72 matches found
openSUSE Security Update : phpMyAdmin (openSUSE-SU-2014:1069-1)
This phpMyAdmin update addresses several security and non security issues : - This is a phpMyAdmin version upgrade bnc892401: From 4.1.14.3 : - sf4501 security XSS in table browse page CVE-2014-5273 - sf4502 security Self-XSS in enum value editor CVE-2014-5273 - sf4503 security Self-XSSes in...
CVE-2014-4501
Multiple stack-based buffer overflows in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 3.3.0 allow remote pool servers to have unspecified impact via a long URL in a client.reconnect stratum message to the 1 extractsockaddr or 2 parsereconnect functions in util.c...
CVE-2014-4501
The CVE affects multiple mining tools: sgminer , cgminer , and BFGMiner . A vulnerability in the long URL handling within the Stratum client.reconnect path allows multiple stack-based buffer overflows via the (1) extract_sockaddr or (2) parse_reconnect functions in util.c, enabling a remotely sen...
CVE-2013-4501
The default views in the Quiz module 6.x-4.x before 6.x-4.5 for Drupal allows remote attackers to obtain sensitive quiz results via unspecified vectors...
CVE-2013-4501
The CVE-2013-4501 entry concerns the Drupal Quiz module (6.x-4.x) prior to 6.x-4.5. The root cause is improper access control in the quiz results views, allowing remote attackers to obtain sensitive quiz results via unspecified vectors. Affected software is the Quiz module for Drupal 6.x, version...
SA-CONTRIB-2013-083 - Quiz - Access Bypass
Access bypass on deleting quiz results The Quiz module provides tools for authoring and administering quizzes through Drupal. A quiz is given as a series of questions, with only one question appearing per page. Scores are then stored in the database. The module doesn't sufficiently check the dele...
CVE-2013-1176
The DSP card on Cisco TelePresence MCU 4500 and 4501 devices before 4.32.30, TelePresence MCU MSE 8510 devices before 4.32.30, and TelePresence Server before 2.31.55 does not properly validate H.264 data, which allows remote attackers to cause a denial of service device reload via crafted RTP...
PT-2013-2944
Name of the Vulnerable Software and Affected Versions Cisco TelePresence MCU 4500 versions prior to 4.32.30 Cisco TelePresence MCU 4501 versions prior to 4.32.30 Cisco TelePresence MCU MSE 8510 versions prior to 4.32.30 Cisco TelePresence Server versions prior to 2.31.55 Description The issue...
CVE-2013-1176: Improper Input Validation
The DSP card on Cisco TelePresence MCU 4500 and 4501 devices before 4.32.30, TelePresence MCU MSE 8510 devices before 4.32.30, and TelePresence Server before 2.31.55 does not properly validate H.264 data, which allows remote attackers to cause a denial of service device reload via crafted RTP...
[CVE-2012-4501] CloudStack configuration vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 CVE-2012-4501: Apache CloudStack configuration vulnerability Severity: Critical Vendors: The Apache Software Foundation Citrix, Inc. Versions Affected: As no official releases have been made, this does not affect any official Apache CloudStack...
CVE-2010-4501
CVE-2010-4334 affects the IO::Socket::SSL Perl module: version 1.35, when verify_mode is not VERIFY_NONE, can open to VERIFY_NONE without verifying CA files/paths, allowing bypass of certificate restrictions. This vulnerability is referenced across multiple ecosystems (NVD OSV/ENISA/Nessus/OpenVA...
Fedora 11 : zabbix-1.6.8-1.fc11 (2010-0278)
Update to 1.6.8 - Upstream changelog: http://www.zabbix.com/rn1.6.8.php - fixes 2 issues from 551331 CVE-2009-4499 - https://support.zabbix.com/browse/ZBX-1031 CVE-2009-4501 - https://support.zabbix.com/browse/ZBX-1355 Note that Tenable Network Security has extracted the preceding description...
Fedora Update for zabbix FEDORA-2010-0266
The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for zabbix FEDORA-2010-0278
The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2009-4501
The zbxgetnextfield function in libs/zbxcommon/str.c in Zabbix Server before 1.6.8 allows remote attackers to cause a denial of service crash via a request that lacks expected separators, which triggers a NULL pointer dereference, as demonstrated using the Command keyword...
CVE-2009-4501
The CVE-2009-4501 issue affects Zabbix Server
CVE-2009-4501
creationtimestamp| type| source ---|---|--- 2009-12-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10432...
CVE-2008-4501
CVE-2008-4501 affects Rhino Software’s Serv-U FTP Server (versions 7.0.0.1–7.3, including 7.2.0.1). A directory traversal flaw in RNTO, caused by improper input validation, allows an authenticated remote user to overwrite or create arbitrary files on the server. Several advisories describe potent...
CVE-2008-4501
Directory traversal vulnerability in the FTP server in Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote authenticated users to overwrite or create arbitrary files via a ..\ dot dot backslash in the RNTO command...