CVE-2024-5959 Stored XSS in Eliz Software's Panel

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Eliz Software Panel allows Stored XSS. This issue affects Panel: before v2.3.24...

CVE-2024-5959

CVE-2024-5959: Stored XSS in Eliz Software Panel due to improper neutralization of inputs during web page generation. Affected: Eliz Software Panel prior to version 2.3.24. Exploit details are not provided in the documents. Remediation: upgrade to version 2.3.24 or later to patch the vulnerabilit...

CGA-639W-5959-25PW

Bulletin has no description...

CGA-55FG-W2X9-5959

Bulletin has no description...

CVE-2023-5959

Summary: CVE-2023-5959 affects Byzoro Smart S85F Management Platform v31R02B10-01. The vulnerability is in an unknown function of /login.php where manipulating the txt_newpwd parameter leads to weak password recovery. Public disclosure is noted. The issue is described as a technical weakness rath...

CVE-2023-5959 Byzoro Smart S85F Management Platform login.php password recovery

A vulnerability, which was classified as problematic, was found in Byzoro Smart S85F Management Platform V31R02B10-01. Affected is an unknown function of the file /login.php. The manipulation of the argument txtnewpwd leads to weak password recovery. The exploit has been disclosed to the public a...

Ubuntu 18.04 LTS / 20.04 LTS : Kerberos vulnerabilities (USN-5959-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5959-1 advisory. It was discovered that Kerberos incorrectly handled memory when processing KDC data, which could lead to a NULL pointer dereference. An...

CVE-2020-5959

CVE-2020-5959 affects NVIDIA Virtual GPU Manager (vGPU) plugin. The input index value is incorrectly validated, which may lead to denial of service. The issue is tracked in NVIDIA’s security bulletin with a base score of 7.8 (CVSS v3, Local, Low attack complexity, Privileges required: Low, Impact...

CVE-2015-5959

CVE-2015-5959 affects Froxlor prior to 0.9.33.2, where default installations could disclose the database password by reading the /logs/sql-error.log file. Multiple sources (NVD entry and FreeBSD VuXML) describe an unauthenticated information-disclosure scenario tied to the /logs directory permiss...

CVE-2016-5959

CVE-2016-5959 affects IBM Security Privileged Identity Manager (ISPIM) versions 2.0.2 and 2.1.0. The root cause is that the product stores sensitive information in URL parameters, creating a risk of information disclosure if URLs are captured in server logs, the referrer header, or browser histor...

CVE-2017-5959

CSRF token bypass in GeniXCMS before 1.0.2 could result in escalation of privileges. The forgotpassword.php page can be used to acquire a token...

CVE-2017-5959

CVE-2017-5959 affects GeniXCMS prior to 1.0.2. The vulnerability is a CSRF token bypass that can lead to privilege escalation, with the forgotpassword.php page enabling token acquisition. Multiple sources (NVD/NVDC CNVD) confirm the issue and the fix is v1.0.2. There is no explicit exploitation c...

Gentoo Security Advisory GLSA 201403-06

Gentoo Linux Local Security Checks GLSA 201403-06 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

openSUSE Security Update : libupnp (openSUSE-SU-2013:0255-1)

Update to version 1.6.18 bnc801061 + Security fix for CERT issue VU922681 This patch addresses three possible buffer overflows in function uniqueservicename. The three issues have the folowing CVE numbers: CVE-2012-5958 Issue 2: Stack-based buffer overflow of Tempbuf CVE-2012-5959 Issue 4:...

GLSA-201403-06 : libupnp: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201403-06 libupnp: Arbitrary code execution Multiple buffer overflow vulnerabilities have been discovered in libupnp. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly execut...

CVE-2013-5959

The CVE-2013-5959 issue affects Blue Coat ProxySG SGOS before 6.5.2, including 6.2.14.1, 6.3.x, and 6.4.x. A recursive href in an HTML page can trigger a large number of HTTP RW pipeline pre-fetch requests, causing memory consumption and dropped connections (remote DoS). The vulnerability is limi...

Mandriva Linux Security Advisory : libupnp (MDVSA-2013:098)

Updated libupnp packages fix security vulnerabilities : The Portable SDK for UPnP Devices libupnp library contains multiple buffer overflow vulnerabilities. Devices that use libupnp may also accept UPnP queries over the WAN interface, therefore exposing the vulnerabilities to the internet...

Fedora Update for mediatomb FEDORA-2013-2377

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for mediatomb FEDORA-2013-2352

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for mediatomb FEDORA-2013-2377

Check for the Version of mediatomb OpenVAS Vulnerability Test Fedora Update for mediatomb FEDORA-2013-2377 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...