Accellion File Transfer Appliance (FTA) contains multiple vulnerabilities

Overview The Accellion File Transfer Appliance FTA contains multiple vulnerabilites that can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The Accellion File Transfer appliance contains multiple vulnerabilities in versions below...

CVE-2015-2352

CVE-2015-2352 affects MyBB (MyBulletinBoard) up to version 1.8.3; the cache handler fails to properly validate input encoding before passing data to var_export, enabling an unspecified impact via unknown vectors. The issue is resolved in MyBB 1.8.4 per vendor advisories. Practical impact and expl...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-2352. Reason: This candidate is a duplicate of CVE-2014-2352. The wrong ID was used. Notes: All CVE users should reference CVE-2014-2352 instead of this candidate. All references and descriptions in this candidate have been...

Ubuntu 14.04 LTS : DBus vulnerabilities (USN-2352-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2352-1 advisory. Simon McVittie discovered that DBus incorrectly handled the file descriptors message limit. A local attacker could use this issue to cause DBus to crash,...

Novatel Wireless MiFi 2352 Password Information Disclosure Vulnerability

No description provided by source...

CVE-2014-2352

CVE-2014-2352 describes a directory traversal in Cogent DataHub prior to version 7.3.5, where the directory specifier can traverse paths to access limited hard-coded file types and potentially cause a web server DoS. Affected product: Cogent DataHub (pre-7.3.5). Root cause: improper path traversa...

[security bulletin] HPSBST02896 rev.1 - HP StoreVirtual Storage, Remote Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03825537 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03825537 Version: 1 HPSBST02896 rev....

CVE-2013-2352

CVE-2013-2352 affects LeftHand OS (San iQ) 10.5 and earlier on HP StoreVirtual Storage devices. The vulnerability stems from an HP Support challenge-response root-login mechanism that cannot be disabled, potentially allowing remote attackers to gain administrative access by leveraging knowledge o...

Fedora Update for mediatomb FEDORA-2013-2352

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

[SECURITY] [DSA 2477-1] sympa security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2477-1 [email protected] http://www.debian.org/security/ Florian Weimer May 20, 2012 http://www.debian.org/security/faq -...

CVE-2012-2352

The archive management arcmanage page in wwsympa/wwsympa.fcgi.in in Sympa before 6.1.11 does not check permissions, which allows remote attackers to list, read, and delete arbitrary list archives via vectors related to the 1 doarcmanage, 2 doarcdownload, or 3 doarcdelete functions...

CVE-2012-2352

The CVE-2012-2352 entry applies to Sympa’s archive management (arc_manage) page (wwsympa/wwsympa.fcgi.in) prior to version 6.1.11. The underlying flaw is a missing permissions check on the arc_manage interface, which allows remote attackers to list, read, and delete arbitrary list archives via th...

Novatel MiFi 2352 Access Bypass

In spanish: http://www.securitybydefault.com/2010/01/vulnerabilidad-en-modemrouter-3g.html Producto: Novatel MiFi 2352 Version: access point firmware 11.47.17 router firmware: 012 modem firmware: 5.15.00.0-00 2009-06-26 10:24:29 Vulnerability: You can access to xml configuration file with clear...

Debian Security Advisory DSA 2352-1 (puppet)

The remote host is missing an update to puppet announced via advisory DSA 2352-1. OpenVAS Vulnerability Test $Id: deb23521.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2352-1 puppet Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian DSA-2352-1 : puppet - programming error

It was discovered that Puppet, a centralized configuration management solution, misgenerated certificates if the 'certdnsnames' option was used. This could lead to man in the middle attacks. More details are available on the Puppet website. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

APPLE-SA-2011-10-12-4 Safari 5.1.1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2011-10-12-4 Safari 5.1.1 Safari 5.1.1 is now available and addresses the following: Safari Available for: Mac OS X v10.6.8, Mac OS X Server v10.6.8, OS X Lion v10.7.2, OS X Lion Server v10.7.2, Windows 7, Vista, XP SP2 or later Impact:...

CVE-2011-2352

WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1...

CVE-2011-2352

CVE-2011-2352 affects WebKit used by Apple iTunes before 10.5. The vulnerability allows a MITM attacker to execute arbitrary code or cause a denial of service (memory corruption and application crash) via iTunes Store browsing vectors. Connected sources reiterate WebKit/iTunes Store browsing as t...

Novatel Wireless MiFi 2352 Password Information Disclosure Vulnerability

MiFi 2352 is prone to an information-disclosure vulnerability that may expose sensitive information. Successful exploits will allow authenticated attackers to obtain passwords, which may aid in further attacks. MiFi 2352 access point firmware 11.47.17 is vulnerable; other versions may also be...

Novatel Wireless MiFi 2352 Password Information Disclosure Vulnerability - Active Check

MiFi 2352 is prone to an information disclosure vulnerability that may expose sensitive information. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...