE-2012-5911

Cross-site scripting XSS vulnerability in blogs/blog1.php in b2evolution 4.1.3 allows remote attackers to inject arbitrary web script or HTML via the message body...

5.7AI score0.01327EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
added 2011/05/10 12:00 a.m.29 views

Exim < 4.76 dkim_exim_verify_finish Remote Format String Vulnerability

Binary data 5911.prm...

7.5CVSS7.3AI score0.0394EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2009/09/24 12:00 a.m.16 views

SuSE 10 Security Update : pam_mount (ZYPP Patch Number 5911)

This update fixes the temp-flle handling in the passwdehd script that allowed a symlink attack. CVE-2008-5138 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

6.9CVSS5.3AI score0.00286EPSS
SaveExploits0References2
CVE
CVE
added 2009/01/20 3:26 p.m.63 views

CVE-2008-5911

RealNetworks Helix Server (and Helix Mobile Server) versions 11.x before 11.1.8 and 12.x before 12.0.1 are affected by multiple buffer overflow vulnerabilities triggered by RTSP requests. The CVE-2008-5911 entry covers issues including heap overflow via RTSP SETUP, DESCRIBE, and NTLM authenticati...

10CVSS8.1AI score0.06185EPSS
SaveExploits4References7Affected Software2
Saint
Saint
added 2008/03/18 12:00 a.m.46 views

RealNetworks Helix Server RTSP Proxy-Require heap overflow

Added: 03/18/2008 CVE: CVE-2008-5911 BID: 33059 Background RealNetworks Helix Server is a media server supporting multiple formats and platforms. Problem A heap overflow vulnerability allows remote attackers to execute arbitrary commands by sending a long, specially crafted Proxy-Require header i...

10CVSS7.6AI score0.06185EPSS
SaveExploits4
Saint
Saint
added 2008/03/18 12:00 a.m.80 views

RealNetworks Helix Server RTSP Proxy-Require heap overflow

Added: 03/18/2008 CVE: CVE-2008-5911 BID: 33059 Background RealNetworks Helix Server is a media server supporting multiple formats and platforms. Problem A heap overflow vulnerability allows remote attackers to execute arbitrary commands by sending a long, specially crafted Proxy-Require header i...

10CVSS7.6AI score0.06185EPSS
SaveExploits4
NVD
NVD
added 2007/11/10 2:46 a.m.22 views

CVE-2007-5911

Multiple stack-based buffer overflows in the AxMetaStream ActiveX control in AxMetaStream.dll 3.3.2.26 in Viewpoint Media Player 3.2 allow remote attackers to execute arbitrary code via a long string argument to the 1 BroadcastKey, 2 BroadcastKeyFileURL, 3 Component, 4 ComponentClassID, 5...

6.8CVSS7.8AI score0.04013EPSS
SaveExploits1References5
CVE
CVE
added 2007/11/10 2:00 a.m.55 views

CVE-2007-5911

CVE-2007-5911 affects Viewpoint Media Player 3.2 via the AxMetaStream ActiveX control (AxMetaStream.dll 3.3.2.26). The vulnerability consists of multiple stack-based buffer overflows that allow remote attackers to execute arbitrary code when passing long strings to any of the following methods: B...

6.8CVSS7.8AI score0.04013EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2007/11/10 2:00 a.m.32 views

CVE-2007-5911

Multiple stack-based buffer overflows in the AxMetaStream ActiveX control in AxMetaStream.dll 3.3.2.26 in Viewpoint Media Player 3.2 allow remote attackers to execute arbitrary code via a long string argument to the 1 BroadcastKey, 2 BroadcastKeyFileURL, 3 Component, 4 ComponentClassID, 5...

7.8AI score0.04013EPSS
SaveExploits1References5
CVE
CVE
added 2006/11/15 3:00 p.m.60 views

CVE-2006-5911

CVE-2006-5911 concerns multiple PHP remote file inclusion vulnerabilities in Campware Campsite prior to 2.6.2. The flaw allows an attacker to cause arbitrary PHP code execution by supplying a URL in the g_documentRoot parameter to a large set of Campware PHP scripts (including Alias.php, Article....

7.5CVSS8AI score0.04557EPSS
SaveExploits38References45Affected Software1
Rows per page
Query Builder