148 matches found
CVE-2013-2166
python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache encryption bypass...
CVE-2013-2166
python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache encryption bypass...
CVE-2013-2166
python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache encryption bypass...
CVE-2013-2166
The CVE-2013-2166 entry concerns python-keystoneclient versions 0.2.3 to 0.2.5, where the middleware memcache encryption bypass is documented. Multiple connected records (GHSA-C3XQ-CJ8F-7829 and OSV entries) confirm the same issue and reference advisories like RHSA-2013:0992. The vulnerability ce...
CVE-2019-2166
CVE-2019-2166 affects Android 10 in the libxaac library, where uninitialized data leads to information disclosure. The root cause is uninitialized data in lib xaac, enabling disclosure with no execution privileges and requires user interaction for exploitation. The issue is categorized as Informa...
CVE-2018-2166
This CVE entry is rejected/not used and does not represent an active vulnerability.
Solaris 10 (x86) : 125438-22
Oracle iPlanet Web Server 7.0.12 Solarisx86: Update Release patch. Date this patch was last updated by Sun : Aug/26/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...
Solaris 10 (sparc) : 116648-25
Web Server 6.1: Sun ONE Web Server 6.1 Patch WS61SP13. Date this patch was last updated by Sun : Sep/20/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...
CVE-2012-2166
CVE-2012-2166 affects IBM XIV Storage System (MTM 2810-A14, 2812-A14, 2810-114, 2812-114) prior to the specified level. The issue stems from hardcoded passwords for maintenance accounts, enabling remote attackers to gain user access via unknown vectors. IBM X-Force 75041 corroborates the hardcode...
CVE-2017-2166
CVE-2017-2166 is an open redirect vulnerability in GroupSession (Japan Total System Co., Ltd. GroupSession) affecting version 4.7.0 and earlier. The root cause is an open redirect (CWE-601) that could allow an attacker to redirect users to arbitrary websites, potentially enabling phishing. The is...
CVE-2016-2166
The 1 proton.reactor.Connector, 2 proton.reactor.Container, and 3 proton.utils.BlockingConnection classes in Apache Qpid Proton before 0.12.1 improperly use an unencrypted connection for an amqps URI scheme when SSL support is unavailable, which might allow man-in-the-middle attackers to obtain...
CVE-2016-2166
Apache Qpid Proton prior to 0.12.1 is affected. The vulnerable components are proton.reactor.Connector, proton.reactor.Container, and proton.utils.BlockingConnection, which improperly use an unencrypted connection for an amqps URI scheme when SSL support is unavailable. This could allow a man-in-...
CVE-2015-2166
Directory traversal vulnerability in the Instance Monitor in Ericsson Drutt Mobile Service Delivery Platform MSDP 4, 5, and 6 allows remote attackers to read arbitrary files via a ..%2f dot dot encoded slash in the default URI...
CVE-2015-2166
Ericsson Drutt Mobile Service Delivery Platform (MSDP) has a Local File Inclusion vulnerability in the Instance Monitor affecting versions 4–6. The flaw lets remote attackers read arbitrary files via a dot-dot-encoded slash (..%2f) in the default URI, enabling information disclosure. Root cause i...
Ericsson Drutt MSDP (Instance Monitor) - Directory Traversal
+------------------------------------------------------------------------------------------------------+ + Ericsson Drutt MSDP Instance Monitor - Directory Traversal Vulnerability and Arbitrary File Access +...
Fedora Update for librsvg2 FEDORA-2015-2166
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2014-2166
CVE-2014-2166 concerns Cisco TelePresence TC/TE Software 4.x where a flaw in the SIP implementation can be triggered by crafted SIP packets, causing a denial of service (device reload). The vulnerability is part of a set of SIP-related DoS issues in the Cisco TelePresence TC/TE software family (B...
Ubuntu: Security Advisory (USN-2166-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for python-keystoneclient FEDORA-2013-14302
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...