54 matches found
CVE-2013-5918
Cross-site scripting XSS vulnerability in platinumseopack.php in the Platinum SEO plugin before 1.3.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...
UAT-5918 Targets Taiwan's Critical Infrastructure Using Web Shells and Open-Source Tools
Threat hunters have uncovered a new threat actor named UAT-5918 that has been attacking critical infrastructure entities in Taiwan since at least 2023. "UAT-5918, a threat actor believed to be motivated by establishing long-term access for information theft, uses a combination of web shells and...
UAT-5918 targets critical infrastructure entities in Taiwan
By Jung soo An, Asheer Malhotra, Brandon White, and Vitor Ventura. Cisco Talos discovered a malicious campaign we track under the UAT-5918 umbrella that has been active since at least 2023. UAT-5918, a threat actor believed to be motivated by establishing long-term access for information theft,...
CVE-2024-5918
CVE-2024-5918 affects Palo Alto Networks PAN-OS/Panorama GlobalProtect with an improper certificate validation that allows an authenticated user with a crafted client certificate to impersonate another legitimate GlobalProtect user. Publicly documented exploitability is supported by multiple sour...
CVE-2024-5918
creationtimestamp| type| source ---|---|--- 2024-11-13 17:00:00+00:00| seen| https://security.paloaltonetworks.com/CVE-2024-5918 2024-11-13 18:38:44+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113477099455726632 2024-11-14 09:58:52+00:00| seen|...
CVE-2023-5918
creationtimestamp| type| source ---|---|--- 2023-11-02 15:28:51+00:00| seen| https://t.me/cibsecurity/73427...
CVE-2023-5918 SourceCodester Visitor Management System manage_user.php sql injection
A vulnerability, which was classified as critical, was found in SourceCodester Visitor Management System 1.0. Affected is an unknown function of the file manageuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The identifier of thi...
CVE-2023-5918
CVE-2023-5918 affects SourceCodester Visitor Management System v1.0. The vulnerability is an SQL injection arising from the manipulation of the id parameter in the file manage_user.php , allowing remote exploitation. Multiple connected sources corroborate this as a critical issue with unauthentic...
CVE-2020-5918
In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management Microkernel TMM may stop responding when processing Stream Control Transmission Protocol SCTP traffic when traffic volume is high. This vulnerability...
CVE-2020-5918
CVE-2020-5918 affects BIG-IP TMM with SCTP profile; vulnerable in multiple releases, with disruption of SCTP traffic as volume rises. According to F5 security advisory K26464312, fixes are available in newer releases: 16.x to 16.0.0, 15.x (15.1.0.5 for 15.1.0–15.1.0.4 and 15.1.0.5 for 15.0.0–15.0...
F5 Networks BIG-IP : TMM SCTP vulnerability (K26464312)
The Traffic Management Microkernel TMM may stop responding when processing Stream Control Transmission Protocol SCTP traffic when traffic volume is high. This vulnerability affects TMM by way of a virtual server configured with an SCTP profile.CVE-2020-5918 Impact Traffic processing is disrupted...
CVE-2019-5918
Nablarch 5 5, and 5u1 to 5u13 allows remote attackers to conduct XML External Entity XXE attacks via unspecified vectors...
CVE-2019-5918
Affected software: Nablarch 5 (5, and 5u1 to 5u13). Vulnerability: XML External Entity (XXE) attacks due to lack of XML validation/external DTD handling (CWE-611). Impact: remote attacker could cause information leakage or system shutdown. Root cause (as stated): XXE in the generic formatter func...
JVN#56542712: Multiple vulnerabilities in Nablarch
Nablarch provided by TIS Inc. contains multiple vulnerabilities listed below. The vulnerability in the function of generic formatter by XXE attacks CWE-611 - CVE-2019-5918 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H| Base Score: 8.2 CVSS v2|...
CVE-2018-5918
Possible buffer overflow in DRM Trusted application due to lack of check function return values in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD...
CVE-2018-5918
CVE-2018-5918 describes a possible buffer overflow in the DRM Trusted application on Qualcomm Snapdragon platforms (e.g., MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD family up to SDX24 and SXR1130, including SD410/12, SD425, SD430, SD450, SD615/16/SD415, SD625, SD650/52, SD800, SD810, SD82...
CVE-2015-5918
GasGauge in Apple watchOS before 2 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2015-5919...
Memory corruption
GasGauge in Apple watchOS before 2 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2015-5918...
CVE-2015-5918
CVE-2015-5918 affects Apple watchOS prior to version 2, where the GasGauge component allows local attackers to gain privileges or cause a denial of service via memory corruption. The vulnerability is described as memory corruption triggered by unspecified vectors and is noted as distinct from CVE...