CVE-2014-5970

The CVE-2014-5970 entry concerns the BabyBus Android app (version 3.91) failing to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. This weakness affects the app's SSL trust validation flo...

NEW VMSA-2013-0012 VMware vSphere updates address multiple vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ----------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2013-0012 Synopsis: VMware vSphere updates address multiple vulnerabilities Issue date: 2013-10-17 Updated on: 2013-10-17 initial...

CVE-2013-5970

CVE-2013-5970 affects VMware ESXi 4.0–5.0 and ESX 4.0–4.1, where the hostd-vmdb component can be abused by remote attackers to cause a Denial of Service by modifying management traffic. The issue is documented in VMware’s VMSA-2013-0012 and associated advisories, which note the vulnerable release...

VMSA-2013-0012 : VMware vSphere updates address multiple vulnerabilities

a. VMware ESXi and ESX contain a vulnerability in hostd-vmdb. To exploit this vulnerability, an attacker must intercept and modify the management traffic. Exploitation of the issue may lead to a Denial of Service of the hostd-vmdb service. To reduce the likelihood of exploitation, vSphere...

VMware vSphere updates address multiple vulnerabilities

a. VMware ESXi and ESX contain a vulnerability in hostd-vmdb. To exploit this vulnerability, an attacker must intercept and modify the management traffic. Exploitation of the issue may lead to a Denial of Service of the hostd-vmdb service. To reduce the likelihood of exploitation, vSphere...

VMSA-2013-0012:VMware vSphere updates address multiple vulnerabilities

VMSA-2013-0012.1 VMware vSphere updates address multiple vulnerabilities VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2013-0012.1 VMware Security Advisory Synopsis: VMware vSphere updates address multiple vulnerabilities VMware Security Advisory Issue date: 2013-10-17 VMwar...

CVE-2012-5970

CVE-2012-5970 affects the Huawei E585 pocket wifi 2 device. The vulnerability is a NULL pointer dereference in the HTTP handling code triggered by crafted requests, leading to a denial of service and device outage. Public documents describe this as part of a set of vulnerabilities in the same dev...

CVE-2008-5970

SQL injection vulnerability in profilesocial.php in i-Net Solution Orkut Clone allows remote authenticated users to execute arbitrary SQL commands via the id parameter...

CVE-2008-5970

CVE-2008-5970 documents an SQL injection in profile_social.php of the i-Net Solution Orkut Clone, exploitable via the id parameter by remote authenticated users. The vulnerability stems from improper input handling, enabling arbitrary SQL execution and compromising confidentiality, integrity, and...

CVE-2008-5970

creationtimestamp| type| source ---|---|--- 2008-12-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32636...

CVE-2006-5970

Verity Ultraseek prior to 5.7 is vulnerable to an information-disclosure flaw: direct requests (including a null-terminated URL parameter and several missing parameters) cause error messages that reveal the installation path. The issue affects multiple pages (e.g., help, header/footer, spell, top...