20527 matches found
CVE-2011-4778
Cross-site scripting XSS vulnerability in Splunk Web in Splunk 4.2.x before 4.2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka SPL-44614...
CVE-2011-4643
Multiple directory traversal vulnerabilities in Splunk 4.x before 4.2.5 allow remote authenticated users to read arbitrary files via a .. dot dot in a URI to 1 Splunk Web or 2 the Splunkd HTTP Server, aka SPL-45243...
CVE-2011-4778
CVE-2011-4778 affects Splunk Web in Splunk 4.2.x up to, but not including, 4.2.5. It is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors (aka SPL-44614). Impact is remote code execution of scripts within the bro...
CVE-2011-4644
CVE-2011-4644 affects Splunk 4.2.5 and earlier when a Free license is selected, enabling undesired functionality in environments that do not support authentication. The issue allows remote attackers to (1) read arbitrary files via a management-console session using crafted data sources, or (2) ex...
CVE-2011-4643
CVE-2011-4643 affects Splunk 4.x prior to 4.2.5. Multiple directory traversal vulnerabilities allow remote authenticated users to read arbitrary files via a .. in a URI to either Splunk Web or the Splunkd HTTP Server (SPL-45243). Root cause is improper handling of dot-dot path components in the w...
CVE-2011-4642
mappy.py in Splunk Web in Splunk 4.2.x before 4.2.5 does not properly restrict use of the mappy command to access Python classes, which allows remote authenticated administrators to execute arbitrary code by leveraging the sys module in a request to the search application, as demonstrated by a...
Upgrade Tomcat to latest minor version
See http://www.cvedetails.com/cve/CVE-2011-4084/. We're shipping 6.0.32 at the moment...
Upgrade Tomcat to latest minor version
See http://www.cvedetails.com/cve/CVE-2011-4084/. We're shipping 6.0.32 at the moment...
Symantec IM Manager Web Interface ProcessAction Code Execution (CVE-2011-0554)
A remote code execution vulnerability has been reported in Symantec IM Manager Web Interface. The vulnerability is due to insufficient validation of certain HTTP request parameters. An attacker may exploit this vulnerability by sending HTTP requests with a crafted URI string to an affected server...
Symantec IM Manager Web Interface ProcessAction Code Execution (CVE-2011-0554)
A remote code execution vulnerability has been reported in Symantec IM Manager Web Interface...
Microsoft ASP.NET Authentication Bypass Elevation of Privilege (MS11-100; CVE-2011-3416)
An elevation of privilege vulnerability has been reported in Microsoft ASP.NET...
Bugzilla Chart Generator Cross Site Scripting
Advisory: Bugzilla: Cross-Site Scripting in Chart Generator RedTeam Pentesting discovered a Cross-Site Scripting XSS vulnerability in Bugzilla's chart generator during a penetration test. If attackers can persuade users to click on a prepared link or redirected them to such a link from an...
Mandriva Linux Security Advisory : fcgi (MDVSA-2012:001)
A vulnerability has been found and corrected in fcgi : The FCGI aka Fast CGI module 0.70 through 0.73 for Perl, as used by CGI::Fast, uses environment variable values from one request during processing of a later request, which allows remote attackers to bypass authentication via crafted HTTP...
Fedora 16 : ipmitool-1.8.11-8.fc16 (2011-17065)
This update fixes following security bug: CVE-2011-4339 - OpenIPMI: IPMI event daemon creates PID file with world writeable permissions Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatical...
PHP Hash Table Collision Proof Of Concept
Exploit for php platform in category dos / poc ''' This script was written by Christian Mehlmauer Original PHP Payloadgenerator taken from https://github.com/koto/blog-kotowicz-net-examples/tree/master/hashcollision CVE : CVE-2011-4885 requires Python 2.7 Examples: - Make a single Request, wait f...
Fedora 15 : phpMyAdmin-3.4.9-1.fc15 (2011-17370)
Changes 3.4.9.0 2011-12-21 : - edit Inline editing enum fields with null shows no dropdown - interface DB suggestion not correct for user with underscore - core Magic quotes removed in PHP 5.4 - session No feedback when result is empty signon authtype - display Problems regarding ShowTooltipAlias...
SuSE 11.1 Security Update : Kerberos 5 (SAT Patch Number 5594)
This update of krb5 fixes two security issues. - A remote code execution in the kerberized telnet daemon was fixed. This only affects the ktelnetd from the krb5-appl RPM, not the regular telnetd supplied by SUSE.. CVE-2011-4862 - / MITKRB5-SA-2011-005: Fixed krb5 ftpd unauthorized file access...
Fedora 15 : jasper-1.900.1-18.fc15 (2011-16955)
CVE-2011-4516, CVE-2011-4517 jasper: heap buffer overflow flaws lead to arbitrary code execution CERT VU887409 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...
PHP < 5.3.9 Multiple DoS Vulnerabilities - Windows
PHP is prone to multiple denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if...
