59 matches found
Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : IPMItool vulnerability (USN-5997-1)
The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-5997-1 advisory. It was discovered that IPMItool was not properly checking the data received from a remote LAN party. A remote attacker could possibly use...
CVE-2019-5997
creationtimestamp| type| source ---|---|--- 2020-05-20 14:46:20+00:00| seen| https://t.me/cibsecurity/12181...
CVE-2019-5997
Panasonic Video Insight VMS is affected. Versions prior to 7.6.1 allow remote arbitrary code execution (CWE-94) due to insufficient input validation, via unspecified vectors. Affected component: Video Insight VMS software; root cause involves improper handling of user data that enables code injec...
CVE-2018-5997
The CVE-2018-5997 vulnerability affects RAVPower FileHub (firmware 2.000.056) HTTP Server, enabling an unrestricted upload combined with path traversal to write files on the filesystem with root privileges, leading to remote root code execution. Exploitation is evidenced by multiple sources (CNVD...
RAVPower 2.000.056 - Root Remote Code Execution
RAVPower 2.000.056 - Root Remote Code Execution """ Exploit Title: RAVPower - remote root Date: 23/01/2018 Exploit Authors: Daniele Linguaglossa Vendor Homepage: https://www.ravpower.com/ Software Link: https://www.ravpower.com/ Version: 2.000.056 Tested on: OSX CVE : CVE-2018-5997 """ import...
RAVPower 2.000.056 - Root Remote Code Execution Exploit
Exploit for hardware platform in category remote exploits """ Exploit Title: RAVPower - remote root Date: 23/01/2018 Exploit Authors: Daniele Linguaglossa Vendor Homepage: https://www.ravpower.com/ Software Link: https://www.ravpower.com/ Version: 2.000.056 Tested on: OSX CVE : CVE-2018-5997 """...
CVE-2006-5997
CVE-2006-5997 is rejected/not used; this candidate does not represent an active vulnerability.
CVE-2016-5997
The web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.51089.0.1A FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.52249.0.2A FP3 does not apply password-quality rules to password...
CVE-2016-5997
Summary of CVE-2016-5997 (IBM Tealeaf CX portal): The web portal in IBM Tealeaf Customer Experience versions prior to certain FP levels does not apply password-quality rules to password changes, making remote brute-force access easier. Affected products include IBM Tealeaf CX portals before 8.7.1...
SAP Message Server HTTP remote DoS
Application: SAP KERNEL Versions Affected: SAP KERNEL 7.21-7.49 Vendor URL: SAP Bugs: Denial of Service Reported: 18.08.2016 Vendor response: 19.08.2016 Date of Public Advisory: 08.11.2016 Reference: SAP Security Note 2358972 Author: Mathieu Geli ERPScan VULNERABILITY INFORMATION Class: Denial of...
CVE-2015-5997
Impero Education Pro prior to 5105 is affected by CVE-2015-5997 due to a hard-coded CBC key and an IV derived from the hash of the string Imp3ro. This weak cryptographic setup enables an attacker who can sniff encrypted network traffic to recover plaintext data. The vulnerability affects the encr...
CVE-2014-5997
The CVE-2014-5997 entry concerns the Auto Trader Android app (za.co.autotrader.android.app) version 2, which fails to verify X.509 certificates from SSL servers. This missing certificate validation allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted ...
CVE-2013-5997
CVE-2013-5997 affects D-Link DES-3800 series devices running firmware prior to R4.50B58. The SSH implementation has an unspecified vulnerability that allows remote authenticated users to cause a denial of service (device hang) via unknown vectors. This CVE is distinct from CVE-2013-5998 (Web mana...
Google Android Operating System 2.3.4 / 3.1 Sandbox Bypass Vulnerability
Binary data 5997.prm...
CVE-2008-5997
CVE-2008-5997: Absolute path traversal in Omnicom Content Platform (OCP) 2.0 — vulnerable code path is admin/fileKontrola/browser.asp. The root parameter can be used remotely to enumerate directories. Connected sources confirm the vulnerability and impact (directory listing/CONF disclosure); no e...
CVE-2008-5997
creationtimestamp| type| source ---|---|--- 2008-09-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32412...
CVE-2007-5997
SQL injection vulnerability in campaignstats.php in Softbiz Banner Exchange Network Script 1.0 allows remote authenticated users to execute arbitrary SQL commands via the id parameter...
CVE-2007-5997
CVE-2007-5997 describes an SQL injection vulnerability in the campaign_stats.php of Softbiz Banner Exchange Network Script 1.0. The issue allows remote authenticated users to execute arbitrary SQL commands via the id parameter. The vulnerability is documented with a Medium base score (CVSS v2: 6....