106 matches found
BlackBerry Link Multiple Vulnerabilities (Mac OS X)
The remote host has a version of BlackBerry Link installed prior to version 1.1.1.39. It is, therefore, affected by multiple vulnerabilities : - A WebDAV server that listens on an IPv6 address allows remote access to the host's file system. It may also be possible to utilize this vulnerability vi...
CVE-2013-3694
BlackBerry Link is affected by CVE-2013-3694 and related CVE-2013-6798. The vulnerable components are the WebDAV-enabled remote file-access folders in BlackBerry Link prior to Windows 1.2.1.31 and Mac OS X 1.1.1 build 39. The root cause is improper authentication for remote WebDAV access over IPv...
Oracle Linux 3 / 4 : ruby (ELSA-2006-0604 / ELSA-2006-0729)
Updated ruby packages that fix security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ruby is an interpreted scripting language for object-oriented programming. Users of Ruby should upgrade to these updated packages...
CVE-2012-3694
The CVE-2012-3694 entry affects WebKit in Apple Safari prior to 6.0. The underlying issue is improper handling of drag‑and‑drop events in WebKit, which can allow a user‑assisted remote attacker to obtain sensitive information—specifically full pathnames—via a crafted website. The risk is describe...
CVE-2011-3694
The Server Administration Console in NetSaro Enterprise Messenger Server 2.0 allows remote attackers to read application source code by appending a %00 character to a URL...
CVE-2011-3694
The CVE-2011-3694 entry concerns NetSaro Enterprise Messenger Server 2.0. The vulnerability is in the Server Administration Console, where appending a null byte (%00) to a URL can cause the server to disclose application source code. This is described consistently across the CVE listing and Red H...
Debian DSA-2278-1 : horde3 - several vulnerabilities
It was discovered that horde3, the horde web application framework, is prone to a cross-site scripting attack and a cross-site request forgery. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...
[SECURITY] [DSA 2278-1] horde3 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2278-1 [email protected] http://www.debian.org/security/ Steffen Joeris July 16, 2011 http://www.debian.org/security/faq -...
Fedora Update for horde FEDORA-2010-16525
The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for horde FEDORA-2010-16592
The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2010-3694
Cross-site request forgery CSRF vulnerability in the Horde Application Framework before 3.3.9 allows remote attackers to hijack the authentication of unspecified victims for requests to a preference form...
CVE-2010-3694
Cross-site request forgery CSRF vulnerability in the Horde Application Framework before 3.3.9 allows remote attackers to hijack the authentication of unspecified victims for requests to a preference form...
CVE-2010-3694
CVE-2010-3694 is a CSRF vulnerability in the Horde Application Framework prior to 3.3.9 that can hijack a victim’s authentication for requests to a preference form. Affected product: Horde/ Horde3 (before 3.3.9); root cause: CSRF on the preference form. Impact per CVSS2: partial confidentiality, ...
CVE-2010-3694
Cross-site request forgery CSRF vulnerability in the Horde Application Framework before 3.3.9 allows remote attackers to hijack the authentication of unspecified victims for requests to a preference form...
Fedora 14 : horde-3.3.9-1.fc14 (2010-16525)
Fix 2 security bugs by upgrading to 3.3.9 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVE...
Fedora 13 : horde-3.3.9-1.fc13 (2010-16555)
Fix 2 security bugs by upgrading to 3.3.9 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVE...
Fedora 12 : horde-3.3.9-1.fc12 (2010-16592)
Fix 2 security bugs by upgrading to 3.3.9 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVE...
CVE-2009-3694
Directory traversal vulnerability in config/config.php in ezRecipe-Zee 91, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cfgprePath parameter...
CVE-2009-3694
CVE-2009-3694 affects ezRecipe-Zee 91; a directory traversal flaw in config/config.php allows remote inclusion and execution of local files via a .. in cfg[prePath] when register_globals is enabled. Root cause is improper handling of user-controlled path input enabling local file inclusion. The c...
