98 matches found
CVE-2013-4279
imapsync 1.564 and earlier performs a release check by default, which sends sensitive information imapsync, operating system, and Perl version to the developer's site...
CVE-2013-4279
The CVE-2013-4279 entry concerns imapsync where the release check runs by default and transmits sensitive information (imapsync version, OS, and Perl version) to the developer site. Connected advisories confirm that the vulnerability affects imapsync up to version 1.564 and earlier, with remediat...
Mandriva Linux Security Advisory : imapsync (MDVSA-2014:060)
Updated imapsync package fixes security vulnerabilities : Imapsync, by default, runs a release check when executed, which causes imapsync to connect to http://imapsync.lamiral.info and send information about the version of imapsync, the operating system and perl CVE-2013-4279. The imapsync packag...
Fedora 19 : imapsync-1.584-2.fc19 (2014-3491)
Disable releasecheck - CVE-2013-4279 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 703...
CVE-2011-4279
Summary (CVE-2011-4279) : Moodle 2.0.x before 2.0.2 does not apply the forceloginforprofiles setting to course-profiles access control, which can allow remote attackers to access potentially sensitive information via search-engine-enabled vectors (e.g., Google, Yahoo, Yandex). Affected product/ve...
CVE-2012-4279
creationtimestamp| type| source ---|---|--- 2012-05-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18874...
CVE-2010-4279
Pandora FMS 3.1 and earlier are affected by an authentication bypass (CVE-2010-4279). The default config leaves loginhash_pwd empty, allowing remote bypass by sending a request to index.php with loginhash_user=admin and loginhash_data containing the MD5 of “admin”; this bypass gives full/complete...
CVE-2010-4279
The default configuration of Pandora FMS 3.1 and earlier specifies an empty string for the loginhashpwd field, which allows remote attackers to bypass authentication by sending a request to index.php with "admin" in the loginhashuser parameter, in conjunction with the md5 hash of "admin" in the...
Pandora FMS 3.1 - Authentication Bypass
Pandora FMS 3.1 - Authentication Bypass + Introduction Pandora FMS for Pandora Flexible Monitoring System is a software solution for monitoring computer networks. It allows monitoring in a visual way the status and performance of several parameters from different operating systems, servers,...
VMSA-2008-0016 VMware Hosted products, VirtualCenter Update 3 and patches for ESX and ESXi resolve multiple security issues
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------ VMware Security Advisory Advisory ID: VMSA-2008-0016 Synopsis: VMware Hosted products, VirtualCenter Update 3 and patches for ESX and ESXi resolve multiple security issues...
VMware Hosted products, VirtualCenter Update 3 and patches for ESX and ESXi resolve multiple security issues
a. Privilege escalation on 64-bit guest operating systemsVMware products emulate hardware functions, like CPU, Memory, and IO.A flaw in VMware's CPU hardware emulation could allow the virtual CPU to jump to an incorrect memory address. Exploitation of this issue on the guest operating system does...
VMSA-2008-0016:VMware Hosted products, VirtualCenter Update 3 and patches for ESX and ESXi resolve multiple security issues
VMSA-2008-0016.3 VMware Hosted products, VirtualCenter Update 3 and patches for ESX and ESXi resolve multiple security issues VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2008-0016.3 VMware Security AdvisorySynopsis: VMware Hosted products, VirtualCenter Update 3 and patches...
Gentoo Security Advisory GLSA 200510-14 (Perl Qt-UnixODBC CMake)
The remote host is missing updates announced in advisory GLSA 200510-14. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Design/Logic Flaw
Multiple PHP remote file inclusion vulnerabilities in FrontAccounting FA 1.12 allow remote attackers to execute arbitrary PHP code via a URL in the pathtoroot parameter to 1 access/logout.php or certain PHP scripts under 2 admin/, 3 dimensions/, 4 gl/, 5 inventory/, 6 manufacturing/, 7 purchasing...
CVE-2006-4279
XennoBB 2.2.1 (and earlier) contains an SQL injection in topic_post.php that can be exploited via the icon_topic parameter, enabling remote arbitrary SQL execution. The issue is documented in CVE-2006-4279 with CVSS v2 base score 7.5 ( HIGH ), reflecting NETWORK attack vector, LOW access complexi...
CVE-2005-4279
CVE-2005-4279 describes a local untrusted search path vulnerability in Qt-UnixODBC before 3.3.4-r1 on Gentoo Linux, enabling a local user in the portage group to gain privileges via a malicious shared object in the Portage temporary build directory (RUNPATH). Connected sources confirm the affecte...
