CVE-2015-1844

CVE-2015-1844 corresponds to a Foreman/Satellite API authorization flaw: remote authenticated users could bypass organization/location restrictions via the REST API. Connected advisories (RHSA-2015:1591/1592) indicate affected Foreman components and that remediation is provided through Red Hat Sa...

CVE-2015-1844

Foreman before 1.7.5 allows remote authenticated users to bypass organization and location restrictions by connecting through the REST API...

Important: Red Hat Security Advisory: Red Hat Satellite 6.1.1 on RHEL 6

Red Hat Satellite 6.1 now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having an important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available for each vulnerability from the CVE...

Ubuntu: Security Advisory (USN-1844-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-1844

The vulnerability is a Cross-site scripting (XSS) flaw in Piwik (now Matomo) before version 1.11. The affected product is Piwik; the description specifies XSS via unspecified vectors and that remote attackers can inject arbitrary web script or HTML. No specific exploitation vectors, root cause de...

CVE-2012-1844

CVE-2012-1844 affects Quantum Scalar i500, Dell ML6000, and IBM TS3310 tape libraries. Firmware before i7.0.3 (604G.GS00100) for i500, before A20-00 (590G.GS00100) for ML6000, and before R6C (606G.GS001) for TS3310 contains pre-configured default accounts with fixed passwords, enabling remote acc...

MS KB2526954: Microsoft Silverlight 4.0 < 4.0.60310 Multiple Vulnerabilities

The remote Windows host is running a version of Microsoft Silverlight that is affected by multiple vulnerabilities : - A memory leak exists relating to a popup control and a custom 'DependencyProperty' property. CVE-2011-1844 - Multiple memory leaks exist in the 'DataGrid' control implementation...

CVE-2011-1844

Microsoft Silverlight 4 prior to 4.0.60310.0 is affected by CVE-2011-1844 due to a memory leak in a popup control tied to a custom DependencyProperty, leading to possible denial of service from memory exhaustion. The issue is confirmed by multiple sources (NVD entry and Red Hat advisory) and is d...

CVE-2010-1844

CVE-2010-1844 affects Apple Mac OS X 10.6.x prior to 10.6.5, specifically Image Capture. Root cause: unbounded memory consumption in Image Capture when processing a crafted image, leading to a denial of service (memory usage and system crash). Affected: Mac OS X 10.6–10.6.4 (Image Capture). Impac...

Debian DSA-1844-1 : linux-2.6.24 - denial of service/privilege escalation

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-1385 Neil Horman discovered a missing fix from the e1000 network driver. A...

SuSE 11 Security Update : bind (SAT Patch Number 1844)

When bind is configured for DNSSEC it could incorrectly cache NXDOMAIN responses CVE-2010-0097. Moreover, the fix for CVE-2009-4022 was incomplete. Despite the previous fix CNAME and DNAME responses could be incorrectly cached CVE-2010-0290. All these bugs have been fixed. %NASLMINLEVEL 70300 C...

Debian Security Advisory DSA 1844-1 (linux-2.6.24)

The remote host is missing an update to linux-2.6.24 announced via advisory DSA 1844-1. OpenVAS Vulnerability Test $Id: deb18441.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1844-1 linux-2.6.24 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...

Debian: Security Advisory (DSA-1844-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-1844

Multiple cross-site scripting XSS vulnerabilities in Drupal 5.x before 5.18 and 6.x before 6.12 allow 1 remote authenticated users to inject arbitrary web script or HTML via crafted UTF-8 byte sequences that are treated as UTF-7 by Internet Explorer 6 and 7, which are not properly handled in the...

CVE-2009-1844

CVE-2009-1844 affects Drupal 5.x (prior to 5.18) and 6.x (prior to 6.12). The issue comprises two XSS vectors: (1) remote authenticated users can inject script via UTF-8 byte sequences misinterpreted as UTF-7 in the HTML exports of books, and (2) remote authenticated users with administer taxonom...

CVE-2008-1844

creationtimestamp| type| source ---|---|--- 2008-04-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31636...

openSUSE 10 Security Update : clamav (clamav-1844)

This versionupdate to 0.88.3 fixes small bugs. Among others a problem with large binhex files has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update clamav-1844. The text description ...

CVE-2007-1844

CVE-2007-1844 affects Aardvark Topsites PHP 5. it describes multiple PHP remote file inclusion vulnerabilities. The exploit path is through the URL in the path parameter to (1) button/settings_sql.php, (2) settings_sql.php, and (3) sources/misc/new_day.php, enabling remote attackers to potentiall...

CVE-2006-1844

The Debian installer for the 1 shadow 4.0.14 and 2 base-config 2.53.10 packages includes sensitive information in world-readable log files, including preseeded passwords and pppoeconf passwords, which might allow local users to gain privileges...

CVE-2006-1844

CVE-2006-1844 affects the Debian installer components for shadow 4.0.14 and base-config 2.53.10. The issue arises from world-readable log files that contain sensitive data (preseeded passwords and pppoeconf passwords), enabling local users to potentially gain privileges. The records do not specif...