Lucene search
+L

38 matches found

CVE
CVE
added 2020/08/26 3:43 p.m.55 views

CVE-2020-5926

CVE-2020-5926 (BIG-IP SIP ALG) affects BIG-IP SIP ALG profile in TMM for versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, and 14.1.0-14.1.2.6. The flaw arises while parsing SIP multipart MIME payloads with certain boundary strings, causing TMM to free memory to the wrong cache, leading to memory corrup...

7.5CVSS7.5AI score0.01044EPSS
SaveExploits0References1Affected Software11
NVD
NVD
added 2019/03/27 4:29 p.m.15 views

CVE-2018-5926

A potential vulnerability has been identified in HP Remote Graphics Software’s certificate authentication process version 7.5.0 and earlier...

9.1CVSS9.4AI score0.01172EPSS
SaveExploits0References1
CVE
CVE
added 2019/03/27 3:23 p.m.45 views

CVE-2018-5926

HP Remote Graphics Software (RGS) versions 7.5.0 and earlier contain a vulnerability in the certificate authentication process that could disclose information. Root cause: issues in certificate handling during authentication. Impact as per sources: potential information disclosure with high confi...

9.1CVSS9.3AI score0.01172EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2019/03/27 1:17 p.m.42 views

CVE-2019-5926

CVE-2019-5926 concerns KinagaCMS prior to version 6.5 with a cross-site scripting (XSS) vulnerability. According to the connected sources, the vulnerability allows a remote authenticated attacker to inject arbitrary web script or HTML via unspecified vectors, affecting KinagaCMS deployments that ...

6.1CVSS5.7AI score0.0153EPSS
SaveExploits0References3Affected Software1
OpenVAS
OpenVAS
added 2017/09/26 12:00 a.m.3001 views

Generic HTTP Directory Traversal / File Inclusion (Web Application URL Parameter) - Active Check

Generic check for HTTP directory traversal / file inclusion vulnerabilities within URL parameters of the remote web application. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

10CVSS6.7AI score0.82689EPSS
SaveExploits118References4
NVD
NVD
added 2017/02/27 7:59 a.m.22 views

CVE-2017-5926

Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern AMD processors. By performing a side-channel attack on the MMU operations, it is possible to leak data and code pointers from JavaScript, breaking ASLR...

7.5CVSS7.4AI score0.01581EPSS
SaveExploits1References3
CVE
CVE
added 2017/02/27 7:25 a.m.71 views

CVE-2017-5926

CVE-2017-5926 describes a side-channel vulnerability affecting AMD processors where page table walks by the MMU leave traces in the last-level cache. A JavaScript-based attack can leak data and code pointers, effectively breaking ASLR. The connected documents confirm the issue is tied to AMD MMU/...

7.5CVSS7.3AI score0.01581EPSS
SaveExploits1References3Affected Software20
Prion
Prion
added 2015/10/23 9:59 p.m.23 views

Memory corruption

The CoreGraphics component in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2015-5926...

6.8CVSS7.7AI score0.02425EPSS
SaveExploits0References7Affected Software3
CVE
CVE
added 2015/10/23 9:00 p.m.74 views

CVE-2015-5926

CVE-2015-5926 affects Apple’s CoreGraphics in iOS <9.1, OS X <10.11.1, and watchOS

6.8CVSS7.5AI score0.02425EPSS
SaveExploits0References7Affected Software1
CVE
CVE
added 2014/09/18 10:00 a.m.39 views

CVE-2014-5926

CVE-2014-5926 affects the DCU Mobile Banking Android app (com.Vertifi.Mobile.P211391825) and is due to the app not verifying X.509 certificates from SSL servers. This enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The connected doc...

5.4CVSS6AI score0.00271EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2011/05/20 12:00 a.m.12 views

HP Intelligent Management Center Detection

Binary data 5926.prm...

7.3AI score
SaveExploits0References1
CVE
CVE
added 2009/01/21 6:00 p.m.52 views

CVE-2008-5926

CVE-2008-5926 affects the ASP-DEv Internal E-Mail System, where multiple SQL injection flaws exist in login.asp that allow remote attackers to alter the database by manipulating the login (user) or password fields. The NVD entry reports a base score of 7.5 (HIGH) with network access and LOW attac...

7.5CVSS8.9AI score0.00973EPSS
SaveExploits2References4Affected Software1
NVD
NVD
added 2007/11/10 2:46 a.m.28 views

CVE-2007-5927

Directory traversal vulnerability in OpenBase 10.0.5 and earlier allows remote authenticated users to create files with arbitrary contents via a .. dot dot in the first argument to the GlobalLog stored procedure. NOTE: this can be leveraged to execute arbitrary code using CVE-2007-5926...

9CVSS6.9AI score0.03972EPSS
SaveExploits1References3
Prion
Prion
added 2007/11/10 2:46 a.m.18 views

Directory traversal

Directory traversal vulnerability in OpenBase 10.0.5 and earlier allows remote authenticated users to create files with arbitrary contents via a .. dot dot in the first argument to the GlobalLog stored procedure. NOTE: this can be leveraged to execute arbitrary code using CVE-2007-5926...

9CVSS7.2AI score0.03972EPSS
SaveExploits3References3Affected Software1
Cvelist
Cvelist
added 2007/11/10 2:00 a.m.36 views

CVE-2007-5926

OpenBase 10.0.5 and earlier allows remote authenticated users to execute arbitrary commands via shell metacharacters in arguments to the 1 AsciiBackup, 2 OEMLicenseInstall, and possibly other stored procedures...

7AI score0.03441EPSS
SaveExploits2References4
Cvelist
Cvelist
added 2007/11/10 2:00 a.m.32 views

CVE-2007-5927

Directory traversal vulnerability in OpenBase 10.0.5 and earlier allows remote authenticated users to create files with arbitrary contents via a .. dot dot in the first argument to the GlobalLog stored procedure. NOTE: this can be leveraged to execute arbitrary code using CVE-2007-5926...

6.9AI score0.03972EPSS
SaveExploits1References3
CVE
CVE
added 2007/11/10 2:00 a.m.53 views

CVE-2007-5926

CVE-2007-5926 and CVE-2007-5927 describe vulnerabilities in OpenBase 10.0.5 and earlier. The issues allow remote authenticated users to (1) execute arbitrary commands by passing shell metacharacters to stored procedures such as AsciiBackup and OEMLicenseInstall, and (2) perform directory traversa...

9CVSS7.1AI score0.03441EPSS
SaveExploits2References4Affected Software1
CVE
CVE
added 2006/11/16 12:00 a.m.46 views

CVE-2006-5926

CVE-2006-5926 affects Vallheru prior to 1.0.7, where mail.php is vulnerable to SQL injection via the (1) id or (2) to parameters. The issue allows remote attackers to execute arbitrary SQL commands. The description and references indicate this is a database query parameter abuse in the affected s...

7.5CVSS8.9AI score0.01308EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder