196 matches found
CVE-2015-2940
Cross-site request forgery CSRF vulnerability in the CheckUser extension for MediaWiki allows remote attackers to hijack the authentication of certain users for requests that retrieve sensitive user information via unspecified vectors...
CVE-2015-2940
Cross-site request forgery CSRF vulnerability in the CheckUser extension for MediaWiki allows remote attackers to hijack the authentication of certain users for requests that retrieve sensitive user information via unspecified vectors...
CVE-2015-2940
Cross-site request forgery CSRF vulnerability in the CheckUser extension for MediaWiki allows remote attackers to hijack the authentication of certain users for requests that retrieve sensitive user information via unspecified vectors...
CVE-2015-2940
CVE-2015-2940 is a CSRF flaw in the MediaWiki CheckUser extension that can allow a remote attacker to hijack a user’s session and retrieve sensitive information. The connected advisories corroborate this as part of multiple vulnerabilities affecting MediaWiki, with remediation guidance to upgrade...
CVE-2014-2940
CVE-2014-2940 affects Cobham Sailor 900 and 6000 satellite terminals running firmware 1.08 MFHF / 2.11 VHF, where hardcoded administrator credentials are present. The NVD entry notes that an attacker could obtain full administrative control, with exploitation requiring either physical access to t...
CVE-2014-2940
Cobham Sailor 900 and 6000 satellite terminals with firmware 1.08 MFHF and 2.11 VHF have hardcoded credentials for the administrator account, which allows attackers to obtain administrative control by leveraging physical access or terminal access...
CVE-2013-2940
Unspecified vulnerability in Citrix CloudPortal Services Manager aka Cortex 10.0 before Cumulative Update 3 has unknown impact and attack vectors, a different vulnerability than other CVEs listed in CTX137162...
CVE-2013-2940
Technical details (affected product/component/version, root cause, exploit information) for CVE-2013-2940 are not publicly available in the provided connected documents. Monitor for updates.
Slackware: Security Advisory (SSA:2006-272-01)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2012-2940
MediaChance Real-DRAW PRO 5.2.4 is affected. The CVE-2012-2940 entry describes a denial of service (application crash) triggered by processing crafted image files in multiple formats (PNG, WMF, PSD, TGA, TTF, BMP, TIFF, PCX) remotely. The connected documents corroborate the same description acros...
CVE-2012-2940
creationtimestamp| type| source ---|---|--- 2012-05-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18902...
GLSA-201202-08 : stunnel: Arbitrary code execution
The remote host is affected by the vulnerability described in GLSA-201202-08 stunnel: Arbitrary code execution An unspecified heap vulnerability was discovered in stunnel. Impact : The vulnerability may possibly be leveraged to perform remote code execution or a Denial of Service attack. Workarou...
FreeBSD Ports: stunnel
The remote host is missing an update to the system as announced in the referenced advisory. VID cdeb34e6-d00d-11e0-987e-00215c6a37bb OpenVAS Vulnerability Test $ Description: Auto generated from VID cdeb34e6-d00d-11e0-987e-00215c6a37bb Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...
stunnel 4.4x < 4.42 Unspecified Memory Corruption
The version of stunnel 4.4x installed on the remote host is a version prior to 4.42. It is, therefore, affected by a memory corruption vulnerability that allows a remote attacker to cause a denial of service condition or execution of arbitrary code. C Tenable Network Security, Inc...
CVE-2011-2940
stunnel 4.40 and 4.41 might allow remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via unspecified vectors...
CVE-2011-2940
CVE-2011-2940 affects stunnel 4.x (notably 4.40/4.41) with an unspecified heap memory corruption vulnerability that can permit remote code execution or denial of service. Public bulletins cite fixes in later 4.x releases (e.g., 4.42) and advisories (Gentoo GLSA 201202-08) urging upgrades (to 4.44...
CVE-2011-2940
stunnel 4.40 and 4.41 might allow remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via unspecified vectors...
CVE-2011-2940
stunnel 4.40 and 4.41 might allow remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via unspecified vectors...
Fedora Update for sssd FEDORA-2011-0337
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for sssd FEDORA-2010-13474
The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...