174 matches found
Security fix for the ALT Linux 6 package radvd version 1.8.2-alt1
Oct. 7, 2011 Vladimir V Kamarzin 1.8.2-alt1 - 1.8.2. Security fixes: + CVE-2011-3601 + CVE-2011-3602 + CVE-2011-3603 + CVE-2011-3604 + CVE-2011-3605...
CVE-2010-3602
Cross-site scripting XSS vulnerability in ProfileView.aspx in mojoPortal 2.3.4.3 and 2.3.5.1 allows remote attackers to inject arbitrary web script or HTML via the User ID parameter. NOTE: some of these details are obtained from third party information...
CVE-2010-3602
The vulnerability is an XSS in mojoPortal’s ProfileView.aspx affecting versions 2.3.4.3 and 2.3.5.1, exploitable via the User ID parameter to inject arbitrary script/HTML. The root cause is untrusted input handling in the ProfileView.aspx workflow. Exploit details, exploitability specifics, and a...
CVE-2010-3602
creationtimestamp| type| source ---|---|--- 2010-09-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15018...
openSUSE Security Update : unbound (unbound-2015)
Unbound did not check signatures on NSEC3 records which allowed attackers who could spoof DNS responses to bypass DNSSEC. CVE-2009-3602: CVSS v2 Base Score: 7.5 HIGH AV:N/AC:L/Au:N/C:P/I:P/A:P %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...
[SECURITY] [DSA 1963-1] New unbound packages fix DNSSEC validation
------------------------------------------------------------------------ Debian Security Advisory DSA-1963-1 [email protected] http://www.debian.org/security/ Florian Weimer December 23, 2009 http://www.debian.org/security/faq -...
CVE-2009-3602
Unbound before 1.3.4 does not properly verify signatures for NSEC3 records, which allows remote attackers to cause secure delegations to be downgraded via DNS spoofing or other DNS-related attacks in conjunction with crafted delegation responses...
CVE-2009-3602
Unbound (DNS resolver) versions before 1.3.4 are affected by CVE-2009-3602 due to incorrect verification of NSEC3 signatures, allowing remote attackers to cause secure delegations to be downgraded via DNS spoofing or related DNS attacks when handling crafted responses. Public disclosures and advi...
CVE-2008-3602
The CVE-2008-3602 entry concerns PHP-Ring Webring System (aka uPHP_ring_website) version 0.9.1. A flaw in admin/wr_admin.php allows remote attackers to bypass authentication and obtain administrative access by setting the admin cookie to 1. This is a cookie-based authentication bypass that enable...
CVE-2008-3602
admin/wradmin.php in PHP-Ring Webring System aka uPHPringwebsite 0.9.1 allows remote attackers to bypass authentication and gain administrative access by setting the admin cookie to 1...
CVE-2008-3602
creationtimestamp| type| source ---|---|--- 2008-08-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6225...
CVE-2007-3602
The CVE concerns vtiger CRM’s SOAP webservice prior to 5.0.3. The vulnerability arises because the service does not verify that authenticated accounts are active, allowing remote authenticated users with inactive accounts to access and modify data, as demonstrated by the Thunderbird plugin. Affec...
CVE-2006-3602
CVE-2006-3602 affects FarsiNews 3.0 BETA 1, via directory traversal in jscripts/tiny_mce/tiny_mce_gzip.php. The underlying flaw allows remote attackers to include arbitrary files by supplying .. and a trailing null (%00) byte in the language parameter of the advanced theme, enabling partial integ...