Fedora 20 : polarssl-1.2.9-1.fc20 (2013-18216)

Bugfix release fixing CVE-2013-5915, https://polarssl.org/tech-updates/releases/polarssl-1.2.9-released Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much a...

CVE-2013-5915

CVE-2013-5915 concerns PolarSSL prior to 1.2.9, where the RSA-CRT Montgomery multiplication was not implemented securely, enabling a timing side-channel attack to potentially recover RSA private keys. Public references in connected docs show厂 PolarSSL advisories and Fedora/OpenVAS entries noting ...

CVE-2012-5915

CVE-2012-5915 affects Neocrome Seditio builds 161 and earlier. The vulnerability is an information-disclosure flaw where remote attackers can cause an error message to reveal the installation path by directly requesting any of the following: view.php, plugins/contact/lang/contact.en.lang.php, sys...

CVE-2008-5915

An unspecified function in the JavaScript implementation in Google Chrome creates and exposes a "temporary footprint" when there is a current login to a web site, which makes it easier for remote attackers to trick a user into acting upon a spoofed pop-up message, aka an "in-session phishing...

CVE-2008-5915

CVE-2008-5915 concerns Google Chrome’s JavaScript implementation where an unspecified function creates and exposes a 'temporary footprint' during an active login, enabling in-session phishing via spoofed pop-ups. The sources describe the issue but provide no actionable details (no disclosure of f...

CVE-2007-5915

Directory traversal vulnerability in index.php in phphelpdesk 0.6.16 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the whattodo parameter...

CVE-2007-5915

CVE-2007-5915 is a directory traversal vulnerability affecting phphelpdesk 0.6.16 in index.php (whattodo parameter). An attacker can include and execute arbitrary local files by supplying a .. (dot dot) path, leading to partial confidentiality, integrity, and availability impact per the NVD CVSSv...

CVE-2006-5915

The CVE-2006-5915 entry describes multiple cross-site scripting (XSS) vulnerabilities in the SAMEDIA LandShop component ls.php. The issue allows remote attackers to inject arbitrary web script or HTML by providing inputs in one or more of the following parameters: start, CAT_ID, keyword, search_a...