50 matches found
Ubuntu 18.04 LTS : Grunt vulnerability (USN-4595-1)
The remote Ubuntu 18.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4595-1 advisory. It was discovered that Grunt did not properly load yaml files. An attacker could possibly use this to execute arbitrary code. CVE-2020-7729 Tenable has extracted...
CVE-2011-4595
Pretty-Link WordPress plugin 1.5.2 has XSS...
CVE-2011-4595
Pretty-Link WordPress plugin 1.5.2 has XSS...
CVE-2011-4595
CVE-2011-4595 concerns the Pretty-Link WordPress plugin. The vulnerability is a cross‑site scripting (XSS) flaw in the plugin’s language around the URL parameter of the pretty-bar.php script, allowing an attacker to inject arbitrary HTML/JavaScript into a user’s browser. Affected product/version:...
Debian DSA-4595-1 : debian-lan-config - security update
It was discovered that debian-lan-config, a FAI config space for the Debian-LAN system, configured too permissive ACLs for the Kerberos admin server, which allowed password changes for other user principals. This update provides a fixed configuration for new deployments, for existing setups, the...
CVE-2017-4595
CVE-2017-4595 entry is rejected/not used per Initial Description.
CVE-2016-4595
CVE-2016-4595 concerns Safari Login AutoFill on OS X El Capitan (prior to 10.11.6). The connected Apple security content confirms the issue affects Safari AutoFill form-field matching, enabling a physically proximate attacker to view passwords during login. The vulnerability is mitigated by the O...
CVE-2014-4595
CVE-2014-4595 involves multiple XSS vulnerabilities in the WordPress WP RESTful plugin (version 0.1 and earlier). The issues are triggered through the parameters (1) oauth_callback to html_api_authorize.php, and (2) oauth_token_temp or (3) oauth_callback_temp to html_api_login.php, allowing remot...
Xerox 4595 Denial of Service Vulnerability
No description provided by source. !/usr/bin/perl Xerox 4595 Remote Dos November 1, 2010 By chap0 - The tongue has the power of life and death www.seek-truth.netwww.corelan.be:8800 Public Advisories http://www.xerox.com/downloads/usa/en/c/certXRX10-004v1.0.pdf...
CVE-2013-4595
The Secure Pages module 6.x-2.x before 6.x-2.0 for Drupal does not properly match URLs, which causes HTTP to be used instead of HTTPS and makes it easier for remote attackers to obtain sensitive information via a crafted web page...
CVE-2013-4595
The CVE-2013-4595 entry concerns the Drupal Secure Pages module (6.x-2.x) prior to 6.x-2.0. A URL matching flaw caused HTTP to be used instead of HTTPS, potentially exposing sensitive data via crafted pages. Remediation is to upgrade to Secure Pages 6.x-2.0. The Drupal core is not affected.
SA-CONTRIB-2013-088 - Secure Pages - Missing Encryption of Sensitive Data
The Secure Pages module manages redirects between HTTP and HTTPS pages. A flaw in the URL path matching could lead some pages and forms to be transmitted via plain HTTP, even if the administrator intended those pages to use HTTPS. This flaw may surface either due to a malicious user enticing a us...
CVE-2012-4595
McAfee Email and Web Security EWS 5.5 through Patch 6 and 5.6 through Patch 3, and McAfee Email Gateway MEG 7.0.0 and 7.0.1, allows remote attackers to bypass authentication and obtain an admin session ID via unspecified vectors...
CVE-2012-4595
The CVE-2012-4595 entry concerns McAfee Email and Web Security (EWS) 5.5–Patch6 and 5.6–Patch3, and McAfee Email Gateway (MEG) 7.0.0–7.0.1, where remote attackers can bypass authentication to obtain an admin session ID. The connected document from Tenable (MCAFEE_WEBSHIELD_AUTH_BYPASS.NASL) descr...
CVE-2011-4595
creationtimestamp| type| source ---|---|--- 2011-12-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36408 2020-01-10 16:32:19+00:00| seen| https://t.me/cibsecurity/9109...
PHP Inventory 1.3.1 Remote (Auth Bypass) SQL Injection Vulnerability
Advisory: PHP Inventory 1.3.1 Remote Auth Bypass SQL Injection Vulnerability Advisory ID: INFOSERVE-ADV2011-08 Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on PHP Inventory 1.3.1 Vendor URL: http://www.phpwares.com/ Vendor Status: fixed CVE-ID:...
PHP Inventory 1.3.1 SQL Injection
Advisory: PHP Inventory 1.3.1 Remote Auth Bypass SQL Injection Vulnerability Advisory ID: INFOSERVE-ADV2011-08 Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on PHP Inventory 1.3.1 Vendor URL: http://www.phpwares.com/ Vendor Status: fixed CVE-ID:...
Unfixed XSS vulnerability at zonasegura.hispavista.com
Security researcher AR3SW0RMED, has submitted on 27/06/2011 a cross-site-scripting XSS vulnerability affecting zonasegura.hispavista.com, which at the time of submission ranked 4595 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/12/2011. It...
CVE-2010-4595
CVE-2010-4595 affects IBM Lotus Mobile Connect, Connection Manager prior to 6.1.4. The http.device.stanza blacklist for HTTP Access Services is disabled, allowing remote attackers to bypass access restrictions with an HTTP request containing a disallowed User-Agent header. No exploitation or miti...