CVE-2012-0730

Multiple cross-site request forgery CSRF vulnerabilities in IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 allow remote attackers to hijack the authentication of administrators for requests that create administrative accounts...

CVE-2012-0730

CVE-2012-0730 affects IBM Rational AppScan Enterprise 5.x and 8.x prior to 8.5.0.1. The issue is a cross-site request forgery (CSRF) that enables remote attackers to hijack administrator authentication and perform requests that create additional administrative accounts. This is described across m...

Design/Logic Flaw

The ramparttimestamptokenvalidate function in util/ramparttimestamptoken.c in Apache Rampart/C 1.3.0 does not properly calculate the expiration of timestamp tokens, which allows remote attackers to bypass intended access restrictions by leveraging an expired token, a different vulnerability than...

CVE-2011-0730

Eucalyptus before 2.0.3 and Eucalyptus EE before 2.0.2, as used in Ubuntu Enterprise Cloud UEC and other products, do not properly interpret signed elements in SOAP requests, which allows man-in-the-middle attackers to execute arbitrary commands by modifying a request, related to an "XML Signatur...

CVE-2011-0730

CVE-2011-0730 affects Eucalyptus before 2.0.3 and Eucalyptus EE before 2.0.2. The issue arises from improper interpretation of signed elements in SOAP requests, enabling man-in-the-middle attackers to modify a request and execute arbitrary commands. This is tied to XML Signature Element Wrapping ...

[USN-1137-1] Eucalyptus vulnerability

========================================================================== Ubuntu Security Notice USN-1137-1 May 26, 2011 eucalyptus, rampart vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its...

CentOS 5 : kernel (CESA-2010:0398)

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

CVE-2010-0730

CVE-2010-0730 is a vulnerability in the MMIO instruction decoder of the Xen hypervisor within the Linux kernel 2.6.18 used by RHEL5. The flaw allows an unprivileged guest OS user to trigger an instruction emulation path and cause a denial-of-service (32-bit guest crash). The issue is documented a...

CVE-2009-0730

The CVE-2009-0730 entry concerns the GigCalendar (com_gigcal) 1.0 component for Mambo/Joomla! with SQL injection vulnerabilities when magic_quotes_gpc is disabled. Concrete details from connected sources: two injection vectors in index.php details actions using parameters gigcal_venues_id and gig...

CVE-2008-0730

Solaris 10 is affected by CVE-2008-0730 via the locale input methods for Simplified Chinese, Traditional Chinese, Korean, and Thai. The vulnerable components create files/directories with weak permissions under .iiim/le and .Xlocale in user home directories, potentially allowing local users to re...

Important: Red Hat Security Advisory: gpdf security update

Updated kdegraphics packages that fix a security issue in PDF handling are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. gpdf is a GNOME based viewer for Portable Document Format PDF files. Maury...

CVE-2007-0730

Technical details about CVE-2007-0730 are not publicly available in the provided connected documents. Monitor for updates from vendors and security feeds.

php security update

CentOS Errata and Security Advisory CESA-2006:0730 Updated PHP packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP...

CVE-2006-0730

CVE-2006-0730 affects Dovecot prior to 1.0beta3. Reported as multiple vulnerabilities causing remote denial of service (application crash/hang) via vectors including (1) potential hangs in APPEND and (2) potential crashes in dovecot-auth and imap/pop3-login; vector 2 may be a double-free. Vulnera...

phpBB < 2.0.10 Multiple Vulnerabilities

phpBB is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpbb:phpbb"; ifdescription...

CVE-2005-0730

PY Software Active Webcam WebServer webcam.exe 5.5 allows remote attackers to cause a denial of service via a request to a file on the floppy drive, as demonstrated using A:\a.txt...

CVE-2005-0730

CVE-2005-0730 involves PY Software’s Active WebCam WebServer (webcam.exe) 5.5. The connected sources describe concrete issues: (1) Denial of Service by requesting a file on the floppy drive (A:\a.txt), (2) path disclosure via error messages revealing installation paths for nonexistent files, and ...

CVE-2003-0730

...

CVE-2003-0730

CVE-2003-0730 refers to multiple integer overflows in the XFree86 font libraries (version 4.3.0 and earlier). The flaws can allow a remote or local attacker to cause a denial of service or execute arbitrary code via heap-based and stack-based buffer overflows when transferring/enumerating fonts f...

CVE-2003-0730

Multiple integer overflows in the font libraries for XFree86 4.3.0 allow local or remote attackers to cause a denial of service or execute arbitrary code via heap-based and stack-based buffer overflow attacks...