RHEL 7 : kernel (RHSA-2022:5937)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:5937 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: Incomplete cleanup of multi-core share...

SUSE: Security Advisory (SUSE-SU-2017:0798-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-5937

On BIG-IP AFM 15.1.0-15.1.0.5, the Traffic Management Microkernel TMM may produce a core file while processing layer 4 L4 behavioral denial-of-service DoS traffic...

CVE-2020-5937

CVE-2020-5937 affects BIG-IP AFM where the Traffic Management Microkernel (TMM) may produce a core file while processing L4 behavioral DoS traffic. Affected versions include BIG-IP AFM 15.1.0–15.1.0.5 with vulnerability details published by F5 (K58290051) and corroborated in Red Hat advisories an...

F5 Networks BIG-IP : BIG-IP AFM vulnerability (K58290051)

The Traffic Management Microkernel TMM may produce a core file while processing layer 4 L4 behavioral denial-of-service DoS traffic. CVE-2020-5937 Impact The BIG-IP system may temporarily fail to process traffic as it recovers from a TMM restart, and devices configured as a high-availability HA...

CVE-2019-5937

CVE-2019-5937 affects Cybozu Garoon 4.0.0–4.10.1. The vulnerability is a cross-site scripting (XSS) flaw in the user information path, allowing remote authenticated attackers to inject arbitrary web script or HTML via user information. Impact is that an attacker can execute scripts in a victim’s ...

CVE-2017-9021

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-5937. Reason: This candidate is a reservation duplicate of CVE-2017-5937. Notes: All CVE users should reference CVE-2017-5937 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2017-9021

CVE-2017-9021 is a rejected candidate; reference CVE-2017-5937 instead.

openSUSE Security Update : virglrenderer (openSUSE-2017-415)

This update for virglrenderer fixes the following issues : Security issues fixed : - CVE-2017-6386: memory leakage while in vrendcreatevertexelementsstate bsc1027376 - CVE-2017-6355: integer overflow while creating shader object bsc1027108 - CVE-2017-6317: fix memory leak in add shader program...

SUSE SLED12 / SLES12 Security Update : virglrenderer (SUSE-SU-2017:0798-1)

This update for virglrenderer fixes the following issues: Security issues fixed : - CVE-2017-6386: memory leakage while in vrendcreatevertexelementsstate bsc1027376 - CVE-2017-6355: integer overflow while creating shader object bsc1027108 - CVE-2017-6317: fix memory leak in add shader program...

CVE-2017-5937

CVE-2017-5937 affects the Virgil 3D virglrenderer project (virglrenderer) up to and including version 0.6.0. The vulnerability is a NULL pointer dereference in vrend_renderer.c during handling of the VIRGL_CCMD_CLEAR command, leading to a local denial of service. Several connected records confirm...

CVE-2016-5937

IBM Kenexa LCMS Premier on Cloud is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...

CVE-2015-5935

ImageIO in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted metadata in an image, a different vulnerability than CVE-2015-5936, CVE-2015-5937, and CVE-2015-5939...

CVE-2015-5936

ImageIO in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted metadata in an image, a different vulnerability than CVE-2015-5935, CVE-2015-5937, and CVE-2015-5939...

CVE-2014-5937

CVE-2014-5937 concerns the Android app “Social Networking” (package com.wSocialNetworkingSites) version 0.33.13320.99980. The root cause is that the application does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive informat...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-5937. Reason: This candidate is a duplicate of CVE-2013-5937. Notes: All CVE users should reference CVE-2013-5937 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2013-5937

Cross-site request forgery CSRF vulnerability in the Click2Sell Suite module 6.x-1.x for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete database information via vectors involving the Drupal Form API...

CVE-2013-5937

CVE-2013-5937 affects the Drupal Click2Sell Suite module (6.x-1.x). The CSRF vulnerability allows remote attackers to hijack administrator authentication for requests that delete database information via Drupal Form API vectors. Affected component is the Click2Sell Suite module; root cause is imp...

CVE-2013-5937

Cross-site request forgery CSRF vulnerability in the Click2Sell Suite module 6.x-1.x for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete database information via vectors involving the Drupal Form API...

SA-CONTRIB-2013-075 - Click2Sell - Multiple Vulnerabilities (XSS and CSRF)

Click2Sell is an Affiliate Marketing Network which lets you sell your products through their marketplace or on your website with buy it now buttons, and which also allows you to access hundreds of affiliates who want to sell your product for you and earn commission. Reflected Cross Site Scripting...