100 matches found
Oracle: Security Advisory (ELSA-2011-2033)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle: Security Advisory (ELSA-2011-1465)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CentOS 6 : luci (CESA-2014:1390)
Updated luci packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...
Scientific Linux Security Update : luci on SL6.x i386/x86_64 (20141014)
It was discovered that luci used eval on inputs containing strings from the cluster configuration file when generating its web pages. An attacker with privileges to create or edit the cluster configuration could use this flaw to execute arbitrary code as the luci user on a host running luci...
luci security update
CentOS Errata and Security Advisory CESA-2014:1390 Updated luci packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common...
CVE-2014-3593
Eval injection vulnerability in luci 0.26.0 allows remote authenticated users with certain permissions to execute arbitrary Python code via a crafted cluster configuration...
CVE-2014-3593
The CVE-2014-3593 entry concerns luci, affected up to version 0.26.0, where an eval() on cluster configuration inputs could be exploited by remote authenticated users with certain permissions to execute arbitrary Python code. Multiple trusted sources (Red Hat RHSA-2014:1390, CentOS/OSS advisories...
Moderate: Red Hat Security Advisory: luci security, bug fix, and enhancement update
Updated luci packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...
CVE-2013-3593
CVE-2013-3593 affects Baramundi Management Suite versions 7.5–8.9, where (1) client–server communication and (2) data storage are handled in cleartext. This enables sensitive data to be obtained by sniffing network traffic and may expose credentials stored on deployed systems. Vendor notes indica...
CVE-2011-3593
CVE-2011-3593 : The Linux kernel 2.6.32 on Red Hat Enterprise Linux 6 is affected by a vulnerability in the VLAN patch within net/8021q/vlan_core.c (vlan_hwaccel_do_receive). This enables remote attackers to cause a denial of service (system crash) via priority-tagged VLAN frames. Connected advis...
CVE-2012-3593
CVE-2012-3593: WebKit in Apple Safari prior to version 6.0 contains memory corruption vulnerabilities that could allow remote code execution or memory corruption leading to a crash when visiting a crafted website. The Apple/SECURITY bulletin indicates WebKit memory handling issues were addressed;...
USN-1220-1: Linux kernel (OMAP4) vulnerabilities
Ryan Sweat discovered that the kernel incorrectly handled certain VLAN packets. On some systems, a remote attacker could send specially crafted traffic to crash the system, leading to a denial of service. CVE-2011-1576 Timo Warns discovered that the EFI GUID partition table was not correctly...
CVE-2010-3593
Technical details about CVE-2010-3593 are not publicly available in the provided documents. Monitor for updates from Oracle advisories and CVE/NVD entries for concrete information on impact and fixes.
CVE-2009-3593
Multiple cross-site scripting XSS vulnerabilities in Freelancers 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to placebid.php and 2 jobid parameter to postresume.php...
CVE-2009-3593
CVE-2009-3593 affects Freelancers 1.0 and involves XSS in two parameters: the id parameter to placebid.php and the jobid parameter to post_resume.php. The vulnerability allows remote attackers to inject arbitrary web script or HTML. Reported CVSS v2 base score is 4.3 (MEDIUM) with network attack ...
CVE-2008-3593
CVE-2008-3593 : A directory traversal flaw in SyzygyCMS 0.3’s index.php allows remote attackers to include and execute arbitrary local files via a .. in the page parameter. Root cause: inadequate validation/sanitization of the page parameter enabling local file inclusion. Affected product/version...
CVE-2008-3593
creationtimestamp| type| source ---|---|--- 2008-08-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6200...
CVE-2007-3593
Multiple cross-site scripting XSS vulnerabilities in ManageEngine NetFlow Analyzer 5 allow remote attackers to inject arbitrary web script or HTML via the 1 alpha parameter in a netflow/jspui/applicationList.jsp, the 2 task parameter in b netflow/jspui/appConfig.jsp, the 3 view parameter in c...
CVE-2007-3593
CVE-2007-3593 involves multiple cross-site scripting (XSS) vulnerabilities in ManageEngine NetFlow Analyzer 5 . The flaws allow remote attackers to inject arbitrary web script or HTML through parameters in several JSP pages: (1) alpha in netflow/jspui/applicationList.jsp, (2) task in netflow/jspu...