Oracle: Security Advisory (ELSA-2010-0970)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-0970

Cross-site request forgery CSRF vulnerability in SearchBlox before 8.2 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2015-0970

Cross-site request forgery CSRF vulnerability in SearchBlox before 8.2 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2015-0970

SearchBlox (enterprise search on Lucene) is affected by a CSRF vulnerability (CVE-2015-0970) in versions before 8.2. A remote attacker can hijack the authentication of an arbitrary user by inducing an authenticated user to trigger a malicious request. The issue is confirmed across multiple source...

Fedora Update for rubygem-activesupport FEDORA-2014-0970

Check for the Version of rubygem-activesupport OpenVAS Vulnerability Test Fedora Update for rubygem-activesupport FEDORA-2014-0970 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Apple Mac OS X 安全绕过漏洞

BUGTRAQ ID: 58517 CVECAN ID: CVE-2013-0970 Apple Mac OS X是苹果电脑操作系统软件。 Apple Mac OS X 10.8.3之前版本的Messages允许远程攻击者通过特制的FaceTime: URL，绕过FaceTime呼叫确认提示。 0 Apple Mac OS X 10.7.4 Apple Mac OS X 10.7.3 Apple Mac OS X 10.7.2 Apple Mac OS X 10.7.1 Apple Mac OS X Server 10.7.4 Apple Mac OS X Server 10.7.3...

CVE-2013-0970

Messages in Apple Mac OS X before 10.8.3 allows remote attackers to bypass the FaceTime call-confirmation prompt via a crafted FaceTime: URL...

CVE-2013-0970

Apple Mac OS X through 10.8.2 is vulnerable in Messages to bypassing the FaceTime call-confirmation prompt when a specially crafted FaceTime: URL is processed; CVE-2013-0970. Affected component is the Messages/FaceTime URL handling. Impact is bypass of user confirmation to initiate FaceTime calls...

OpenSSL 0.9.6 CA Basic Constraints Validation Vulnerability

According to its banner, the remote server is running a version of OpenSSL that is earlier than 0.9.7. Such versions do not verify the Basic Constraint for some certificates. A remote attacker could perform a man-in-the-middle attack. Details on this weakness are missing. It is related to...

CVE-2010-0970

SQL injection vulnerability in phpmylogon.php in PhpMyLogon 2 allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-0970

CVE-2010-0970 flags a SQL injection in the PhpMyLogon 2 project, specifically in the phpmylogon.php script. The vulnerability is triggered via the username parameter, allowing remote attackers to execute arbitrary SQL commands. The available documents confirm this as the affected component, but d...

CVE-2009-0970

PHP Pro Bid 6.05 contains a remote file inclusion vulnerability in includes/class_image.php that is exploitable when register_globals is enabled. An attacker can supply a URL in the fileExtension parameter to cause the remote code to be executed (arbitrary PHP code). The description comes from CV...

CVE-2006-0970

CVE-2006-0970 is a PHP remote file inclusion vulnerability in index.php used by one or more ActiveCampaign products, potentially SupportTrio. The underlying issue is improper handling of the page parameter, allowing attackers to include and execute arbitrary files. The CVSS 2.0 base score is 7.5 ...

[VulnWatch] ncompress insecure temporary file creation

ncompress insecure temporary file creation Vendor: ftp://ftp.leo.org/pub/comp/os/unix/linux/sunsite/utils/compress/ Advisory: http://www.zataz.net/adviso/ncompress-09052005.txt Vendor informed: yes Exploit available: yes Impact : low Exploitation : low The vulnerability is caused due to temporary...

CVE-2005-0970

Mac OS X 10.3.9 and earlier allows users to install, create, and execute setuid/setgid scripts, contrary to the intended design, which may allow attackers to conduct unauthorized activities with escalated privileges via vulnerable scripts...

CVE-2005-0970

Mac OS X 10.3.9 and earlier allows users to install, create, and execute setuid/setgid scripts, contrary to the intended design, which may allow attackers to conduct unauthorized activities with escalated privileges via vulnerable scripts...

CVE-2005-0970

CVE-2005-0970 concerns Mac OS X 10.3.x and earlier where users can install, create, and execute setuid/setgid scripts, enabling unauthorized activities with escalated privileges through vulnerable scripts. The vulnerability is described as a design flaw in script handling that allows set-user IDs...

CVE-2004-0970

The 1 gzexe, 2 zdiff, and 3 znew scripts in the gzip package, as used by other packages such as ncompress, allows local users to overwrite files via a symlink attack on temporary files. NOTE: the znew vulnerability may overlap CVE-2003-0367...

Debian DSA-588-1 : gzip - insecure temporary files

Trustix developers discovered insecure temporary file creation in supplemental scripts in the gzip package which may allow local users to overwrite files via a symlink attack. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...

CVE-2004-0970

CVE-2004-0970 concerns the gzip package: the (1) gzexe, (2) zdiff, and (3) znew scripts are able to overwrite files via a symlink attack on temporary files, enabling local users to modify files. This vulnerability is described as a local-privilege-impact issue (I:P) with a low base score (2.1) an...