CVE-2015-4426

Pimcore CMS is affected by CVE-2015-4426: SQL injection via the filter parameter in admin/asset/grid-proxy. The issue exists in builds prior to 3473, with a fixed version at build 3473. Root cause is inadequate input filtering for the filter parameter, allowing arbitrary SQL execution. The vulner...

CVE-2015-4425

CVE-2015-4425 affects Pimcore CMS. A directory traversal vulnerability exists in Pimcore builds prior to 3473 where an administrative user with the assets permission can overwrite arbitrary files by supplying a ../ path in the dir parameter to /admin/asset/add-asset-compatibility. Public writeups...

Pimcore CMS Build 3450 - Directory Traversal Vulnerability

Exploit for php platform in category web applications Vulnerability title: Directory Traversal/Configuration Update In Pimcore CMS CVE: CVE-2015-4425 Vendor: Pimcore Product: Pimcore CMS Affected version: Build 3450 Fixed version: Build 3473 Reported by: Josh Foote Details: It is possible for an...

Pimcore CMS Build 3450 Directory Traversal

Vulnerability title: Directory Traversal/Configuration Update In Pimcore CMS CVE: CVE-2015-4425 Vendor: Pimcore Product: Pimcore CMS Affected version: Build 3450 Fixed version: Build 3473 Reported by: Josh Foote Details: It is possible for an administrative user with the 'assets' permission to...

CVE-2014-3473

Cross-site scripting XSS vulnerability in the Orchestration/Stack section in the Horizon Orchestration dashboard in OpenStack Dashboard Horizon before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2, when used with Heat, allows remote Orchestration template owners or catalogs to inject...

Moderate: Red Hat Security Advisory: python-django-horizon security update

Updated python-django-horizon packages that fix multiple security issues are now available for Red Hat Enterprise Linux OpenStack Platform 4.0. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give...

Fedora Update for python-django FEDORA-2014-9791

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 19 : python-django-1.5.9-1.fc19 (2014-9791)

update to 1.5.9 fixing CVE-2014-3473 CVE-2014-3474 CVE-2014-3475 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing addition...

[USN-2323-1] OpenStack Horizon vulnerabilities

========================================================================== Ubuntu Security Notice USN-2323-1 August 21, 2014 horizon vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

Ubuntu: Security Advisory (USN-2323-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for libssh FEDORA-2014-3473

Check for the Version of libssh OpenVAS Vulnerability Test Fedora Update for libssh FEDORA-2014-3473 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

CVE-2013-3473

CVE-2013-3473 affects Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance prior to 9.1.1. The issue is improper session handling: the web framework does not reliably determine an authenticated session, enabling unauthenticated remote attackers to enumerate usernames and password...

CVE-2012-3473

The CVE concerns Ushahidi Platform prior to version 2.5 where the (1) reports API and (2) the admin feature of the comments API do not require authentication, allowing unauthenticated remote manipulation via API functions (generate reports and organize comments). Root cause: endpoints expose thes...

Fedora 13 : libwmf-0.2.8.4-22.fc13 (2010-19022)

Mon Dec 6 2010 Caolan McNamara - 0.2.8.4-22 - Resolves: rhbz660161 security issues Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 14 : libwmf-0.2.8.4-27.fc14 (2010-19033)

Mon Dec 6 2010 Caolan McNamara - 0.2.8.4-27 - Resolves: rhbz660161 security issues Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

CVE-2010-3473

The CVE-2010-3473 vulnerability affects IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-021, described as an open redirect in the Workplace component that can direct users to arbitrary websites and enable phishing via unspecified vectors. The connected documents reiterate the open-red...

IBM DB2 Unspecified Vulnerability (Linux)

The host is installed with IBM DB2 and is prone to unspecified vulnerability. OpenVAS Vulnerability Test $Id: gbibmdb2unspesifiedvulnlin.nasl 7113 2017-09-13 06:03:30Z cfischer $ IBM DB2 Unspecified Vulnerability Linux Authors: Antu Sanadi Copyright: Copyright c 2009 Greenbone Networks GmbH,...

IBM DB2 Unspecified Vulnerability (Windows)

The host is installed with IBM DB2 and is prone to unspecified vulnerability. OpenVAS Vulnerability Test $Id: gbibmdb2unspesifiedvulnwin.nasl 4869 2016-12-29 11:01:45Z teissa $ IBM DB2 Unspecified Vulnerability Windows Authors: Antu Sanadi Copyright: Copyright c 2009 Greenbone Networks GmbH,...

CVE-2009-3473

IBM DB2 9.1 prior to Fix Pack 8 is affected by CVE-2009-3473, where a user can execute SET SESSION AUTHORIZATION without the SETSESSIONUSER privilege. The NVD description notes unspecified impact and remote attack vectors; OpenVAS/Nessus references also describe an unspecified vulnerability in th...

Mandriva Update for tetex MDKSA-2007:164 (tetex)

Check for the Version of tetex OpenVAS Vulnerability Test Mandriva Update for tetex MDKSA-2007:164 tetex Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...