63 matches found
Security Bulletin: NVIDIA GeForce Experience - October 2020
NVIDIA has released a software security update for NVIDIAĀ® GeForce Experienceā¢ software. This update addresses issues that may lead to denial of service, escalation of privileges, code execution, or information disclosure. To protect your system, download and install this software update from the...
CVE-2007-5977
Cross-site scripting XSS vulnerability in dbcreate.php in phpMyAdmin before 2.11.2.1 allows remote authenticated users with CREATE DATABASE privileges to inject arbitrary web script or HTML via a hex-encoded IMG element in the db parameter in a POST request, a different vulnerability than...
CVE-2019-5977
Mail header injection vulnerability in Cybozu Garoon 4.0.0 to 4.10.2 may allow a remote authenticated attackers to alter mail header via the application 'E-Mail'...
CVE-2019-5977
CVE-2019-5977 is a mail header injection vulnerability in Cybozu Garoon 4.0.0 to 4.10.2, where a user with authenticated access can alter mail headers via the E-mail feature. Connected sources confirm the affected product/version range and the vulnerability type (mail header injection) with remed...
JVN#62618482: Multiple vulnerabilities in Cybozu Garoon
Cybozu Garoon provided by Cybozu, Inc. contains multiple vulnerabilities listed below. DOM-based cross-site scripting in the application "Portal" CWE-79 - CVE-2019-5975 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N| Base Score: 4.4 CVSS v2|...
CVE-2018-5977
SQL Injection exists in Affiligator Affiliate Webshop Management System 2.1.0 via a search/?q=&pricetype=range&price= request...
CVE-2018-5977
SQL Injection exists in Affiligator Affiliate Webshop Management System 2.1.0 via a search/?q=&pricetype=range&price= request...
Affiligator 2.1.0 SQL Injection
Exploit Title: Affiligator - Affiliate Webshop Management System 2.1.0 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: https://www.getaffiligator.com/ Software Link: https://codecanyon.net/item/affiligator-affiliate-webshop-management-system/21214946 Version: 2.1.0 Category: Webapps...
Affiligator 2.1.0 - SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Affiligator - Affiliate Webshop Management System 2.1.0 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: https://www.getaffiligator.com/ Software Link:...
Affiligator 2.1.0 - SQL Injection
Affiligator 2.1.0 - SQL Injection Exploit Title: Affiligator - Affiliate Webshop Management System 2.1.0 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: https://www.getaffiligator.com/ Software Link: https://codecanyon.net/item/affiligator-affiliate-webshop-management-system/21214946...
Affiligator 2.1.0 - SQL Injection
Exploit Title: Affiligator - Affiliate Webshop Management System 2.1.0 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: https://www.getaffiligator.com/ Software Link: https://codecanyon.net/item/affiligator-affiliate-webshop-management-system/21214946 Version: 2.1.0 Category: Webapps...
[ASA-201801-17] zziplib: denial of service
Arch Linux Security Advisory ASA-201801-17 ========================================== Severity: Medium Date : 2018-01-18 CVE-ID : CVE-2017-5977 CVE-2017-5978 Package : zziplib Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-273 Summary ======= The package zziplib...
CVE-2015-5977
CVE-2015-5977 entry is rejected and not used; not an active vulnerability.
openSUSE Security Update : zziplib (openSUSE-2017-554)
This update for zziplib fixes the following issues : Secuirty issues fixed : - CVE-2017-5974: heap-based buffer overflow in zzipget32 fetch.c bsc1024517 - CVE-2017-5975: heap-based buffer overflow in zzipget64 fetch.c bsc1024528 - CVE-2017-5976: heap-based buffer overflow in zzipmementryextrabloc...
CVE-2017-5977
The zzipmementryextrablock function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted ZIP file...
CVE-2017-5977
CVE-2017-5977 affects zziplib 0.13.62 (memdisk.c): the zzip_mem_entry_extra_block function allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted ZIP file. Public advisories note this as a vulnerability in zziplib and indicate upgrades to 0.13.67 or lat...
Gentoo Security Advisory GLSA 201401-15
Gentoo Linux Local Security Checks GLSA 201401-15 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
CVE-2014-5977
The CVE-2014-5977 entry concerns the Mobile Face (com.wFacemobile) Android app (version 0.74.13432.91159). The issue is improper SSL handling: the app does not verify X.509 certificates from SSL servers, which enables man-in-the-middle attackers to spoof servers and obtain sensitive information v...
CVE-2013-5977
The CVE-2013-5977 issue is a CSRF vulnerability in the Cart66 Lite WordPress plugin (Cart66Product.php) affecting versions before 1.5.1.15. It allows remote attackers to hijack administrator authentication for requests to wp-admin/admin.php that create/modify products and can enable XSS via the P...