61 matches found
CVE-2017-2082
This CVE entry is rejected; it is not used and does not represent an active vulnerability.
VMware vRealize Log Insight 2.x / 3.x < 3.3.2 Multiple Vulnerabilities (VMSA-2016-0008)
The VMware vRealize Log Insight application running on the remote host is 2.x or 3.x prior to 3.3.2. It is, therefore, affected by multiple vulnerabilities : - A cross-site scripting XSS vulnerability exists due to improper validation of user-supplied input before returning it to users. An...
CVE-2016-2082
Cross-site request forgery CSRF vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.3.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
CVE-2016-2082
CVE-2016-2082 affects VMware vRealize Log Insight 2.x and 3.x prior to 3.3.2. The issue is a cross-site request forgery (CSRF/XSRF) vulnerability that can hijack an authenticated user’s session. The root cause is insufficient CSRF protection for certain actions. A remediation present in the conne...
CVE-2016-2082
Cross-site request forgery CSRF vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.3.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
CVE-2015-2082
UNIT4 Prosoft HRMS contains a cross-site scripting (XSS) vulnerability in the Login.aspx page, exploitable via the txtUserID parameter. Affected versions include PROSOFT HRMS before 8.14.330.43 (and prior versions per CNVD listing 8.14.230.47), with the issue described as allowing remote attacker...
Ubuntu: Security Advisory (USN-2082-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for moodle FEDORA-2013-8702
Check for the Version of moodle OpenVAS Vulnerability Test Fedora Update for moodle FEDORA-2013-8702 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Fedora Update for moodle FEDORA-2013-8692
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2013-2082
CVE-2013-2082 affects Moodle: versions up to 2.1.10, 2.2.x before 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 do not enforce capability requirements for reading blog comments, allowing remote attackers to obtain sensitive information via a crafted request. Root cause: missing capability ch...
DSA-2480-4 request-tracker3.8 - regression
Bulletin has no description...
Fedora Update for rt3 FEDORA-2012-8290
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2012-2082
Cross-site scripting XSS vulnerability in the Chaos tool suite aka CTools module 7.x-1.x before 7.x-1.0 for Drupal allows remote authenticated users with the post comments permission to inject arbitrary web script or HTML via a user signature...
CVE-2012-2082
Cross-site scripting XSS vulnerability in the Chaos tool suite aka CTools module 7.x-1.x before 7.x-1.0 for Drupal allows remote authenticated users with the post comments permission to inject arbitrary web script or HTML via a user signature...
CVE-2012-2082
The CVE-2012-2082 issue affects the Chaos Tool Suite (ctools) Drupal module 7.x-1.x prior to 7.x-1.0. The root cause is that the module did not properly filter user signatures when rendering comments, allowing remote authenticated users with the post comments permission to inject arbitrary web sc...
Debian DSA-2480-4 : request-tracker3.8 - several vulnerabilities
Several vulnerabilities were discovered in Request Tracker, an issue tracking system : - CVE-2011-2082 The vulnerable-passwords scripts introduced for CVE-2011-0009 failed to correct the password hashes of disabled users. - CVE-2011-2083 Several cross-site scripting issues have been discovered. -...
CVE-2011-2082
The vulnerable-passwords script in Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 does not update the password-hash algorithm for disabled user accounts, which makes it easier for context-dependent attackers to determine cleartext passwords, and possibly use these passwords...
CVE-2011-2082
The vulnerable-passwords script in Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 does not update the password-hash algorithm for disabled user accounts, which makes it easier for context-dependent attackers to determine cleartext passwords, and possibly use these passwords...
CVE-2011-2082
The vulnerable-passwords script in Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 does not update the password-hash algorithm for disabled user accounts, which makes it easier for context-dependent attackers to determine cleartext passwords, and possibly use these passwords...