85 matches found
FreeBSD Ports: p5-RT-Authen-ExternalAuth
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Fedora 17 : perl-RT-Authen-ExternalAuth-0.11-1.fc17 (2012-11337)
update to 0.11 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...
FreeBSD : p5-RT-Authen-ExternalAuth -- privilege escalation (cdc4ff0e-d736-11e1-8221-e0cb4e266481)
The RT development team reports : RT::Authen::ExternalAuth 0.10 and below for all versions of RT are vulnerable to an escalation of privilege attack where the URL of a RSS feed of the user can be used to acquire a fully logged-in session as that user. CVE-2012-2770 has been assigned to this...
CVE-2011-2770
Cross-site scripting XSS vulnerability in man2html.cgi.c in man2html 1.6, and possibly other version, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to error messages...
CVE-2011-2770
CVE-2011-2770 is an XSS vulnerability in man2html.cgi.c (man2html 1.6 and possibly other versions) where error message handling fails to escape input, enabling remote attackers to inject arbitrary script/HTML via error-message vectors. Public references across NVD, Debian DSA-2335, RH advisories,...
CVE-2011-2770
Cross-site scripting XSS vulnerability in man2html.cgi.c in man2html 1.6, and possibly other version, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to error messages...
CVE-2011-2770
Cross-site scripting XSS vulnerability in man2html.cgi.c in man2html 1.6, and possibly other version, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to error messages...
[SECURITY] [DSA 2335-1] man2html security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2335-1 [email protected] http://www.debian.org/security/ Nico Golde November 5th, 2011 http://www.debian.org/security/faq -...
CVE-2004-2770
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2011-3389. Reason: This candidate is a duplicate of CVE-2011-3389. Notes: All CVE users should reference CVE-2011-3389 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2004-2770
CVE-2004-2770 is a duplicate of CVE-2011-3389. The connected documents describe CVE-2011-3389, a vulnerability in SSL 3.0 and TLS 1.0 CBC-mode handling that can allow an attacker to recover portions of plaintext. Reports and advisories show mitigations and fixes across vendors: Mitigation: in som...
CVE-2010-2770
CVE-2010-2770 affects Mozilla-based products on Mac OS X: Mozilla Firefox (before 3.5.12 and 3.6.x before 3.6.9), Thunderbird (before 3.0.7 and 3.1.x before 3.1.3), and SeaMonkey (before 2.0.7). The vulnerability arises from a crafted font in a data: URL that can trigger memory corruption, leadin...
CVE-2009-2770
PowerUpload 2.4 allows remote attackers to bypass authentication and gain administrative access via a MIME encoded value of admin for the myadminname cookie...
CVE-2009-2770
PowerUpload 2.4 allows remote attackers to bypass authentication and gain administrative access via a MIME encoded value of admin for the myadminname cookie...
CVE-2009-2770
The CVE-2009-2770 issue affects PowerUpload 2.4, where an authentication bypass is possible via a MIME-encoded value of admin in the myadminname cookie, enabling remote attackers to gain administrative access. The vulnerability arises from improper validation of the cookie value, allowing an atta...
CVE-2009-2770
creationtimestamp| type| source ---|---|--- 2009-07-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9219...
CVE-2006-2770
creationtimestamp| type| source ---|---|--- 2008-11-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6972...
CVE-2008-2770
SQL injection vulnerability in index.php in MycroCMS 0.5, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the entryid parameter...
CVE-2008-2770
An SQL injection vulnerability in MycroCMS 0.5 (index.php) when magic_quotes_gpc is disabled allows remote attackers to execute arbitrary SQL commands via the entry_id parameter. Affected software: MycroCMS 0.5; root cause: improper handling of input leading to SQL injection. Impact: partial conf...