76 matches found
CVE-2013-4762
Puppet Enterprise before 3.0.1 does not sufficiently invalidate a session when a user logs out, which might allow remote attackers to hijack sessions by obtaining an old session ID...
CVE-2013-4762
CVE-2013-4762 affects Puppet Enterprise before 3.0.1: the logout flow does not sufficiently invalidate the user session, which could allow remote attackers to hijack a session by obtaining an old session ID. This root cause is consistently described across multiple sources (NVD, Red Hat, Ubuntu, ...
CVE-2011-4762
CVE-2011-4762 affects Parallels Plesk Small Business Panel 10.2.0. The issue is that it sends incorrect Content-Type headers for certain resources, potentially enabling a remote attacker to exploit an interpretation conflict involving smb/app/top-categories-data/ and other files, with unspecified...
CVE-2010-4762
Cross-site scripting XSS vulnerability in the rich-text-editor component in Open Ticket Request System OTRS before 3.0.0-beta2 allows remote authenticated users to inject arbitrary web script or HTML by using the "source code" feature in the customer interface...
CVE-2010-4762
Cross-site scripting XSS vulnerability in the rich-text-editor component in Open Ticket Request System OTRS before 3.0.0-beta2 allows remote authenticated users to inject arbitrary web script or HTML by using the "source code" feature in the customer interface...
CVE-2010-4762
Cross-site scripting XSS vulnerability in the rich-text-editor component in Open Ticket Request System OTRS before 3.0.0-beta2 allows remote authenticated users to inject arbitrary web script or HTML by using the "source code" feature in the customer interface...
CVE-2010-4762
OTRS
CVE-2010-4762
Cross-site scripting XSS vulnerability in the rich-text-editor component in Open Ticket Request System OTRS before 3.0.0-beta2 allows remote authenticated users to inject arbitrary web script or HTML by using the "source code" feature in the customer interface...
CVE-2009-4762
MoinMoin 1.7.x before 1.7.3 and 1.8.x before 1.8.3 checks parent ACLs in certain inappropriate circumstances during processing of hierarchical ACLs, which allows remote attackers to bypass intended access restrictions by requesting an item, a different vulnerability than CVE-2008-6603...
CVE-2009-4762
MoinMoin 1.7.x before 1.7.3 and 1.8.x before 1.8.3 have an ACL handling flaw where parent ACLs are checked in inappropriate circumstances during processing of hierarchical ACLs, allowing remote attackers to bypass access restrictions by requesting an item. The issue is documented as CVE-2009-4762...
CVE-2008-4762
CVE-2008-4762 concerns the FreeSSHd 1.2.1 SSH server. OpenVAS entries describe a stack-based buffer overflow affecting the SFTP commands “rename” and “realpath.” An attacker with remote access and valid authentication can trigger a denial of service (service crash) and potentially execute arbitra...
CVE-2006-4762
Multiple cross-site scripting XSS vulnerabilities in Ykoon RssReader allow remote attackers to inject arbitrary web script or HTML via a web feed, as demonstrated by certain test cases of the Robert Auger and Caleb Sima RSS and Atom feed reader test suite...
CVE-2006-4762
Technical details about CVE-2006-4762 are not publicly provided in the supplied documents. Monitor for updates from NVD/CVE listings; current records describe XSS in Ykoon RssReader but lack specific affected versions, vectors, root cause, or fixes.
CVE-2005-4762
BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier sometimes stores the boot password in the registry in cleartext, which might allow local users to gain administrative privileges...
CVE-2005-4762
CVE-2005-4762 affects BEA WebLogic Server and WebLogic Express versions 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier. The boot password is stored in the registry in cleartext, which might allow local users to gain administrative privileges. Connected sources corroborate the a...