Lucene search
+L

39 matches found

CVE
CVE
added 2020/11/05 7:21 p.m.69 views

CVE-2020-5945

CVE-2020-5945 affects F5 BIG-IP TMUI with a stored XSS in an undisclosed TMUI page that enables a Resource Administrator to escalate to full Administrator privileges. Affected versions: BIG-IP 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.2.7. Fixes are in 16.1.0 (for 16.x), 15.1.1 (for 15.x), an...

8.5CVSS8.2AI score0.01327EPSS
SaveExploits0References1Affected Software11
Tenable Nessus
Tenable Nessus
added 2020/11/03 12:00 a.m.37 views

F5 Networks BIG-IP : F5 TMUI XSS vulnerability (K21540525)

Undisclosed TMUI page contains a stored cross site scripting vulnerability XSS. The issue allows a minor privilege escalation for resource admin to escalate to full admin. CVE-2020-5945 Impact A malicious, authenticated user with Resource Administrator privileges may be able to exploit this...

8.5CVSS7.3AI score0.01327EPSS
SaveExploits0References2
CVE
CVE
added 2020/02/11 1:54 a.m.90 views

CVE-2013-5945

CVE-2013-5945 affects D-Link DSR router series (DSR-150, DSR-150N, DSR-250/250N, DSR-500/500N, DSR-1000/1000N). Vulnerable component: login.authenticate (share/lua/5.1/teamf1lualib/login.lua) and captivePortal.lua; root cause is SQL injection via the Users.Password parameter. Impact: remote attac...

10CVSS10AI score0.09783EPSS
SaveExploits7References5Affected Software1
Circl
Circl
added 2019/05/17 4:51 p.m.13 views

CVE-2019-5945

creationtimestamp| type| source ---|---|--- 2019-05-17 16:51:32+00:00| seen| https://t.me/cvemitreorg/40...

9.8CVSS7.3AI score0.02138EPSS
SaveExploits0References1
OSV
OSV
added 2019/05/17 4:29 p.m.9 views

CVE-2019-5945

Cybozu Garoon 4.2.4 to 4.10.1 allow remote attackers to obtain the users' credential information via the authentication of Cybozu Garoon...

9.8CVSS7.4AI score0.02138EPSS
SaveExploits0References2
CVE
CVE
added 2019/05/17 3:25 p.m.59 views

CVE-2019-5945

CVE-2019-5945 affects Cybozu Garoon versions 4.2.4 through 4.10.1, where an information disclosure vulnerability in the authentication flow may allow remote attackers to obtain users’ credential information. The issue is documented in NVD and Red Hat advisory entries, with the OpenVAS entry also ...

9.8CVSS7.1AI score0.02138EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2017/02/10 6:51 a.m.50 views

CVE-2017-5945

The CVE-2017-5945 issue affects the Moodle PoodLL Filter plugin (up to version 3.0.20). The root cause is insufficient filtration of user-supplied data in the poodll_audio_url HTTP GET parameter passed to the filter_poodll_moodle32_2016112802/poodll/mp3recorderskins/brazil/index.php URL. This lea...

6.1CVSS6.4AI score0.00874EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2016/09/26 1:00 a.m.45 views

CVE-2016-5945

CVE-2016-5945 affects IBM Spectrum Control (formerly Tivoli Storage Productivity Center) versions 5.2.8–5.2.10.1 and Tivoli Storage Productivity Center 5.2.0–5.2.7.1. The vulnerability allows remote authenticated users to upload non-executable files by sending a crafted HTTP request. The IBM Secu...

4.3CVSS4.7AI score0.01035EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2015/10/23 9:00 p.m.71 views

CVE-2015-5945

CVE-2015-5945 is an Apple OS X Sandbox elevation-of-privilege vulnerability. The issue affects OS X versions prior to 10.11.1 in the Sandbox subsystem and is exploitable by local users via vectors involving NVRAM parameters, enabling privilege escalation. Exploitation status is not detailed in th...

7.2CVSS7.8AI score0.00346EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2014/09/18 10:00 a.m.40 views

CVE-2014-5945

The vulnerability CVE-2014-5945 affects the Edline Mobile Android app (package com.wEdlineFree), version 0.63.13369.34294. The root cause is lack of X.509 certificate verification for SSL connections, enabling man-in-the-middle attackers to spoof servers and intercept sensitive information via a ...

