48 matches found
CVE-2025-5954
CVE-2025-5954 affects the WordPress plugin Service Finder SMS System (versions
WordPress Service Finder SMS System plugin <= 2.0.0 - Unauthenticated Privilege Escalation vulnerability
Unauthenticated Privilege Escalation vulnerability discovered by Foxyyy in WordPress Plugin Service Finder SMS System versions = 2.0.0...
Debian: Security Advisory (DSA-5954-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-5954
JR East Japan train operation information push notification App for Android version 1.2.4 and earlier allows remote attackers to bypass access restriction to obtain or alter the user's registered information via unspecified vectors...
CVE-2007-5954
Cross-site scripting XSS vulnerability in buscador.php in JLMForo System allows remote attackers to inject arbitrary web script or HTML via the clave parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2023-5954
creationtimestamp| type| source ---|---|--- 2023-12-27 15:32:28+00:00| seen| https://t.me/ctinow/159651...
CVE-2023-5954 vulnerabilities
Vulnerabilities for packages: k3d...
CVE-2023-5954 vulnerabilities
Vulnerabilities for packages: k3d...
CVE-2023-5954 Vault Requests Triggering Policy Checks May Lead To Unbounded Memory Consumption
HashiCorp Vault and Vault Enterprise inbound client requests triggering a policy check can lead to an unbounded consumption of memory. A large number of these requests may lead to denial-of-service. Fixed in Vault 1.15.2, 1.14.6, and 1.13.10...
CVE-2023-5954
CVE-2023-5954 affects HashiCorp Vault and Vault Enterprise. Inbound client requests that trigger a policy check can cause unbounded memory growth, leading to denial of service. Fixes are available in Vault 1.15.2, 1.14.6, and 1.13.10.
Ubuntu: Security Advisory (USN-5954-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 18.04 LTS / 20.04 LTS : Firefox regressions (USN-5954-2)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5954-2 advisory. USN-5954-1 fixed vulnerabilities in Firefox. The update introduced several minor regressions. This update fixes the problem. We apologize for the...
Ubuntu: Security Advisory (USN-5954-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Bulletin: Two unauthorized access vulnerabilities in IBM TSM for Space Management (CVE-2012-4859 and CVE-2012-5954).
Abstract Unauthorized access vulnerabilities exist in IBM Tivoli Storage Manager TSM for Space Management HSM Content VULNERABILITY DETAILS: CVE ID: CVE-2012-4859 Description: A local unauthorized malicious user can access and manipulate all file system objects on affected systems. Internal APAR...
CVE-2019-5954
creationtimestamp| type| source ---|---|--- 2019-05-17 16:51:35+00:00| seen| https://t.me/cvemitreorg/44...
CVE-2019-5954
JR East Japan train operation information push notification App for Android version 1.2.4 and earlier allows remote attackers to bypass access restriction to obtain or alter the user's registered information via unspecified vectors...
CVE-2019-5954
CVE-2019-5954 relates to the JR East Japan train operation information push notification App for Android (version 1.2.4 and earlier). The connected documents identify an access control error (CWE-284) in the API server that fails to restrict access permissions, enabling a remote attacker to obtai...
astronomia (>=1.3.1 <=1.3.2) potentially affected by CVE-2017-5954 via serialize-to-js (=0.5.0)
serialize-to-js NPM version =0.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on serialize-to-js and may be impacted: - astronomia =1.3.1, =1.3.2 Source cves: CVE-2017-5954 Source advisory: OSV:GHSA-MM62-WXC8-CF7M...
CVE-2017-5954
creationtimestamp| type| source ---|---|--- 2018-07-18 18:27:41+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-mm62-wxc8-cf7m...
CVE-2018-5954
phpFreeChat 1.7 and earlier allows remote attackers to cause a denial of service by sending a large number of connect commands...