CVE-2019-5984

The CVE-2019-5984 entry concerns the WordPress plugin Custom CSS Pro (versions ≤ 1.0.3). The root issue is a cross-site request forgery (CSRF) that can allow remote attackers to hijack administrator sessions, enabling unauthorized actions when a logged-in admin views a malicious page. Public sour...

CVE-2017-5984

creationtimestamp| type| source ---|---|--- 2019-05-23 01:14:21+00:00| seen| https://t.me/cibsecurity/4461...

CVE-2017-5984

In libavcodec in Libav 9.21, ffh264executerefpicmarking has a heap-based buffer over-read...

CVE-2017-5984

In libavcodec in Libav 9.21, ffh264executerefpicmarking has a heap-based buffer over-read...

CVE-2017-5984

In libavcodec in Libav 9.21, ffh264executerefpicmarking has a heap-based buffer over-read...

CVE-2017-5984

CVE-2017-5984 affects Libav 9.21 (libavcodec) with a heap-based buffer over-read in ff_h264_execute_ref_pic_marking(). Connected sources confirm the vulnerability in Libav/libavcodec and reference a patch (libav.patch 62534) addressing this issue; public advisories list the flaw and its impact. T...

Security Bulletin: IBM InfoSphere Information Server is vulnerable to Cross-Frame Scripting issue (CVE-2016-5984)

Summary IBM InfoSphere Information Server is vulnerable to cross-frame scripting, caused by insufficient HTML iframe protection. Vulnerability Details CVEID: CVE-2016-5984 DESCRIPTION: IBM InfoSphere Information Server is vulnerable to cross-frame scripting, caused by insufficient HTML iframe...

CVE-2018-5984

SQL Injection exists in the Tumder An Arcade Games Platform 2.1 component for Joomla! via the PATHINFO to the category/ URI...

CVE-2018-5984

CVE-2018-5984 affects Joomla!’s Tumder 2.1 component. The vulnerability is a SQL injection via PATH_INFO targeting the category/ URI, enabling injection of SQL commands as described in multiple sources (NVD entry and CNVD/CVE mirrors). Exploitation is corroborated by public PoCs and exploits (e.g...

CVE-2018-5984

SQL Injection exists in the Tumder An Arcade Games Platform 2.1 component for Joomla! via the PATHINFO to the category/ URI...

Tumder 2.1 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Tumder - An Arcade Games Platform 2.1 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: http://sndr.co.ve/ Software Link: https://codecanyon.net/item/tumder-an-arcade-games-platform/18726994 Version: 2.1 Category:...

Tumder 2.1 SQL Injection

Exploit Title: Tumder - An Arcade Games Platform 2.1 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: http://sndr.co.ve/ Software Link: https://codecanyon.net/item/tumder-an-arcade-games-platform/18726994 Version: 2.1 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: CVE-2018-5984...

Tumder 2.1 - SQL Injection

Tumder 2.1 - SQL Injection Exploit Title: Tumder - An Arcade Games Platform 2.1 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: http://sndr.co.ve/ Software Link: https://codecanyon.net/item/tumder-an-arcade-games-platform/18726994 Version: 2.1 Category: Webapps Tested on:...

CVE-2015-5984

CVE-2015-5984 is rejected/not used per the initial description.

CVE-2016-5984

CVE-2016-5984 affects IBM InfoSphere Information Server and ISF/InfoSphere on Cloud. The vulnerability is a cross-frame scripting issue due to insufficient HTML iframe protection, enabling a remote attacker to use a crafted URL to perform clickjacking or similar client-side browser attacks. Affec...

CVE-2014-5984

The Little Dragons Android app (package com.playcomo.dragongame) version 1.0.256 does not verify X.509 certificates from SSL servers, enabling potential man‑in‑the‑middle attacks. This allows spoofing of servers and exposure of sensitive data via crafted certificates. Root cause: missing/weak cer...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-5971, CVE-2014-5984. Reason: this ID was intended for one issue, but was assigned to two issues by a CNA. Notes: All CVE users should consult CVE-2014-5971 and CVE-2014-5984 to determine which ID is appropriate. All reference...

CVE-2014-5814

CVE-2014-5814 is a rejected CVE entry. Connected records indicate two related issues: CVE-2014-5971 and CVE-2014-5984, both describing Android applications/libaries that do not verify X.509 certificates from SSL servers, enabling man-in-the-middle disclosure of sensitive data. Specifically, CVE-2...

CVE-2013-5984

Directory traversal vulnerability in userfiles/modules/admin/backup/delete.php in Microweber before 0.830 allows remote attackers to delete arbitrary files via a .. dot dot in the file parameter...

CVE-2013-5984

Microweber is vulnerable to CVE-2013-5984 due to improper access control in /userfiles/modules/admin/backup/delete.php. An unauthenticated remote attacker can delete arbitrary files by manipulating the file parameter (directory traversal). The advisory notes that this can lead to system compromis...