CVE-2019-5976

CVE-2019-5976 affects Cybozu Garoon 4.0.0–4.10.2. An attacker with administrative privileges can cause a denial-of-service by altering session authentication data (DoS condition). Affected product/version details come from multiple sources (NVD/Red Hat/JVN). Mitigation: Update to the latest versi...

CVE-2019-5976

Cybozu Garoon 4.0.0 to 4.10.2 allows an attacker with administrative rights to cause a denial of service condition via unspecified vectors...

JVN#62618482: Multiple vulnerabilities in Cybozu Garoon

Cybozu Garoon provided by Cybozu, Inc. contains multiple vulnerabilities listed below. DOM-based cross-site scripting in the application "Portal" CWE-79 - CVE-2019-5975 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N| Base Score: 4.4 CVSS v2|...

CVE-2018-5976

CVE-2018-5976 affects RSVP Invitation Online 1.0. The vulnerability is a Cross-Site Request Forgery (CSRF) in the application’s admin action path (function/account.php) that enables an attacker to modify the administrator password. A proof-of-concept demonstrates submitting a request to update th...

CVE-2018-5976

Cross Site Request Forgery CSRF exists in RSVP Invitation Online 1.0 via function/account.php, as demonstrated by modifying the admin password...

RSVP Invitation Online 1.0 - Cross-Site Request Forgery (Update Admin) Vulnerability

Exploit for php platform in category web applications 0day.today 2018-03-17...

RSVP Invitation Online 1.0 Cross Site Request Forgery

...

RSVP Invitation Online 1.0 - Cross-Site Request Forgery (Update Admin)

RSVP Invitation Online 1.0 - Cross-Site Request Forgery Update Admin...

RSVP Invitation Online 1.0 - Cross-Site Request Forgery (Update Admin)

...

[SECURITY] [DLA 994-1] zziplib security update

Package : zziplib Version : 0.13.56-1.1+deb7u1 CVE ID : CVE-2017-5974 CVE-2017-5975 CVE-2017-5976 CVE-2017-5978 CVE-2017-5979 CVE-2017-5980 CVE-2017-5981 CVE-2017-5974 Heap-based buffer overflow in the zzipget32 function in fetch.c in zziplib allows remote attackers to cause a denial of service...

Debian DSA-3878-1 : zziplib - security update

Agostino Sarubbo discovered multiple vulnerabilities in zziplib, a library to access Zip archives, which could result in denial of service and potentially the execution of arbitrary code if a malformed archive is processed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

CVE-2015-5976

This CVE entry is rejected and not used; it does not represent an active vulnerability.

CVE-2015-5976

...

openSUSE Security Update : zziplib (openSUSE-2017-554)

This update for zziplib fixes the following issues : Secuirty issues fixed : - CVE-2017-5974: heap-based buffer overflow in zzipget32 fetch.c bsc1024517 - CVE-2017-5975: heap-based buffer overflow in zzipget64 fetch.c bsc1024528 - CVE-2017-5976: heap-based buffer overflow in zzipmementryextrabloc...

CVE-2017-5976

Heap-based buffer overflow in the zzipmementryextrablock function in memdisk.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service crash via a crafted ZIP file...

CVE-2017-5976

Heap-based buffer overflow in the zzipmementryextrablock function in memdisk.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service crash via a crafted ZIP file...

CVE-2017-5976

CVE-2017-5976 is a heap-based buffer overflow in zziplib’s memdisk.c (zzip_mem_entry_extra_block) affecting zziplib 0.13.56–0.13.62. A crafted ZIP file can remotely cause a crash (denial of service). In the connected advisories, multiple distros document fixes: Debian LTS/DSA notes upgrade to 0.1...

CVE-2017-5976

Heap-based buffer overflow in the zzipmementryextrablock function in memdisk.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service crash via a crafted ZIP file...

CVE-2017-5976

Heap-based buffer overflow in the zzipmementryextrablock function in memdisk.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service crash via a crafted ZIP file...

CVE-2016-5976

CVE-2016-5976 affects IBM Tealeaf Customer Experience web portal (versions 8.0–9.0.2). The vulnerability allows remote authenticated users to discover component passwords via unspecified vectors. Exploitation details are not provided beyond password disclosure risk. IBM’s advisory lists multiple ...