79 matches found
CVE-2017-2081
CVE-2017-2081 is rejected/not used and does not represent an active vulnerability entry.
VMware vRealize Log Insight 2.x / 3.x < 3.3.2 Multiple Vulnerabilities (VMSA-2016-0008)
The VMware vRealize Log Insight application running on the remote host is 2.x or 3.x prior to 3.3.2. It is, therefore, affected by multiple vulnerabilities : - A cross-site scripting XSS vulnerability exists due to improper validation of user-supplied input before returning it to users. An...
CVE-2016-2081
Cross-site scripting XSS vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2016-2081
The CVE-2016-2081 issue affects VMware vRealize Log Insight 2.x and 3.x prior to 3.3.2, with a cross-site scripting (XSS) vulnerability caused by improper validation of user-supplied input. An unauthenticated, remote attacker could inject arbitrary script or HTML via unspecified vectors, potentia...
Oracle Linux 6 : postgresql (ELSA-2015-2081)
The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-2081 advisory. 8.4.20-4 - fix for CVE-2015-5288 rhbz1273446 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...
CentOS 6 : postgresql (CESA-2015:2081)
Updated postgresql packages that fix one security issue are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...
Debian DLA-48-1 : bind9 security update
Fix denial of service attack when processing NSEC3-signed zone queries, fixed by not calling memcpy with overlapping ranges in bin/named/query.c. - patch backported from 9.8.6-P2 by Marc Deslauriers from the Ubuntu Security team for USN-2081-1. NOTE: Tenable Network Security has extracted the...
CVE-2014-2081
Multiple SQL injection vulnerabilities in the login in webreports/cgi-bin/InfoStation.cgi in Innovative vtls-Virtua before 2013.2.4 and 2014.x before 2014.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameter...
[SECURITY] [DLA 48-1] bind9 security update
Package : bind9 Version : 9.7.3.dfsg-1squeeze12 CVE ID : CVE-2014-0591 Debian Bug : 735190 Fix denial of service attack when processing NSEC3-signed zone queries, fixed by not calling memcpy with overlapping ranges in bin/named/query.c. - patch backported from 9.8.6-P2 by Marc Deslauriers from th...
VTLS Virtua InfoStation.cgi - SQL Injection
VTLS Virtua InfoStation.cgi - SQL Injection =====Alligator Security Team - Security Advisory============================ - VTLS Virtua InfoStation.cgi SQLi - CVE-2014-2081 - Author: José Tozo =====Table of Contents====================================================== 1. Background 2. Detailed...
VTLS Virtua InfoStation.cgi - SQL Injection Vulnerability
VTLS-Virtua versions under 2014.X and all of 2013.2.X suffer from a remote SQL injection vulnerability. - VTLS Virtua InfoStation.cgi SQLi - CVE-2014-2081 - Author: José Tozo =====Table of Contents====================================================== 1. Background 2. Detailed description 3. Othe...
VTLS Virtua InfoStation.cgi - SQL Injection
=====Alligator Security Team - Security Advisory============================ - VTLS Virtua InfoStation.cgi SQLi - CVE-2014-2081 - Author: José Tozo =====Table of Contents====================================================== 1. Background 2. Detailed description 3. Other contexts & solutions 4...
CVE-2014-2081
creationtimestamp| type| source ---|---|--- 2014-08-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34420...
VTLS-Virtua SQL Injection
=====Alligator Security Team - Security Advisory============================ - VTLS Virtua InfoStation.cgi SQLi - CVE-2014-2081 - Author: José Tozo =====Table of Contents====================================================== 1. Background 2. Detailed description 3. Other contexts & solutions 4...
Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.04 / 13.10 : bind9 vulnerability (USN-2081-1)
Jared Mauch discovered that Bind incorrectly handled certain queries for NSEC3-signed zones. A remote attacker could use this flaw with a specially crafted query to cause Bind to stop responding, resulting in a denial of service. Note that Tenable Network Security has extracted the preceding...
Fedora Update for moodle FEDORA-2013-8692
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for moodle FEDORA-2013-8702
Check for the Version of moodle OpenVAS Vulnerability Test Fedora Update for moodle FEDORA-2013-8702 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
CVE-2013-2081
CVE-2013-2081 affects Moodle versions: 2.1.10; 2.2.x before 2.2.10; 2.3.x before 2.3.7; and 2.4.x before 2.4.4. The root cause is that hub registration did not respect “don’t send” attributes, enabling remote hubs to read form data and obtain sensitive site information. The connected documents co...
CVE-2012-2081
The CVE-2012-2081 issue concerns the Organic Groups (OG) module for Drupal (versions 6.x-2.x prior to 6.x-2.3). The root cause is that the module’s Views integration does not correctly filter information from private groups, allowing remote attackers to access sensitive data. Impact: disclosure o...