100 matches found
CVE-2014-3315
Cross-site scripting XSS vulnerability in viewfilecontents.do in the Dialed Number Analyzer DNA component in Cisco Unified Communications Manager allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCup76308...
CVE-2014-3315
Cisco Unified Communications Manager’s DNA cross-site scripting vulnerability (CVE-2014-3315) affects the viewfilecontents.do page in the DNA component. The root cause is insufficient input validation of a parameter, allowing an unauthenticated, remote attacker to inject arbitrary web script or H...
openSUSE Security Update : libsvn_auth_gnome_keyring-1-0 (openSUSE-SU-2010:1042-1)
when using 'SVNPathAuthz shortcircuit' moddavsvn didn't properly enforce access restrictions CVE-2010-3315. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libsvnauthgnomekeyring-1-0-3423. The...
Oracle Linux 6 : subversion (ELSA-2011-0258)
The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0258 advisory. - add security fixes for CVE-2010-4644, CVE-2010-4539 672678 Tenable has extracted the preceding description block directly from the Oracle Linux...
CVE-2013-3315
CVE-2013-3315 affects TIBCO Silver Mobile 1.1.0 server. Root cause: the server fails to properly enforce administrator privileges before executing commands, enabling authenticated users to gain privileges via unspecified vectors. Impact is privilege escalation that could lead to arbitrary command...
CVE-2012-3315
CVE-2012-3315 affects the IBM Tivoli Federated Identity Manager (TFIM) and TFIM Business Gateway management consoles. Java servlets allow downloading federation metadata and a web plugin configuration template without authentication, exposing sensitive information. Impact is limited to confidenti...
Scientific Linux Security Update : subversion on SL6.x i386/x86_64
An access restriction bypass flaw was found in the moddavsvn module. If the SVNPathAuthz directive was set to 'shortcircuit', certain access rules were not enforced, possibly allowing sensitive repository data to be leaked to remote users. Note that SVNPathAuthz is set to 'On' by default...
RedHat Update for subversion RHSA-2011:0258-01
Check for the Version of subversion OpenVAS Vulnerability Test RedHat Update for subversion RHSA-2011:0258-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
RedHat Update for subversion RHSA-2011:0258-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
DDIVRT-2011-35 Cisco Unified Contact Center Express Directory Traversal [CVE-2011-3315]
Title ----- DDIVRT-2011-35 Cisco Unified Contact Center Express Directory Traversal CVE-2011-3315 Severity -------- High Date Discovered --------------- August 9, 2011 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: r@b13$ Vulnerability Description...
CVE-2011-3315
CVE-2011-3315 describes a directory-traversal vulnerability in Cisco Unified Communications Manager (CUCM) 5.x/6.x up to 6.1(5)SU2, CUCM 7.x up to 7.1(5b)SU2, CUCM 8.x up to 8.0(3), and in Cisco Unified Contact Center Express (UCCX) and Cisco Unified IP IVR up to specified revisions. The flaw all...
CVE-2011-3315
creationtimestamp| type| source ---|---|--- 2011-10-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36256 2025-08-01 21:02:25+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lvekdk772r2a...
openSUSE Security Update : libsvn_auth_gnome_keyring-1-0 (openSUSE-SU-2010:1042-1)
when using 'SVNPathAuthz shortcircuit' moddavsvn didn't properly enforce access restrictions CVE-2010-3315. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libsvnauthgnomekeyring-1-0-3423. The...
openSUSE Security Update : libsvn_auth_gnome_keyring-1-0 (openSUSE-SU-2010:1042-1)
when using 'SVNPathAuthz shortcircuit' moddavsvn didn't properly enforce access restrictions CVE-2010-3315. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libsvnauthgnomekeyring-1-0-3423. The...
RHEL 6 : subversion (RHSA-2011:0258)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0258 advisory. - Subversion: Access restriction bypass by checkout of the root of the repository CVE-2010-3315 - Subversion moddavsvn: DoS crash by...
Moderate: Red Hat Security Advisory: subversion security update
Updated subversion packages that fix three security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
subversion security update
1.6.11-2.2 - add security fixes for CVE-2010-4644, CVE-2010-4539 672678 1.6.11-2.1 - add security fix for CVE-2010-3315 640322...
Ubuntu 6.06 LTS / 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : subversion vulnerabilities (USN-1053-1)
It was discovered that Subversion incorrectly handled certain 'partial access' privileges in rare scenarios. Remote authenticated users could use this flaw to obtain sensitive information revision properties. This issue only applied to Ubuntu 6.06 LTS. CVE-2007-2448 It was discovered that the...
Security fix for the ALT Linux 5 package subversion version 1.6.13-alt0.M50P.1
Nov. 12, 2010 Andrey Cherepanov 1.6.13-alt0.M50P.1 - backport to p5 branch fixed CVE-2010-3315...
Fedora Update for subversion FEDORA-2010-16115
The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...