CVE-2013-4430

CVE-2013-4430 : The XSS vulnerability affects Mahara prior to 1.5.12, 1.6.x prior to 1.6.7, and 1.7.x prior to 1.7.3, allowing remote attackers to inject arbitrary web script or HTML via the Host header to lib/web.php. The connected documents confirm affected versions and the vulnerable vector, b...

GLSA-201405-11 : Bacula: Information disclosure

The remote host is affected by the vulnerability described in GLSA-201405-11 Bacula: Information disclosure Bacula does not properly enforce console access control lists. Impact : A remote authenticated attacker may be able to bypass restrictions to obtain sensitive information. Workaround : Ther...

Fedora 16 : bacula-5.0.3-33.fc16 (2012-14452)

Make dumpresource respect console ACL's Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

Debian Security Advisory DSA 2558-1 (bacula)

The remote host is missing an update to bacula announced via advisory DSA 2558-1. OpenVAS Vulnerability Test $Id: deb25581.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2558-1 bacula Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

CVE-2012-4430

The dumpresource function in dird/dirdconf.c in Bacula before 5.2.11 does not properly enforce ACL rules, which allows remote authenticated users to obtain resource dump information via unspecified vectors...

DEBIAN-CVE-2012-4430

The dumpresource function in dird/dirdconf.c in Bacula before 5.2.11 does not properly enforce ACL rules, which allows remote authenticated users to obtain resource dump information via unspecified vectors...

CVE-2012-4430

CVE-2012-4430 affects Bacula prior to 5.2.11. The vulnerability is caused by the dump_resource path in dird/dird_conf.c where ACL checks are not properly enforced, allowing remote authenticated users to obtain resource dump information via unspecified vectors (information disclosure). Reported in...

[SECURITY] [DSA 2558-1] bacula security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2558-1 [email protected] http://www.debian.org/security/ Raphael Geissert October 08, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2558-1] bacula security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2558-1 [email protected] http://www.debian.org/security/ Raphael Geissert October 08, 2012 http://www.debian.org/security/faq -...

CVE-2010-4430

Technical details are not publicly available in the provided documents for CVE-2010-4430; no specifics on affected product versions, root cause, impact, or fixes are included. Monitor for updates.

CVE-2009-4430

CVE-2009-4430 describes an SQL injection in VirtueMart 1.0: index.php handling the shop.product_details action is vulnerable to crafted product_id values, allowing remote SQL commands. The vulnerability affects VirtueMart 1.0 and is supported by NVD data (CVSSv2 base score 7.5, HIGH). Connected s...

CVE-2009-4430

creationtimestamp| type| source ---|---|--- 2009-12-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10533...

CVE-2008-4430

CVE-2008-4430 is rejected; refer to CVE-2008-3699.

CVE-2007-4430

CVE-2007-4430 affects Cisco IOS 12.0–12.4, where certain regular expressions used by the command “show ip bgp regexp” can trigger a denial-of-service condition. The issue enables context-dependent attackers to cause a device restart and BGP routing-table rebuild, with unauthenticated remote acces...

CVE-2006-4430

Cisco Network Admission Control (NAC) 3.6.4.1 and earlier is affected. The issue allows remote attackers to disrupt installation of the Cisco Clean Access (CCA) Agent and bypass protection mechanisms by either modifying the HTTP User-Agent header or altering TCP/IP stack behavior. The published n...

CVE-2005-4430

CVE-2005-4430 affects LogicBill 1.0 and earlier. The vulnerability is a SQL injection in helpdesk.php exploitable via the parameters __mode and __id, enabling remote execution of arbitrary SQL commands. The connected records corroborate the affected product and vulnerable component, and state the...