CVE-2024-5932 GiveWP – Donation Plugin and Fundraising Platform <= 3.14.1 - Unauthenticated PHP Object Injection to Remote Code Execution

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.14.1 via deserialization of untrusted input from the 'givetitle' parameter. This makes it possible for unauthenticated attackers to inject a PHP...

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : Sofia-SIP vulnerabilities (USN-5932-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5932-1 advisory. It was discovered that Sofia-SIP incorrectly handled specially crafted SDP packets. A remote attacker could use this...

K12002065: BIG-IP ASM XSS vulnerability CVE-2020-5932

Security Advisory Description A cross-site scripting XSS vulnerability exists in the BIG-IP ASM Configuration utility response and blocking pages. An authenticated user with administrative privileges can specify a response page with any content, including JavaScript code that will be executed whe...

K08464741: Bash vulnerability CVE-2017-5932

Security Advisory Description The path autocompletion feature in Bash 4.4 allows local users to gain privileges via a crafted filename starting with a " double quote character and a command substitution metacharacter. CVE-2017-5932 Impact There is no impact; F5 products are not affected by this...

SUSE CVE-2017-5932

The path autocompletion feature in Bash 4.4 allows local users to gain privileges via a crafted filename starting with a " double quote character and a command substitution metacharacter...

CVE-2020-5932

CVE-2020-5932 affects BIG-IP ASM (Configuration utility) on 15.1.0–15.1.0.5. Affected: Blocking Page/Response Page content in ASM, vulnerable when a privileged admin previews the blocking page. Root cause: XSS via injected content in the response page. Impact: potential JavaScript execution in th...

F5 Networks BIG-IP : BIG-IP ASM XSS vulnerability (K12002065)

A cross-site scripting XSS vulnerability exists in the BIG-IP ASM Configuration utility response and blocking pages. An authenticated user with administrative privileges can specify a response page with any content, including JavaScript code that will be executed when preview is opened...

CVE-2019-5932

CVE-2019-5932 is a cross-site scripting vulnerability in Cybozu Garoon, affecting versions 4.6.0–4.6.3, exploitable via the Portal application by remote authenticated attackers to inject script/HTML. The root cause is described as insufficient validation of client-side data in Garoon’s portal/web...

CVE-2019-5932

Cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 4.6.3 allows remote authenticated attackers to inject arbitrary web script or HTML via the application 'Portal'...

Ubuntu 14.04 LTS / 16.04 LTS : Bash vulnerabilities (USN-3294-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3294-1 advisory. Bernd Dietzel discovered that Bash incorrectly expanded the hostname when displaying the prompt. If a remote attacker were able to modify a...

USN-3294-1: Bash vulnerabilities

Bernd Dietzel discovered that Bash incorrectly expanded the hostname when displaying the prompt. If a remote attacker were able to modify a hostname, this flaw could be exploited to execute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu 16.10. CVE-2016-0634...

CVE-2017-5932

The path autocompletion feature in Bash 4.4 allows local users to gain privileges via a crafted filename starting with a " double quote character and a command substitution metacharacter...

CVE-2017-5932

CVE-2017-5932 is a Bash local privilege escalation exploiting the path autocompletion feature. A crafted filename that begins with a double quote and includes a command substitution metacharacter can allow a local user to execute arbitrary code with elevated privileges. The vulnerability affects ...

CVE-2016-5932

Technical details such as affected components, versions, root cause, and remediation are not publicly provided in the supplied connected documents. Monitor for updates.

CVE-2015-5932

The kernel in Apple OS X before 10.11.1 allows local users to gain privileges by leveraging an unspecified "type confusion" during Mach task processing...

CVE-2015-5932

Summary: CVE-2015-5932 affects the Apple OS X kernel prior to 10.11.1. A local privilege escalation is possible due to a type confusion issue in Mach task processing. The vulnerability is rooted in how Mach tasks are validated, enabling a local attacker to gain higher privileges. Impact: Local co...

CVE-2015-5932

The kernel in Apple OS X before 10.11.1 allows local users to gain privileges by leveraging an unspecified "type confusion" during Mach task processing...

OracleVM 2.1 : kernel (OVMSA-2008-2005)

The remote OracleVM system is missing necessary patches to address critical security updates : - fix utrace deadengine ops race - fix ptraceattach leak - CVE-2007-5093: kernel PWC driver DoS - CVE-2007-6282: IPSec ESP kernel panics - CVE-2007-6712: kernel: infinite loop in highres timers kernel...

CVE-2014-5932

CVE-2014-5932 affects the Vodafone Mobile@Work (com.mobileiron.vodafone.MIClient) Android app (version 6.0.0.1.12R). The root issue is that the client does not verify X.509 certificates from SSL servers, which permits man-in-the-middle attackers to spoof servers and obtain sensitive information v...

CVE-2013-5932

Technical details for CVE-2013-5932 are not publicly available in the provided documents. No confirmed affected versions, root cause, or remediation are given. Monitor for updates.