72 matches found
CVE-2015-1424
Gecko CMS versions 2.2 and 2.3 are affected by a Cross‑Site Request Forgery (CSRF) vulnerability that allows an attacker to hijack administrator authentication by issuing a crafted newuser request to admin/index.php. The flaw enables an attacker to add a new administrator account and thereby gain...
CVE-2014-1424
apparmorparser in the apparmor package before 2.8.952430-0ubuntu5.1 in Ubuntu 14.04 allows attackers to bypass AppArmor policies via unspecified vectors, related to a "miscompilation flaw."...
CVE-2014-1424
CVE-2014-1424 affects the Ubuntu 14.04 package set: the component apparmor_parser in the apparmor package (before 2.8.95~2430-0ubuntu5.1) could bypass AppArmor policies due to a miscompilation flaw. Impact: confined applications may gain unintended access or be restricted incorrectly. Affected re...
CVE-2014-1424
apparmorparser in the apparmor package before 2.8.952430-0ubuntu5.1 in Ubuntu 14.04 allows attackers to bypass AppArmor policies via unspecified vectors, related to a "miscompilation flaw."...
Oracle Linux 6 : perl (ELSA-2011-1424)
The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1424 advisory. - 731246 CVE-2011-2939CVE-2011-2939 heap overflow - decoding Unicode string Tenable has extracted the preceding description block directly from the...
CVE-2012-1424
The TAR file parser in Antiy Labs AVL SDK 2.0.3.7, Quick Heal aka Cat QuickHeal 11.00, Jiangmin Antivirus 13.0.900, Norman Antivirus 6.06.12, PC Tools AntiVirus 7.0.3.5, and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a POSIX TAR file with a \19\04\00\10...
CVE-2012-1424
The CVE-2012-1424 entry relates to a vulnerability in the TAR file parser used by multiple products: Antiy Labs AVL SDK 2.0.3.7, Quick Heal (Cat QuickHeal) 11.00, Jiangmin Antivirus 13.0.900, Norman Antivirus 6.06.12, PC Tools AntiVirus 7.0.3.5, and Sophos Anti-Virus 4.61.0. The issue allows remo...
CVE-2011-1424
The default configuration of ExShortcut\Web.config in EMC SourceOne Email Management before 6.6 SP1, when the Mobile Services component is used, does not properly set the localOnly attribute of the trace element, which allows remote authenticated users to obtain sensitive information via ASP.NET...
CVE-2011-1424
EMC SourceOne Email Management (before 6.6 SP1) with Mobile Services enabled contains a trace/configuration flaw in ExShortcut/Web.config: the trace element localOnly flag is not set to true. This enables the ASP.NET Application Tracing file to potentially disclose application-sensitive informati...
JustSystems Ichitaro Unspecified Vulnerability
This host is installed JustSystems Ichitaro and is prone to unspecified vulnerability OpenVAS Vulnerability Test $Id: secpodjustsystemsichitarounspecifiedvuln.nasl 5394 2017-02-22 09:22:42Z teissa $ JustSystems Ichitaro Unspecified Vulnerability Authors: Madhuri D Copyright: Copyright c 2010...
CVE-2010-1424
CVE-2010-1424 affects JustSystems Ichitaro and Ichitaro Government (2006–2010). A vulnerability in a crafted font file could allow a user-assisted remote attacker to execute arbitrary code. The issue is described as unspecified in some sources, but multiple connected documents confirm the softwar...
SuSE 11 Security Update : acroread_ja (SAT Patch Number 1424)
Adobe Reader has been updated to fix numerous security vulnerabilities. Some of the vulnerabilities allowed attackers to potentially execute arbitrary code on the victim's system via specially crafted PDF files. CVE-2007-0048 / CVE-2007-0045 / CVE-2009-2564 / CVE-2009-2979 / CVE-2009-2980 /...
Design/Logic Flaw
Unspecified vulnerability in HP ProCurve Threat Management Services zl Module J9155A ST.1.0.090213 and earlier allows remote attackers to cause a denial of service by triggering a stop or crash in httpd, aka PR18770, a different vulnerability than CVE-2009-1423 and CVE-2009-1424...
CVE-2009-1424
HP ProCurve Threat Management Services zl Module (J9155A) ST.1.0.090213 and earlier is affected by CVE-2009-1424, where remote attackers can cause a denial of service via unknown vectors. The vulnerability is classified with a CVSS v2 base score of 7.8 (HIGH) and has network-based access with low...
[security bulletin] HPSBGN02446 SSRT090111 rev.1 - HP ProCurve Threat Management Services zl Module (J9155A), Remote Unauthorized Access, Denial of Service (DoS)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01803910 Version: 1 HPSBGN02446 SSRT090111 rev.1 - HP ProCurve Threat Management Services zl Module J9155A, Remote Unauthorized Access, Denial of Service DoS NOTICE: The information in this...
CVE-2003-1424
The CVE-2003-1424 issue involves Petitforum’s message.php, where improper authentication allows remote attackers to impersonate forum users by altering the connect cookie. This reflects insufficient session/cookie validation with an impact described as PARTIAL confidentiality/integrity/availabili...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in Moodle 1.7.1 allows remote attackers to inject arbitrary web script or HTML via a style expression in the search parameter, a different vulnerability than CVE-2004-1424...
CVE-2007-3555
Cross-site scripting XSS vulnerability in index.php in Moodle 1.7.1 allows remote attackers to inject arbitrary web script or HTML via a style expression in the search parameter, a different vulnerability than CVE-2004-1424...
CVE-2007-1424
CVE-2007-1424 concerns Softnews Media Group DataLife Engine. It describes multiple PHP remote file inclusion vulnerabilities that allow an attacker to execute arbitrary PHP code via a URL supplied to the root_dir parameter in init.php and Ajax/editnews.php. The observed impact is arbitrary code e...