CVE-2016-4304

CVE-2016-4304 affects the Kaspersky Internet Security KLIF driver. A crafted NtUserCreateWindowEx call can cause an access violation in KLIF, leading to local denial of service. Exploitation can be triggered from user mode and is tied to memory access checks in the driver (TestPtrAndCopy flow). P...

KLA10945 Information leak and denial of service vulnerabilities in Kaspersky products

Multiple serious vulnerabilities have been found in Kaspersky products. Malicious users can exploit these vulnerabilities to cause denial of service or obtain sensitive information. Below is a complete list of vulnerabilities: 1. Multiple information leaks in different IOCTL handlers of Kaspersky...

Gentoo Security Advisory GLSA 201310-21

Gentoo Linux Local Security Checks GLSA 201310-21 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

CVE-2015-4304

CVE-2015-4304 — Cisco Prime Collaboration Assurance : The web framework (Cisco Prime Collaboration Assurance) before 10.5.1.53684-1 contains an authorization/access control flaw in its web framework that allows an authenticated remote attacker to bypass restrictions via a crafted URL. This can en...

CVE-2013-4304

The CVE-2013-4304 issue affects MediaWiki with the CentralAuth extension, where CentraAuthUser is cached in centralauth_User even if the user has not logged in, allowing remote authentication bypass. Affected versions are MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.x before 1.2...

CVE-2013-4304

The CentralAuth extension for MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.x before 1.21.2 caches a valid CentralAuthUser object in the centralauthUser cookie even when a user has not successfully logged in, which allows remote attackers to bypass authentication without a passwo...

CVE-2011-4304

The chat functionality in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote authenticated users to discover the name of any user via a beep operation...

CVE-2011-4304

CVE-2011-4304 affects Moodle chat functionality (versions 2.0.x prior to 2.0.5 and 2.1.x prior to 2.1.2). The cited issue enables remote authenticated users to discover the name of another user via a beep operation. The PT-2012-1852 entry confirms affected versions and provides remediation guidan...

CVE-2010-4304

The CVE affects Cisco Unified Videoconferencing (UVC) System components: 3545, 5110, 5115, 5230; 3527 PRI Gateway; 3522 BRI Gateway; and 3515 MCU. Root cause is predictable session IDs based on time values, enabling remote attackers to hijack sessions through brute-force. No exploit details are p...

openSUSE Security Update : moodle (moodle-1933)

This patch updates Moodle to the latest stable upstream version 1.9.7 fixing multiple security issues: CVE-2009-4297, CVE-2009-4298, CVE-2009-4299, CVE-2009-4300, CVE-2009-4301, CVE-2009-4302, CVE-2009-4303, CVE-2009-4304, CVE-2009-4305, MSA-09-0030 New detection of insecure Flash player plugins...

openSUSE Security Update : moodle (moodle-1933)

This patch updates Moodle to the latest stable upstream version 1.9.7 fixing multiple security issues: CVE-2009-4297, CVE-2009-4298, CVE-2009-4299, CVE-2009-4300, CVE-2009-4301, CVE-2009-4302, CVE-2009-4303, CVE-2009-4304, CVE-2009-4305, MSA-09-0030 New detection of insecure Flash player plugins...

CVE-2009-4304

CVE-2009-4304 affects Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7, where config.php does not use a random password salt, enabling easier brute‑force password guessing. Public documents indicate the fix is to upgrade to a newer Moodle version (e.g., 1.9.7), as referenced by Debian/OpenSUSE/OpenU...

Fedora Core 12 FEDORA-2009-13065 (moodle)

The remote host is missing an update to moodle announced via advisory FEDORA-2009-13065. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

Fedora Core 11 FEDORA-2009-13080 (moodle)

The remote host is missing an update to moodle announced via advisory FEDORA-2009-13080. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

CVE-2008-4304

general/login.php in phpCollab 2.5 rc3 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified input related to the SSLCLIENTCERT environment variable. NOTE: in some environments, SSLCLIENTCERT always has a base64-encoded string value, which may...

CVE-2008-4304

CVE-2008-4304 affects phpCollab 2.5 rc3 and older, where general/login.php can allow remote code execution via shell metacharacters in input related to SSL_CLIENT_CERT. The root cause is improper sanitization of the SSL_CLIENT_CERT usage in a shell command, enabling an attacker to run arbitrary c...

CVE-2008-4304

general/login.php in phpCollab 2.5 rc3 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified input related to the SSLCLIENTCERT environment variable. NOTE: in some environments, SSLCLIENTCERT always has a base64-encoded string value, which may...

Gentoo Security Advisory GLSA 200812-20 (phpcollab)

The remote host is missing updates announced in advisory GLSA 200812-20. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

phpCollab: Multiple vulnerabilities

Background phpCollab is a web-enabled groupware and project management software written in PHP. It uses SQL-based database backends. Description Multiple vulnerabilities have been found in phpCollab: rgod reported that data sent to general/sendpassword.php via the loginForm parameter is not...

FreeBSD Security Advisory FreeBSD-SA-06:18.ppp

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:08.ppp Security Advisory The FreeBSD Project Topic: Buffer overflow in ppp4 Category: core Module: sysnet Announced: 2006-08-23 Credits: Martin Husemann, Pavel...