47 matches found
CVE-2014-7025
The CVE-2014-7025 entry concerns the Android app “Who-is-it? Lite” (de.profiler.android.whoisit, version 1.0). The vulnerability is a failure to verify X.509 certificates when establishing SSL/TLS connections, enabling man-in-the-middle attackers to spoof servers and access sensitive data via a c...
CVE-2013-7025
CVE-2013-7025 describes multiple XSS vulnerabilities in ematStaticAlertTypes.jsp within the Alert Settings area of Dell SonicWALL Global Management System (GMS), SonicWALL Analyzer, and UMA EM5000 7.1 SP1 prior to Hotfix 134235. The underlying issue is reflected/stored XSS via the parameters valf...
Sonicwall GMS v7.x - Filter Bypass & Persistent Vulnerability
Document Title: =============== Sonicwall GMS v7.x - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1099 Bulletin: Dell SonicWALL GMS Service Bulletin for Cross-Site Scripting Vulnerability...
CVE-2008-7025
CVE-2008-7025 affects Check Point ZoneAlarm 8.0.020.000 when vsmon.exe is running. A crafted HTTP proxy response can cause a denial of service (crash) and disable the HIDS module. The vulnerability is reported across multiple sources (NVD entry and related records). The provided materials do not ...
CVE-2008-7025
creationtimestamp| type| source ---|---|--- 2008-09-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32428...
CVE-2006-7025
CVE-2006-7025 describes an SQL injection in the Bookmark4U app, affecting versions 2.0 and 2.1. The vulnerability is triggered in admin/config.php via the sqlcmd parameter, allowing remote attackers to inject arbitrary SQL. CVSS v2 base score 7.5 (HIGH) indicates potential impact on confidentiali...