5.4CVSS6AI score0.00271EPSS
SaveExploits0References3Affected Software1
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.63 views

D-Link DSR Router Series - Remote Root Shell Exploit

No description provided by source. !/usr/bin/python CVEs: CVE-2013-5945 - Authentication Bypass by SQL-Injection CVE-2013-5946 - Privilege Escalation by Arbitrary Command Execution Vulnerable Routers: D-Link DSR-150 Firmware v1.08B44 D-Link DSR-150N Firmware v1.05B64 D-Link DSR-250 and DSR-250N...

10CVSS9.2AI score0.09783EPSS
SaveExploits8
Packet Storm
Packet Storm
added 2013/12/07 12:00 a.m.64 views

D-Link DSR Router Remote Root Shell

!/usr/bin/python CVEs: CVE-2013-5945 - Authentication Bypass by SQL-Injection CVE-2013-5946 - Privilege Escalation by Arbitrary Command Execution Vulnerable Routers: D-Link DSR-150 Firmware v1.08B44 D-Link DSR-150N Firmware v1.05B64 D-Link DSR-250 and DSR-250N Firmware v1.08B44 D-Link DSR-500 and...

10CVSS0.09783EPSS
SaveExploits8
Check Point Advisories
Check Point Advisories
added 2013/06/03 12:00 a.m.21 views

IBM SPSS SamplePower Vsflex8l ActiveX Control Buffer Overflow (CVE-2012-5945)

A code execution vulnerability exists in the VsVIEW6.ocxActiveX control, which is shipped as part of IBM SPSS SamplePower...

6.9AI score0.03498EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2013/05/16 12:00 a.m.46 views

IBM SPSS SamplePower 3.0 < 3.0 FP 1 Multiple ActiveX Controls Arbitrary Code Execution

The remote install of IBM SPSS SamplePower has a vulnerable version of one or more ActiveX controls installed. 'Vsflex8l.ocx', 'c1sizer.ocx', 'vsflex7l .ocx', and 'olch2x32.ocx' ActiveX controls have unspecified arbitrary code execution vulnerabilities, which can be exploited by tricking a user...

9.3CVSS6AI score0.33782EPSS
SaveExploits9References12
CVE
CVE
added 2013/04/30 1:00 a.m.128 views

CVE-2012-5945

The CVE-2012-5945 issue affects IBM SPSS SamplePower for Windows (Version 3.0) through the Vsflex8l ActiveX control. The root cause is a buffer overflow in the Vsflex8l ActiveX control triggered when a long string is assigned to the ComboList or ColComboList properties, enabling remote code execu...

9.3CVSS7.6AI score0.03498EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2011/06/07 12:00 a.m.7 views

Hulu Access Detection

Binary data 5945.prm...

7.3AI score
SaveExploits0References1
Circl
Circl
added 2008/08/13 12:00 a.m.6 views

CVE-2008-5945

creationtimestamp| type| source ---|---|--- 2008-08-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32243...

7.5CVSS5.8AI score0.02337EPSS
SaveExploits2References1
CVE
CVE
added 2007/11/14 1:00 a.m.51 views

CVE-2007-5945

CVE-2007-5945 affects USVN prior to 0.6.5. The vulnerability allows remote attackers to obtain a list of repository contents via unspecified vectors, impacting confidentiality (partial). The available documents do not specify root cause details or a remediation/fix. Exploit specifics, affected co...

5CVSS6.6AI score0.01442EPSS
SaveExploits0References6Affected Software1
CVE
CVE
added 2006/11/17 12:00 a.m.50 views

CVE-2006-5945

The CVE-2006-5945 entry details multiple SQL injection flaws in MGinternet Car Site Manager (CSM). The vulnerability enables remote execution of arbitrary SQL commands via the p parameter to csm/asp/detail.asp and via the l, typ, or loc parameters to csm/asp/listings.asp. Connected sources corrob...

7.5CVSS8.9AI score0.01284EPSS
SaveExploits3References7Affected Software1
Rows per page
Query Builder