39 matches found
CVE-2020-5945
CVE-2020-5945 affects F5 BIG-IP TMUI with a stored XSS in an undisclosed TMUI page that enables a Resource Administrator to escalate to full Administrator privileges. Affected versions: BIG-IP 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.2.7. Fixes are in 16.1.0 (for 16.x), 15.1.1 (for 15.x), an...
F5 Networks BIG-IP : F5 TMUI XSS vulnerability (K21540525)
Undisclosed TMUI page contains a stored cross site scripting vulnerability XSS. The issue allows a minor privilege escalation for resource admin to escalate to full admin. CVE-2020-5945 Impact A malicious, authenticated user with Resource Administrator privileges may be able to exploit this...
CVE-2013-5945
CVE-2013-5945 affects D-Link DSR router series (DSR-150, DSR-150N, DSR-250/250N, DSR-500/500N, DSR-1000/1000N). Vulnerable component: login.authenticate (share/lua/5.1/teamf1lualib/login.lua) and captivePortal.lua; root cause is SQL injection via the Users.Password parameter. Impact: remote attac...
CVE-2019-5945
creationtimestamp| type| source ---|---|--- 2019-05-17 16:51:32+00:00| seen| https://t.me/cvemitreorg/40...
CVE-2019-5945
Cybozu Garoon 4.2.4 to 4.10.1 allow remote attackers to obtain the users' credential information via the authentication of Cybozu Garoon...
CVE-2019-5945
CVE-2019-5945 affects Cybozu Garoon versions 4.2.4 through 4.10.1, where an information disclosure vulnerability in the authentication flow may allow remote attackers to obtain users’ credential information. The issue is documented in NVD and Red Hat advisory entries, with the OpenVAS entry also ...
CVE-2017-5945
The CVE-2017-5945 issue affects the Moodle PoodLL Filter plugin (up to version 3.0.20). The root cause is insufficient filtration of user-supplied data in the poodll_audio_url HTTP GET parameter passed to the filter_poodll_moodle32_2016112802/poodll/mp3recorderskins/brazil/index.php URL. This lea...
CVE-2016-5945
CVE-2016-5945 affects IBM Spectrum Control (formerly Tivoli Storage Productivity Center) versions 5.2.8–5.2.10.1 and Tivoli Storage Productivity Center 5.2.0–5.2.7.1. The vulnerability allows remote authenticated users to upload non-executable files by sending a crafted HTTP request. The IBM Secu...
CVE-2015-5945
CVE-2015-5945 is an Apple OS X Sandbox elevation-of-privilege vulnerability. The issue affects OS X versions prior to 10.11.1 in the Sandbox subsystem and is exploitable by local users via vectors involving NVRAM parameters, enabling privilege escalation. Exploitation status is not detailed in th...
CVE-2014-5945
The vulnerability CVE-2014-5945 affects the Edline Mobile Android app (package com.wEdlineFree), version 0.63.13369.34294. The root cause is lack of X.509 certificate verification for SSL connections, enabling man-in-the-middle attackers to spoof servers and intercept sensitive information via a ...
D-Link DSR Router Series - Remote Root Shell Exploit
No description provided by source. !/usr/bin/python CVEs: CVE-2013-5945 - Authentication Bypass by SQL-Injection CVE-2013-5946 - Privilege Escalation by Arbitrary Command Execution Vulnerable Routers: D-Link DSR-150 Firmware v1.08B44 D-Link DSR-150N Firmware v1.05B64 D-Link DSR-250 and DSR-250N...
D-Link DSR Router Remote Root Shell
!/usr/bin/python CVEs: CVE-2013-5945 - Authentication Bypass by SQL-Injection CVE-2013-5946 - Privilege Escalation by Arbitrary Command Execution Vulnerable Routers: D-Link DSR-150 Firmware v1.08B44 D-Link DSR-150N Firmware v1.05B64 D-Link DSR-250 and DSR-250N Firmware v1.08B44 D-Link DSR-500 and...
IBM SPSS SamplePower Vsflex8l ActiveX Control Buffer Overflow (CVE-2012-5945)
A code execution vulnerability exists in the VsVIEW6.ocxActiveX control, which is shipped as part of IBM SPSS SamplePower...
IBM SPSS SamplePower 3.0 < 3.0 FP 1 Multiple ActiveX Controls Arbitrary Code Execution
The remote install of IBM SPSS SamplePower has a vulnerable version of one or more ActiveX controls installed. 'Vsflex8l.ocx', 'c1sizer.ocx', 'vsflex7l .ocx', and 'olch2x32.ocx' ActiveX controls have unspecified arbitrary code execution vulnerabilities, which can be exploited by tricking a user...
CVE-2012-5945
The CVE-2012-5945 issue affects IBM SPSS SamplePower for Windows (Version 3.0) through the Vsflex8l ActiveX control. The root cause is a buffer overflow in the Vsflex8l ActiveX control triggered when a long string is assigned to the ComboList or ColComboList properties, enabling remote code execu...
Hulu Access Detection
Binary data 5945.prm...
CVE-2008-5945
creationtimestamp| type| source ---|---|--- 2008-08-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32243...
CVE-2007-5945
CVE-2007-5945 affects USVN prior to 0.6.5. The vulnerability allows remote attackers to obtain a list of repository contents via unspecified vectors, impacting confidentiality (partial). The available documents do not specify root cause details or a remediation/fix. Exploit specifics, affected co...
CVE-2006-5945
The CVE-2006-5945 entry details multiple SQL injection flaws in MGinternet Car Site Manager (CSM). The vulnerability enables remote execution of arbitrary SQL commands via the p parameter to csm/asp/detail.asp and via the l, typ, or loc parameters to csm/asp/listings.asp. Connected sources corrob...