118 matches found
DSA-3146-1 requests - security update
Bulletin has no description...
Debian: Security Advisory (DSA-3146-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Alcatel Lucent 1830 Photonic Service Switch XSS
XSS in web interface...
1830 Photonic Service Switch PSS-32/16/4 Cross Site Scripting
SWISSCOM CSIRT ADVISORY - http://www.swisscom.com/security CVE ID: CVE-2014-3809 Product: 1830 Photonic Service Switch PSS-32/16/4 Vendor: Alcatel-Lucent Subject: Reflected Cross-site Scripting - XSS Effect: Remotely exploitable Author: Stephan Rickauer stephan.rickauer at swisscom.com Date:...
CVE-2014-3809: Reflected XSS in Alcatel Lucent 1830 PSS-32/16/4
SWISSCOM CSIRT ADVISORY - http://www.swisscom.com/security CVE ID: CVE-2014-3809 Product: 1830 Photonic Service Switch PSS-32/16/4 Vendor: Alcatel-Lucent Subject: Reflected Cross-site Scripting - XSS Effect: Remotely exploitable Author: Stephan Rickauer stephan.rickauer at swisscom.com Date:...
CVE-2014-1830
Requests aka python-requests before 2.3.0 allows remote servers to obtain sensitive information by reading the Proxy-Authorization header in a redirected request...
hoard (1.1.1), maxipago-sdk (>=1.0.0, <=1.0.4) potentially affected by CVE-2014-1830 via requests (1.1.0)
requests PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on requests and may be impacted: - hoard 1.1.1 - maxipago-sdk =1.0.0, =1.0.4 Source cves: CVE-2014-1830 Source advisory: OSV:PYSEC-2014-14...
apod-py (0.0.1), chewbbaca-nserver (>=1.0.0, <=1.0.4) +24 more potentially affected by CVE-2014-1830 via requests (>=2.0.0, <=2.2.1)
requests PYPI version =2.0.0, =1.0.0, =0.3.0, =0.1.4, =0.1.1, =0.1.2 - python-glanceclient 0.14.3 and more Source cves: CVE-2014-1830 Source advisory: OSV:PYSEC-2014-14...
CVE-2014-1830
CVE-2014-1830 affects python-requests (Requests). The issue arises when a redirect occurs: the Proxy-Authorization header is not re-evaluated for the new request, allowing a remote server to leak sensitive information. Public advisories (e.g., openSUSE-2016-98) note this CVE and indicate a securi...
Ubuntu: Security Advisory (USN-2382-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 14.04 LTS : Requests vulnerabilities (USN-2382-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2382-1 advisory. Jakub Wilk discovered that Requests incorrectly reused authentication credentials after being redirected. An attacker could possibly use this issue to...
USN-2382-1: Requests vulnerabilities
Jakub Wilk discovered that Requests incorrectly reused authentication credentials after being redirected. An attacker could possibly use this issue to obtain authentication credentials intended for another site. CVE-2014-1829, CVE-2014-1830...
Updated python-requests packages fix security vulnerabilities
Updated python-requests packages fix security vulnerability: Python-requests was found to have a vulnerability, where the attacker can retrieve the passwords from /.netrc file through redirect requests, if the user has their passwords stored in the /.netrc file CVE-2014-1829. It was discovered th...
Fedora Update for moodle FEDORA-2013-4387
Check for the Version of moodle OpenVAS Vulnerability Test Fedora Update for moodle FEDORA-2013-4387 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Fedora 17 : moodle-2.2.9-1.fc17 (2013-4404)
Fix for CVEs: CVE-2012-3363 CVE-2013-1830 CVE-2013-1831 CVE-2013-1832 CVE-2013-1833 CVE-2013-1834 CVE-2013-1835 CVE-2013-1836 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean a...
Fedora 18 : moodle-2.3.6-1.fc18 (2013-4387)
Fix for CVEs: CVE-2012-3363 CVE-2013-1830 CVE-2013-1831 CVE-2013-1832 CVE-2013-1833 CVE-2013-1834 CVE-2013-1835 CVE-2013-1836 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean a...
CVE-2013-1830
user/view.php in Moodle through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 does not enforce the forceloginforprofiles setting, which allows remote attackers to obtain sensitive course-profile information by leveraging the guest role, as demonstrated by a Google search...
CVE-2013-1830
The CVE-2013-1830 entry refers to Moodle versions affected by a privilege/information disclosure flaw: user/view.php does not enforce the forceloginforprofiles setting, allowing remote attackers to obtain sensitive course-profile information via the guest role. Affected versions are Moodle up to ...
CVE-2012-1830
WellinTech KingView 6.53 is affected by CVE-2012-1830 due to a stack-based buffer overflow in KingView that can be triggered by a crafted packet sent to TCP port 555, potentially enabling remote code execution. Related advisories (RH-CVE, PRION, CPS/ICS) corroborate a remote-exploitation vector a...
