Moderate: Red Hat Security Advisory: Red Hat OpenShift Enterprise 1.1.2 update

Red Hat OpenShift Enterprise 1.1.2, which fixes several security issues, is now available. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available for eac...

CVE-2012-0327

Cross-site scripting XSS vulnerability in Redmine before 1.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-0327

Cross-site scripting XSS vulnerability in Redmine before 1.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Security feature bypass

Redmine before 1.3.2 does not properly restrict the use of a hash to provide values for a model's attributes, which allows remote attackers to set attributes in the 1 Comment, 2 Document, 3 IssueCategory, 4 MembersController, 5 Message, 6 News, 7 TimeEntry, 8 Version, 9 Wiki, 10 UserPreference, o...

CVE-2012-0327

The supplied connected documents confirm a vulnerability in Redmine before 1.3.2 described as a Cross-site scripting (XSS) flaw that lets remote attackers inject arbitrary web script or HTML via unspecified vectors. Affected software: Redmine prior to version 1.3.2. Root cause: XSS vulnerability ...

CVE-2012-0327

Cross-site scripting XSS vulnerability in Redmine before 1.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CentOS Update for mod_dav_svn CESA-2011:0327 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2010-0327

Cross-site scripting XSS vulnerability in the KJ: Imagelightbox kjimagelightbox2 extension 2.0.0 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2008-2490...

CVE-2010-0327

CVE-2010-0327 describes a cross-site scripting (XSS) vulnerability in the KJ Image Lightbox 2 (kj_imagelightbox2) extension for TYPO3, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors. The CVE covers versions 2.0.0 and earlier. The connected records also re...

CVE-2009-0327

The CVE-2009-0327 issue affects the Free Bible Search PHP Script 1.0, where the readbible.php file’s version parameter is vulnerable to SQL injection. The root cause is unsafely constructed SQL queries that allow remote attackers to execute arbitrary SQL commands, with impacts including data expo...

CVE-2006-0327

TYPO3 3.7.1 is affected by a path/information disclosure vulnerability triggered by direct requests to thumbs.php, showpic.php, or tables.php. The root cause is an incorrect variable definition that causes the requested path to be revealed in an error message when a require() call fails. The CVE ...

CVE-2005-0327

The CVE-2005-0327 entry concerns paFileDB 3.1, where pafiledb.php may allow remote code execution. The vulnerability arises from a modified action parameter used in an include statement for login.php, enabling an attacker to have PHP code executed on the remote server. The provided documents desc...

CVE-2005-0327

pafiledb.php in Pafiledb 3.1 may allow remote attackers to execute arbitrary PHP code via a modified action parameter that is used in an include statement for login.php...

CVE-2004-0327

Directory traversal vulnerability in functions.php in PhpNewsManager 1.46 allows remote attackers to retrieve arbitrary files via .. dot dot sequences in the clang parameter...

CVE-2004-0327

Directory traversal vulnerability in functions.php in PhpNewsManager 1.46 allows remote attackers to retrieve arbitrary files via .. dot dot sequences in the clang parameter...

CVE-2004-0327

CVE-2004-0327 affects PhpNewsManager 1.46. A directory traversal vulnerability exists in functions.php, allowing remote attackers to retrieve arbitrary files via .. sequences in the clang parameter. The provided documents confirm the vulnerable component and the exploitation vector but do not inc...

CVE-2003-0327

Sybase Adaptive Server Enterprise ASE 12.5 allows remote attackers to cause a denial of service hang via a remote password array with an invalid length, which triggers a heap-based buffer overflow...

CVE-2003-0327

Sybase Adaptive Server Enterprise ASE 12.5 allows remote attackers to cause a denial of service hang via a remote password array with an invalid length, which triggers a heap-based buffer overflow...

CVE-2003-0327

Sybase ASE 12.5 is vulnerable to a remote DoS via an invalid-length remote password array , which triggers a heap-based overflow in the login handling path. The vulnerability requires a valid login to exploit and can cause the server to hang or become unresponsive (notably in Windows multi-thread...

CVE-2002-0327

The CVE-2002-0327 entry documents a local privilege escalation in Century Software TERM caused by a buffer overflow in the callin program when given a long tty argument. The vulnerability allows local users to gain root privileges. No specific exploit code or affected versions are provided in the...