38 matches found
CVE-2020-5926
CVE-2020-5926 (BIG-IP SIP ALG) affects BIG-IP SIP ALG profile in TMM for versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, and 14.1.0-14.1.2.6. The flaw arises while parsing SIP multipart MIME payloads with certain boundary strings, causing TMM to free memory to the wrong cache, leading to memory corrup...
CVE-2018-5926
A potential vulnerability has been identified in HP Remote Graphics Software’s certificate authentication process version 7.5.0 and earlier...
CVE-2018-5926
HP Remote Graphics Software (RGS) versions 7.5.0 and earlier contain a vulnerability in the certificate authentication process that could disclose information. Root cause: issues in certificate handling during authentication. Impact as per sources: potential information disclosure with high confi...
CVE-2019-5926
CVE-2019-5926 concerns KinagaCMS prior to version 6.5 with a cross-site scripting (XSS) vulnerability. According to the connected sources, the vulnerability allows a remote authenticated attacker to inject arbitrary web script or HTML via unspecified vectors, affecting KinagaCMS deployments that ...
Generic HTTP Directory Traversal / File Inclusion (Web Application URL Parameter) - Active Check
Generic check for HTTP directory traversal / file inclusion vulnerabilities within URL parameters of the remote web application. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
CVE-2017-5926
Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern AMD processors. By performing a side-channel attack on the MMU operations, it is possible to leak data and code pointers from JavaScript, breaking ASLR...
CVE-2017-5926
CVE-2017-5926 describes a side-channel vulnerability affecting AMD processors where page table walks by the MMU leave traces in the last-level cache. A JavaScript-based attack can leak data and code pointers, effectively breaking ASLR. The connected documents confirm the issue is tied to AMD MMU/...
Memory corruption
The CoreGraphics component in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2015-5926...
CVE-2015-5926
CVE-2015-5926 affects Apple’s CoreGraphics in iOS <9.1, OS X <10.11.1, and watchOS
CVE-2014-5926
CVE-2014-5926 affects the DCU Mobile Banking Android app (com.Vertifi.Mobile.P211391825) and is due to the app not verifying X.509 certificates from SSL servers. This enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The connected doc...
HP Intelligent Management Center Detection
Binary data 5926.prm...
CVE-2008-5926
CVE-2008-5926 affects the ASP-DEv Internal E-Mail System, where multiple SQL injection flaws exist in login.asp that allow remote attackers to alter the database by manipulating the login (user) or password fields. The NVD entry reports a base score of 7.5 (HIGH) with network access and LOW attac...
CVE-2007-5927
Directory traversal vulnerability in OpenBase 10.0.5 and earlier allows remote authenticated users to create files with arbitrary contents via a .. dot dot in the first argument to the GlobalLog stored procedure. NOTE: this can be leveraged to execute arbitrary code using CVE-2007-5926...
Directory traversal
Directory traversal vulnerability in OpenBase 10.0.5 and earlier allows remote authenticated users to create files with arbitrary contents via a .. dot dot in the first argument to the GlobalLog stored procedure. NOTE: this can be leveraged to execute arbitrary code using CVE-2007-5926...
CVE-2007-5926
OpenBase 10.0.5 and earlier allows remote authenticated users to execute arbitrary commands via shell metacharacters in arguments to the 1 AsciiBackup, 2 OEMLicenseInstall, and possibly other stored procedures...
CVE-2007-5927
Directory traversal vulnerability in OpenBase 10.0.5 and earlier allows remote authenticated users to create files with arbitrary contents via a .. dot dot in the first argument to the GlobalLog stored procedure. NOTE: this can be leveraged to execute arbitrary code using CVE-2007-5926...
CVE-2007-5926
CVE-2007-5926 and CVE-2007-5927 describe vulnerabilities in OpenBase 10.0.5 and earlier. The issues allow remote authenticated users to (1) execute arbitrary commands by passing shell metacharacters to stored procedures such as AsciiBackup and OEMLicenseInstall, and (2) perform directory traversa...
CVE-2006-5926
CVE-2006-5926 affects Vallheru prior to 1.0.7, where mail.php is vulnerable to SQL injection via the (1) id or (2) to parameters. The issue allows remote attackers to execute arbitrary SQL commands. The description and references indicate this is a database query parameter abuse in the affected s...