34 matches found
CVE-2020-5998
CVE-2020-5998 is rejected and does not represent an active vulnerability entry.
CVE-2019-5998
CVE-2019-5998 is a buffer overflow in Canon EOS-series PTP (NotifyBtStatus) that can be triggered over USB or Wi‑Fi by an attacker on the same network, potentially causing a device to become unresponsive or to execute arbitrary code. The Canon advisory notes remediation for the EOS 80D with firmw...
CVE-2006-5998
CVE-2006-5998 is rejected/not used; explicit description states the candidate does not correspond to an active vulnerability.
CVE-2017-5998
Cross-site scripting XSS vulnerability in InterSect Alliance SNARE Epilog for UNIX version 1.5 allows remote authenticated users to inject arbitrary web script or HTML via the strlogname parameter in a "Web Admin Portal Log Configuration Add" action...
CVE-2017-5998
Cross-site scripting XSS vulnerability in InterSect Alliance SNARE Epilog for UNIX version 1.5 allows remote authenticated users to inject arbitrary web script or HTML via the strlogname parameter in a "Web Admin Portal Log Configuration Add" action...
CVE-2017-5998
CVE-2017-5998 concerns InterSect Alliance SNARE Epilog for UNIX v1.5. The issue is a cross-site scripting (XSS) vulnerability in the Web Admin Portal’s Log Configuration add action, exploitable when an authenticated user supplies a crafted value to the str_log_name parameter. The root cause is im...
CVE-2015-5998
Impero Education Pro before version 5105 is affected by CVE-2015-5998 due to an authentication weakness that relies on the hardcoded authentication string -1|AUTHENTICATE\x02PASSWORD. This vulnerability allows a remote attacker to execute arbitrary commands on the affected host after bypassing au...
CVE-2014-5998
The SkyDrive Assistant aka com.dhh.sky application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5998
CVE-2014-5998 affects SkyDrive Assistant (com.dhh.sky) for Android, version 2.1 . The issue is not verifying X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. CVSSv2 base score is 5.4 (MEDIUM) . N...
CVE-2013-5998
Unspecified vulnerability in the Web manager implementation on D-Link Japan DES-3800 devices with firmware before R4.50B58 allows remote attackers to cause a denial of service device hang via unknown vectors, a different vulnerability than CVE-2013-5997...
CVE-2013-5998
CVE-2013-5998 concerns a Denial of Service in the Web manager of D-Link Japan DES-3800 devices. Affected firmware before R4.50B58 allows remote attackers to cause the device to hang via unknown vectors; this is a separate issue from CVE-2013-5997 (SSH-based). Public details identify the DES-3800 ...
CVE-2008-5998
CVE-2008-5998 describes multiple SQL injection vulnerabilities in the Ajax Checklist module for Drupal (5.x before 5.x-1.1). The flaws allow remote authenticated users, with the update ajax checklists permission, to execute arbitrary SQL commands via a save operation, with the vulnerability tied ...
