116 matches found
openSUSE Security Update : opera (openSUSE-SU-2010:1094-1)
opera 11.00 fixes among other things several security vulnerabilities. Please refer opera's site for more information: http://www.opera.com/docs/changelogs/unix/1100/ CVE-2010-4508, CVE-2010-4579, CVE-2010-4580, CVE-2010-4581, CVE-2010-4582, CVE-2010-4583, CVE-2010-4584, CVE-2010-4585,...
CVE-2013-4580
GitLab prior to 5.4.2 (Community before 6.2.4, Enterprise before 6.2.1) on a MySQL backend is affected by CVE-2013-4580, enabling remote attackers to impersonate arbitrary users and bypass authentication via unspecified API calls. Primary impact is authentication bypass and account impersonation;...
CVE-2013-4580
GitLab before 5.4.2, Community Edition before 6.2.4, and Enterprise Edition before 6.2.1, when using a MySQL backend, allows remote attackers to impersonate arbitrary users and bypass authentication via unspecified API calls...
CVE-2011-4580
CVE-2011-4580 affects Red Hat JBoss Enterprise Portal Platform prior to 5.2.0. The issue is multiple XSS vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, potentially leading to script execution in the victim’s portal session. The provided...
CVE-2012-4580
Cross-site scripting XSS vulnerability in McAfee Email and Web Security EWS 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway MEG 7.0 before Patch 1, allows remote attackers to inject arbitrary web script or HTML via vectors related to the McAfee Security Appliance Managemen...
CVE-2012-4580
The CVE-2012-4580 issue affects McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1. It is a cross-site scripting (XSS) vulnerability that allows a remote attacker to inject arbitrary web script or HTML via vectors r...
openSUSE Security Update : opera (openSUSE-SU-2010:1094-1)
opera 11.00 fixes among other things several security vulnerabilities. Please refer opera's site for more information: http://www.opera.com/docs/changelogs/unix/1100/ CVE-2010-4508, CVE-2010-4579, CVE-2010-4580, CVE-2010-4581, CVE-2010-4582, CVE-2010-4583, CVE-2010-4584, CVE-2010-4585,...
CVE-2010-4580
Opera before 11.00 is affected by a vulnerability where WAP/WML form fields are not cleared when navigating to a new site, allowing a remote attacker to obtain sensitive information from an input field that shares a name with a previously visited site. The issue is confirmed in CVE-2010-4580 and ...
CVE-2009-4580
CVE-2009-4580 involves multiple cross-site scripting (XSS) vulnerabilities in Hasta Blog 2.3 . The flaws allow remote attackers to inject arbitrary web script or HTML via the id parameter to the pages yorumyaz.php and blog.php . The provided documents describe the affected components and the vuln...
CVE-2008-4580
fencemanual, as used in fence 2.02.00-r1 and possibly cman, allows local users to modify arbitrary files via a symlink attack on the fencemanual.fifo temporary file...
CVE-2008-4580
CVE-2008-4580 affects fence_manual as used in fence 2.02.00-r1 (and possibly cman). The vulnerability arises from a symlink attack on the fence_manual.fifo temporary file, enabling local attackers to modify arbitrary files and potentially overwrite them with root privileges. The connected OpenVAS...
CVE-2008-4580
fencemanual, as used in fence 2.02.00-r1 and possibly cman, allows local users to modify arbitrary files via a symlink attack on the fencemanual.fifo temporary file...
CVE-2007-4580
Buffer underflow in redlight.sys (BufferZone 2.1–2.5) can be triggered by sending a small buffer size value to the FsSetVolumeInformation IOCTL handler with a large FsSetDirectoryInformation subcode, leading to a denial of service and potentially arbitrary code execution on local access. Affected...
CVE-2006-4580
The CVE concerns The Address Book 1.04e: register.php allows remote attackers to bypass the 'Allow User Self-Registration' setting by supplying mode=confirm, enabling creation of arbitrary users. This is a client-side/configuration abuse affecting user provisioning, with the root cause described ...
CVE-2005-4580
CVE-2005-4580 is a cross-site scripting (XSS) vulnerability in Day Communique 4. The issue allows remote attackers to inject arbitrary web script or HTML via the query parameter used in a search. The description does not provide affected versions, root cause details beyond input reflected in the ...