CVE-2016-5950

CVE-2016-5950 affects IBM Kenexa LCMS Premier on Cloud. The vulnerability is that credentials are stored in plain text and could be read by an authenticated user, exposing sensitive information. The incident is documented with a CVSS3.0 base score of 6.5 (C:H/I:N/A:N) and CVSS2.0 base score 4.0 (...

Updated nvidia driver packages fix security vulnerability

A vulnerability has been found in the nvidia proprietary driver that could be used to allow a local, non-privileged user to corrupt kernel memory. This could be used to gain local root privileges. A local user can issue a specially crafted IOCTL to write a 32-bit integer value stored in the kerne...

CVE-2015-5950

CVE-2015-5950 affects NVIDIA display drivers across Windows and Linux (Windows: R352<353.82; R340<341.81; Linux: R304<304.128; R340<340.93; R352<352.41; GRID vGPU/vSGA: R352

CVE-2014-5950

The CVE-2014-5950 entry concerns the NOW Android app (com.smtown.smtownnow.androidapp) version 0.9.8, which does not verify X.509 certificates when establishing SSL connections. This behavior enables man-in-the-middle attackers to spoof the HTTPS server and exfiltrate sensitive information via a ...

CVE-2008-5950

CVE-2008-5950 is a SQL injection vulnerability in media/media_level.asp in ASP Template Creature. The vulnerability allows remote attackers to execute arbitrary SQL commands via the mcatid parameter. According to NVD, the CVSS v2 base score is 7.5 (HIGH) with NETWORK attack vector and low complex...

CVE-2008-5950

creationtimestamp| type| source ---|---|--- 2008-12-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7339...

CVE-2007-5950

NetCommons has a cross-site scripting (XSS) vulnerability tracked as CVE-2007-5950 affecting NetCommons before 1.0.11 and 1.1.x before 1.1.2. The vulnerability allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The exact root cause and vectors are not detailed...

CVE-2006-5950

The CVE concerns ALTools ALFTP FTP Server 4.1 beta 1 (and possibly earlier). The vulnerability allows remote authenticated users to obtain the installation path via unknown vectors related to the REN command, likely due to response messages. Impact is noted as Partial confidentiality; no exploits...