CVE-2017-5967

The time subsystem in the Linux kernel through 4.9.9, when CONFIGTIMERSTATS is enabled, allows local users to discover real PID values as distinguished from PID values inside a PID namespace by reading the /proc/timerlist file, related to the printtimer function in kernel/time/timerlist.c and the...

CVE-2017-5967

CVE-2017-5967 affects the Linux kernel: when CONFIG_TIMER_STATS is enabled, the time subsystem through kernel 4.9.9 allows a local attacker to reveal real PID values (outside of PID namespaces) by reading /proc/timer_list, via the print_timer path in kernel/time/timer_list.c and the __timer_stats...

CVE-2017-5967

The time subsystem in the Linux kernel through 4.9.9, when CONFIGTIMERSTATS is enabled, allows local users to discover real PID values as distinguished from PID values inside a PID namespace by reading the /proc/timerlist file, related to the printtimer function in kernel/time/timerlist.c and the...

CVE-2016-5967

The installation component in IBM Rational Asset Analyzer RAA 6.1.0 before FP10 allows local users to discover the WAS Admin password by reading IM native logs...

CVE-2016-5967

The IBM Security Bulletin confirms CVE-2016-5967 affects Rational Asset Analyzer 6.1.0 prior to FP10, where the installation/upgrade process could expose the WAS Admin password by reading IM native logs. The vulnerability is local and arises from viewing installation logs, enabling credential dis...

CVE-2014-5967

The CVE-2014-5967 entry concerns The Designs Nail Arts Android app (package com.decoracionesnailart.flickr), version 3.6.1, which fails to verify X.509 certificates when connecting to SSL servers. This certificate validation flaw enables man-in-the-middle attackers to spoof servers and access sen...

CVE-2013-5967

Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management OSSIM 4.3 and earlier allow remote attackers to execute arbitrary SQL commands via the datefrom parameter to 1 radar-iso27001-potential.php, 2 radar-iso27001-A12ISacquisition-pot.php, 3...

CVE-2013-5967

CVE-2013-5967 affects AlienVault OSSIM (Open Source Security Information Management) 4.3 and earlier. The vulnerability is due to improper sanitization of the date_from parameter in multiple RadarReport scripts (e.g., radar-iso27001-potential.php and related radar-pci-potential.php) and in relate...

CVE-2013-5967

creationtimestamp| type| source ---|---|--- 2013-10-02 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38781 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/alienvaultiso27001sqli.rb 2025-10-23 21:12:57+00:00| see...

CVE-2012-5967

SQL injection vulnerability in menuXML.php in Centreon 2.3.3 through 2.3.9-4 fixed in Centreon web 2.6.0 allows remote authenticated users to execute arbitrary SQL commands via the menu parameter...

CVE-2012-5967

Centreon 2.3.3 through 2.3.9-4 contains a blind SQL injection in menuXML.php via the menu parameter. Exploitation requires an authenticated remote user and can lead to arbitrary SQL execution against the back-end DB. The issue is mitigated by upgrading to Centreon Web 2.6.0 or Centreon 2.4.0+ (pe...

CVE-2012-5967

SQL injection vulnerability in menuXML.php in Centreon 2.3.3 through 2.3.9-4 fixed in Centreon web 2.6.0 allows remote authenticated users to execute arbitrary SQL commands via the menu parameter...

Centreon 2.3.x SQL Injection

!/usr/bin/env python Exploit Title: Centreon 2.3.3 - 2.3.9-4 menuXML.php Blind SQL Injection Exploit Disclosure Date: December 12, 2012 Author: modpr0be @modpr0be Platform: Linux Tested on: Centreon Enterprise Server with Centreon 2.3.9-4 on CentOS 5.5 x8664 Final Software Link:...

CVE-2008-5967

admin/index.php in PHP iCalendar 2.3.4, 2.24, and earlier does not require administrative authentication for an addupdate action, which allows remote attackers to upload a calendar aka .ics file with arbitrary content to the calendars/ directory outside the web root...

CVE-2008-5967

admin/index.php in PHP iCalendar 2.3.4, 2.24, and earlier does not require administrative authentication for an addupdate action, which allows remote attackers to upload a calendar aka .ics file with arbitrary content to the calendars/ directory outside the web root...

CVE-2008-5967

CVE-2008-5967 affects PHP iCalendar up to version 2.x. The issue is that admin/index.php does not require administrative authentication for an addupdate action, enabling remote attackers to upload a calendar (.ics) file with arbitrary content to the calendars/ directory outside the web root. This...

CVE-2008-5967

creationtimestamp| type| source ---|---|--- 2008-09-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6519...

CVE-2006-5967

CVE-2006-5967 describes a race condition in Panda ActiveScan 5.53.00 and earlier than 5.54.01, where multiple invocations of the Analizar method in the ActiveScan.1 ActiveX control are not thread-safe and can lead to memory corruption and arbitrary code execution remotely. The vulnerability affec...