137 matches found
Fedora 17 : libsocialweb-0.25.21-1.fc17 (2012-17749)
CVE-2012-4511: libsocialweb untrusted connection to flickr The libsocialweb library is prone to a security vulnerability that allows attackers to perform man-in-the-middle attacks. Remote attackers can exploit this issue to gain access to sensitive information or modify the integrity of user...
Fedora Update for libsocialweb FEDORA-2012-17746
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2012-4511
services/flickr/flickr.c in libsocialweb before 0.25.21 automatically connects to Flickr when no Flickr account is set, which might allow remote attackers to obtain sensitive information via a man-in-the-middle MITM attack...
CVE-2012-4511
CVE-2012-4511 affects libsocialweb prior to 0.25.21, where the library creates an untrusted connection to Flickr when no Flickr account is configured. This behavior can enable a man‑in‑the‑middle (MITM) attacker to access sensitive information or alter data, as described in multiple advisories. F...
CVE-2011-4511
CVE-2011-4511 is a cross-site scripting (XSS) vulnerability in the Siemens SIMATIC WinCC HMI web server. Affected products (per ICS-CERT) include WinCC flexible 2004/2005/2007/2008 (before SP3), WinCC V11 (TIA Portal) before SP2 Update 1, and multiple SIMATIC HMI panels plus WinCC V11 Runtime Adv...
CVE-2010-4511
CVE-2010-4511 affects Six Apart Movable Type. Affected: Movable Type 4.x before 4.35 and 5.x before 5.04. Issue tied to dynamic publishing error messages; root cause not detailed in provided docs. Consequences per NVD: high impact with network attack vector and complete impacts to confidentiality...
CVE-2009-4511
The CVE-2009-4511 issue affects TANDBERG Video Communication Server (VCS). It is a directory traversal flaw in the web management interface (two scripts: helppage.php and user/helppage.php) that an authenticated administrator or lower-privilege user could exploit to read arbitrary files on the ap...
CVE-2009-4511
creationtimestamp| type| source ---|---|--- 2010-04-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33832...
CVE-2008-4511
Todd Woolums ASP News Management, possibly 2.21, stores db/news.mdb under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request...
CVE-2008-4511
CVE-2008-4511 concerns Todd Woolums ASP News Management, version likely 2.21, which stores db/news.mdb under the web root with insufficient access control. The described vulnerability enables remote attackers to obtain sensitive information via a direct request, indicating a confidentiality impac...
CVE-2007-4511
The CVE-2007-4511 issue affects Sun Admin Console in Sun Application Server 9.0_0.1. The root problem is that configuration changes are not persisted, causing the SSL and SSL_MutualAuth ORB listener services to enable all protocols and ciphers after a restart. This can allow remote attackers to b...
Novell GroupWise Messenger fails to properly handle HTTP POST requests.
Overview Novell GroupWise Messenger fails to properly handle HTTP POST requests. This vulnerability may allow a remote attacker to cause a denial of service condition. Description Novell GroupWise Messenger fails to properly handle HTTP POST requests. This vulnerability may be triggered by sendin...
CVE-2006-4511
Novell GroupWise Messenger nmma.exe servers (versions 2.0.2 and 1.0.6) are affected by a DoS vulnerability triggered by a crafted HTTP POST to TCP port 8300 with a modified val parameter. The issue is described as an invalid/null pointer dereference (zero-size strings in blowfish routines) that c...
iDefense Security Advisory 10.02.06: Novell GroupWise Messenger nmma.exe DoS Vulnerability
Novell GroupWise Messenger nmma.exe DoS Vulnerability iDefense Security Advisory 10.02.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 02, 2006 I. BACKGROUND Novell Messenger is a corporate, cross-platform instant messaging product that is based on Novell eDirectory. More information...
CVE-2005-4511
The CVE-2005-4511 is a format-string vulnerability in TN3270 Resource Gateway 1.1.0. The underlying issue is unvalidated format specifiers in syslog function calls, enabling local users to cause a denial of service and potentially execute arbitrary code. The vulnerability is characterized by a lo...
