93 matches found
CVE-2023-5914
Cross-site scripting XSS...
CVE-2023-5914
CVE-2023-5914 affects Citrix StoreFront. The connected nuclei template confirms a Reflected Cross-Site Scripting issue exploitable without authentication, triggered by coercing an error message during XML parsing in the SSO flow. Impact is unauthenticated users injecting JavaScript to steal crede...
CVE-2023-5914
Cross-site scripting XSS...
Citrix StoreFront Security Bulletin for CVE-2023-5914
A vulnerability has been discovered in Citrix StoreFront, which, if exploited, may result in a Cross-site scripting XSS attack. Affected Versions: The following supported versions of Citrix StoreFront are affected by the vulnerability: Current Release CR Citrix StoreFront before 2308.1 Citrix...
Ubuntu 22.04 LTS : Linux kernel (OEM) vulnerabilities (USN-5914-1)
The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5914-1 advisory. It was discovered that the Upper Level Protocol ULP subsystem in the Linux kernel did not properly handle sockets entering the LISTEN state in certain...
K37466356: BIG-IP ASM vulnerability CVE-2020-5914
Security Advisory Description Undisclosed server cookie scenario may cause BD to restart under some circumstances. CVE-2020-5914 Impact The vulnerability allows remote attackers who have control over the backend webserver to cause a denial-of-service DoS attack on the BIG-IP ASM system. Security...
Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2020-5914)
The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5914 advisory. - powercap: restrict energy meter to root access Kanth Ghatraju Orabug: 32040802 CVE-2020-8694 CVE-2020-8695 - KVM: ioapic: break infinite recursio...
CVE-2020-5914
In BIG-IP ASM versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, undisclosed server cookie scenario may cause BD to restart under some circumstances...
CVE-2020-5914
The CVE-2020-5914 entry is supported by connected advisories for BIG-IP ASM. Affected are BIG-IP ASM versions: 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, 11.6.1-11.6.5.1. The root cause is an undisclosed server cookie scenario causing the BD process to re...
F5 Networks BIG-IP : BIG-IP ASM vulnerability (K37466356)
Undisclosed server cookie scenario may cause BD to restartunder some circumstances. CVE-2020-5914 Impact The vulnerability allows remote attackers who have control over the backend webserver to cause a denial-of-service DoS attack on the BIG-IP ASM system. C Tenable Network Security, Inc. The...
CVE-2019-5914
CVE-2019-5914 affects V20 PRO L-01J devices (software versions L01J20c and L01J20d). The vulnerability is a NULL pointer dereference in processing Passpoint/Wi‑Fi connections, which can cause the device to crash when a specially crafted Passpoint AP is in range. Exploitation details are documente...
CVE-2018-5914
Improper input validation in TZ led to array out of bound in TZ function while accessing the peripheral details using the incoming data in Snapdragon Mobile, Snapdragon Wear version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 835, SDA660...
CVE-2018-5914
Improper input validation in TZ led to array out of bound in TZ function while accessing the peripheral details using the incoming data in Snapdragon Mobile, Snapdragon Wear version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 835, SDA660...
CVE-2018-5914
CVE-2018-5914 involves improper input validation in the TZ component, causing an array out-of-bounds in TZ when accessing peripheral details from incoming data. Affected are Snapdragon Mobile and Snapdragon Wear platforms, including versions MDM9206, MDM9607, MDM9650, SD 210/212/205, SD 425, SD 4...
CVE-2017-5914
The DOT IT Banque Zitouna app 2.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2017-5914
The DOT IT Banque Zitouna iOS app, version 2.1, fails to validate X.509 certificates from SSL servers, enabling man-in-the-middle attackers to impersonate trusted servers and obtain sensitive data via crafted certificates. Affected component: iOS client-side SSL certificate validation. Root cause...
CVE-2015-5914
CVE-2015-5914 affects the EFI component in Apple OS X prior to 10.11. The issue enables physically proximate attackers to modify firmware during EFI updates by inserting an Apple Ethernet Thunderbolt adapter with crafted code in an Option ROM (Thunderstrike). Root cause is an incomplete fix for C...
CVE-2014-5914
CVE-2014-5914 affects the Finansbank Cep Subesi Android app (com.finansbank.mobile.cepsube) version 1.1.5. The root cause is failure to verify X.509 certificates from SSL servers, allowing MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The NVD notes a ...
[SECURITY] [DSA 2782-1] polarssl security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2782-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 20, 2013 http://www.debian.org/security/faq -...
