79 matches found
CVE-2017-2101
CVE-2017-2101 affects the Hands-on Vulnerability Learning Tool “AppGoat” for Web Application (V3.0.0 and earlier). The vulnerability is an authentication bypass that allows a remote, unauthenticated attacker to perform arbitrary operations. Impact details indicate arbitrary operations can be exec...
Oracle Linux 7 : python (ELSA-2015-2101)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-2101 advisory. - Fixed CVE-2013-1753, CVE-2013-1752, CVE-2014-4616, CVE-2014-4650, CVE-2014-7185 Resolves: rhbz1206574 Tenable has extracted the preceding description...
Oracle: Security Advisory (ELSA-2015-2101)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-2101
Cross-site scripting XSS vulnerability in the Navigate bar in the Navigate module before 6.x-1.1 and 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-2101
The CVE-2015-2101 entry concerns the Drupal Navigate module (6.x-1.x prior to 6.x-1.1; 7.x-1.x prior to 7.x-1.1). The underlying issue is insufficient sanitization of user input in the Navigate bar, leading to a Cross-Site Scripting (XSS) vulnerability that could allow remote attackers to inject ...
SA-CONTRIB-2015-049 - Navigate - Cross Site Scripting (XSS)
Navigate is a customizable navigation bar for Drupal. The module doesn't sufficiently sanitize user input when displaying the Navigate bar. Because the vulnerability is a Reflected Cross Site Scripting, the only mitigating factor is that the victim must be tricked into visiting a specially crafte...
Fedora Update for openstack-nova FEDORA-2012-6273
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for openstack-nova FEDORA-2012-10418
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2012-2101
Openstack Compute Nova Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated users with certain permissions to cause a denial of service CPU and hard drive consumption via a network request that triggers a large number of iptables rules...
DEBIAN-CVE-2012-2101
Openstack Compute Nova Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated users with certain permissions to cause a denial of service CPU and hard drive consumption via a network request that triggers a large number of iptables rules...
CVE-2012-2101
OpenStack Compute (Nova) in Folsom, 2012.1, and 2011.3, is vulnerable because it does not cap the number of security group rules. This allows remote authenticated users with certain permissions to trigger a denial of service by issuing a network request that creates a large number of iptables rul...
Fedora Update for openstack-nova FEDORA-2012-6365
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora 17 : openstack-nova-2012.1-2.fc17 (2012-6273)
Sync up with Essex stable branch - Support more flexible guest image file injection - Enforce quota on security group rules CVE-2012-2101 - Provide startup scripts for the Essex VNC services - Provide a startup script for the separated metadata api service update to essex release Note that...
Fedora 16 : openstack-nova-2011.3.1-8.fc16 (2012-6365)
Fix undefined glancehost in getglanceclient - Implement quotas for security groups CVE-2012-2101 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...
RHEL 6 : acroread (RHSA-2011:1434)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1434 advisory. Adobe Reader allows users to view and print documents in Portable Document Format PDF. This update fixes multiple security flaws in Adobe...
Adobe Reader PDF GoToR JavaScript Code Execution (APSB11-16; CVE-2011-2101)
This is code execution vulnerability. The vulnerability is due to an error in Adobe Reader when handling PDF files that contain JavaScript code. A remote attacker could trigger this flaw by convincing a victim to open malformed PDF file with Adobe Reader. Successful exploitation of this could...
CVE-2011-2101
Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows and Mac OS X do not properly restrict script, which allows attackers to execute arbitrary code via a crafted document, related to a "cross document script execution vulnerability."...
CVE-2011-2101
CVE-2011-2101 affects Adobe Reader and Acrobat: versions 8.x prior to 8.3, 9.x prior to 9.4.5, and 10.x prior to 10.1 on Windows/macOS are susceptible to a cross-document script execution vulnerability. The issue arises because script handling is not properly restricted, enabling arbitrary code e...
SuSE 11 / 11.1 Security Update : Apache 2 (SAT Patch Numbers 2880 / 2881)
PHP was updated to version 5.2.14 to fix serveral security issues : - CVE-2010-1860 - CVE-2010-1862 - CVE-2010-1864 - CVE-2010-1914 - CVE-2010-1915 - CVE-2010-1917 - CVE-2010-2093 - CVE-2010-2094 - CVE-2010-2097 - CVE-2010-2100 - CVE-2010-2101 - CVE-2010-2190 - CVE-2010-2191 - CVE-2010-2225 -...