CVE-2014-5950

The CVE-2014-5950 entry concerns the NOW Android app (com.smtown.smtownnow.androidapp) version 0.9.8, which does not verify X.509 certificates when establishing SSL connections. This behavior enables man-in-the-middle attackers to spoof the HTTPS server and exfiltrate sensitive information via a ...

CVE-2008-5950

CVE-2008-5950 is a SQL injection vulnerability in media/media_level.asp in ASP Template Creature. The vulnerability allows remote attackers to execute arbitrary SQL commands via the mcatid parameter. According to NVD, the CVSS v2 base score is 7.5 (HIGH) with NETWORK attack vector and low complex...

CVE-2008-5950

creationtimestamp| type| source ---|---|--- 2008-12-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7339...

CVE-2007-5950

NetCommons has a cross-site scripting (XSS) vulnerability tracked as CVE-2007-5950 affecting NetCommons before 1.0.11 and 1.1.x before 1.1.2. The vulnerability allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The exact root cause and vectors are not detailed...

CVE-2006-5950

The CVE concerns ALTools ALFTP FTP Server 4.1 beta 1 (and possibly earlier). The vulnerability allows remote authenticated users to obtain the installation path via unknown vectors related to the REN command, likely due to response messages. Impact is noted as Partial confidentiality; no exploits...