CVE-2012-5975

CVE-2012-5975 affects SSH Tectia Server on UNIX/Linux: versions 6.0.4–6.0.20, 6.1.0–6.1.12, 6.2.0–6.2.5, and 6.3.0–6.3.2 are vulnerable when old-style password authentication is enabled. A crafted session can bypass authentication by exploiting SSH2_USERAUTH_CHANGE REQUEST via a blank password, d...

CVE-2012-5975

creationtimestamp| type| source ---|---|--- 2012-12-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/23082 2012-12-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/23156 2018-05-29 15:50:33+00:00| seen|...

SuSE 10 Security Update : DHCP (ZYPP Patch Number 5975)

This update contains a backported patch from dhcp-3.0.7 to fix a buffer overflow which could lead to a denial-of-service condition in cases when the dhcp server is configured to send many DHCP options to clients. CVE-2007-0062 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...

CVE-2008-5975

SQL injection vulnerability in links.asp in Active Price Comparison 4.0 allows remote attackers to execute arbitrary SQL commands via the linkid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-5975

CVE-2008-5975 describes a SQL injection in Active Price Comparison 4.0, specifically in links.asp, exploitable via the linkid parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands. Several connected sources corroborate the issue, including NVD/NVD mirrors and Expl...

CVE-2008-5975

creationtimestamp| type| source ---|---|--- 2008-11-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7289...

CVE-2007-5975

CVE-2007-5975 affects TBSource’s index.php as used in TBDev and TorrentStrike 0.4. The vulnerability is a SQL injection in the choice parameter, exploitable by remote authenticated users to execute arbitrary SQL commands. The NVD entry lists a CVSS v2 base score of 6.5 (Medium) with network acces...

CVE-2006-5975

Multiple cross-site scripting XSS vulnerabilities in comments.asp in BlogMe 3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 Name, 2 URL, or 3 Comments field...

CVE-2006-5975

CVE-2006-5975 describes multiple cross-site scripting (XSS) vulnerabilities in the BlogMe 3.0 system, specifically in comments.asp, exploitable via the Name, URL, or Comments fields. The issue allows remote attackers to inject arbitrary script/HTML. Documented impact is limited to the reported XS...