168 matches found
CVE-2014-1946
OpenDocMan vulnerability CVE-2014-1946 affects OpenDocMan versions 1.2.7 and earlier. The issue is improper access control in signup.php, where insufficient validation of allowed actions lets a remote authenticated user assign administrative privileges to their account. The advisory confirms the ...
IBM WebSphere Application Server 7.0 < 7.0.0.39 Multiple Vulnerabilities (FREAK)
Binary data 9700.prm...
Security update for the MozillaFirefox, mozilla-nss and mozilla-nspr (important)
This update to MozillaFirefox fixes several security issues and bugs. Mozilla Firefox was updated to 44.0. Mozilla NSS was updated to 3.21 Mozilla NSPR was updated to 4.11. The following vulnerabilities were fixed: CVE-2016-1930/CVE-2016-1931: Miscellaneous memory safety hazards boo963633...
openSUSE: Security Advisory for Mozilla (openSUSE-SU-2016:0306-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE: Security Advisory for MozillaFirefox (openSUSE-SU-2016:0309-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2016-1946
CVE-2016-1946 affects Mozilla Firefox on Android. The MoofParser::Metadata function in binding/MoofParser.cpp within libstagefright does not bound the size of read operations, allowing a crafted MP4 file to cause denial of service. The CNVD entry attributes a DoS impact to remote exploitation; no...
Mozilla Firefox Multiple Vulnerabilities (Jan 2016) - Windows
Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...
CVE-2016-1946
The MoofParser::Metadata function in binding/MoofParser.cpp in libstagefright in Mozilla Firefox before 44.0 does not limit the size of read operations, which might allow remote attackers to cause a denial of service integer overflow and buffer overflow or possibly have unspecified other impact v...
Oracle: Security Advisory (ELSA-2012-0710)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle: Security Advisory (ELSA-2012-0715)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-1946
IBM WebSphere Application Server WAS 8.5 before 8.5.5.6, and WebSphere Virtual Enterprise 7.0 before 7.0.0.6 for WebSphere Application Server WAS 7.0 and 8.0, does not properly implement user roles, which allows local users to gain privileges via unspecified vectors...
CVE-2015-1946
CVE-2015-1946 affects IBM WebSphere Application Server (WAS) and WebSphere Virtual Enterprise. It enables local privilege escalation due to incorrect handling of user roles, with vulnerable versions including WAS 8.5 prior to 8.5.5.6 and WAS 7.0/8.0 prior to their respective fixes; remediation is...
openSUSE Security Update : MozillaFirefox / MozillaThunderbird / mozilla-nss / etc (openSUSE-SU-2012:0760-1)
Changes in MozillaFirefox : - update to Firefox 13.0 bnc765204 - MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101 Miscellaneous memory safety hazards - MFSA 2012-36/CVE-2012-1944 bmo751422 Content Security Policy inline-script bypass - MFSA 2012-37/CVE-2012-1945 bmo670514 Information...
openSUSE Security Update : libgnomesu (openSUSE-SU-2011:0694-1)
The libgnomesu pam backend did not check the return value of the setuid functions. Local users could exploit that to gain root privileges CVE-2011-1946. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Securit...
openSUSE Security Update : libgnomesu (openSUSE-SU-2011:0694-1)
The libgnomesu pam backend did not check the return value of the setuid functions. Local users could exploit that to gain root privileges CVE-2011-1946. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Securit...
Multiple Vulnerabilities in OpenDocMan
Advisory ID: HTB23202 Product: OpenDocMan Vendor: Free Document Management Software Vulnerable Versions: 1.2.7 and probably prior Tested Version: 1.2.7 Advisory Publication: February 12, 2014 without technical details Vendor Notification: February 12, 2014 Vendor Patch: February 24, 2014 Public...
CVE-2013-1946
The CVE-2013-1946 entry affects Drupal’s RESTful Web Services (RESTWS) module for Drupal 7.x-1.x up to 7.x-1.3 and 7.x-2.x up to 7.x-2.0-alpha5. When page caching is enabled and anonymous users have RESTWS permissions, a GET request with an HTTP Accept header set to a non-HTML type can cause a de...
OpenDocMan 1.2.7 SQL Injection / Access Control
Advisory ID: HTB23202 Product: OpenDocMan Vendor: Free Document Management Software Vulnerable Versions: 1.2.7 and probably prior Tested Version: 1.2.7 Advisory Publication: February 12, 2014 without technical details Vendor Notification: February 12, 2014 Vendor Patch: February 24, 2014 Public...
OpenDocMan 1.2.7 - Multiple Vulnerabilities
OpenDocMan 1.2.7 - Multiple Vulnerabilities Advisory ID: HTB23202 Product: OpenDocMan Vendor: Free Document Management Software Vulnerable Versions: 1.2.7 and probably prior Tested Version: 1.2.7 Advisory Publication: February 12, 2014 without technical details Vendor Notification: February 12,...