100 matches found
CVE-2009-4879
CVE-2009-4879 affects the Identity Server in Novell Access Manager prior to version 3.1 SP1. The root cause is an authentication bypass where attackers with disabled Active Directory accounts can authenticate via X.509, bypassing intended access restrictions. The description confirms the impact i...
CVE-2005-4879
The CVE-2005-4879 entry describes XSS vulnerabilities in the PHP script jax_guestbook.php of Jax Guestbook, affecting versions 3.1, 3.31, and 3.50. The weaknesses arise from unsanitized user input in parameters such as gmt_ofs and language (and page per related CVEs), allowing remote attackers to...
CVE-2008-4879
CVE-2008-4879 is an SQL injection in Maran PHP Shop: the vulnerable file is prod.php and the issue arises from the cat parameter, allowing remote attackers to execute arbitrary SQL commands. This is a distinct vector from CVE-2008-4880. Public exploits exist (e.g., Exploit-DB 6953). No remediatio...
CVE-2008-4879
creationtimestamp| type| source ---|---|--- 2008-11-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6953...
Mozilla Firefox, Thunderbird, Seamonkey. Several vulnerabilitys (Windows)
The remote host is probable affected by the vulnerabilities described in CVE-2008-0416, CVE-2007-4879, CVE-2008-1195, CVE-2008-1233, CVE-2008-1234, CVE-2008-1235, CVE-2008-1236, CVE-2008-1237, CVE-2008-1238, CVE-2008-1240, CVE-2008-1241 and more. OpenVAS Vulnerability Test $Id: smbclmozilla.nasl...
Mozilla Firefox, Thunderbird, Seamonkey. Several vulnerabilitys (Linux)
The remote host is probable affected by the vulnerabilitys described in CVE-2008-0416, CVE-2007-4879, CVE-2008-1195, CVE-2008-1233, CVE-2008-1234, CVE-2008-1235, CVE-2008-1236, CVE-2008-1237, CVE-2008-1238, CVE-2008-1240, CVE-2008-1241 and more. Impact Mozilla contributors mozbugra4, Boris Zbarsk...
Design/Logic Flaw
CFNetwork in Safari in Apple Mac OS X before 10.5.3 automatically sends an SSL client certificate in response to a web server's certificate request, which allows remote web sites to obtain sensitive information Subject data from personally identifiable certificates, and use arbitrary certificates...
Debian: Security Advisory (DSA-1534-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE 10 Security Update : mozilla-xulrunner181 (mozilla-xulrunner181-5158)
This update brings the Mozilla XULRunner engine to security update version 1.8.1.13 Following security problems were fixed : - MFSA 2008-19/CVE-2008-1241: XUL popup spoofing variant cross-tab popups - MFSA 2008-18/CVE-2008-1195 and CVE-2008-1240: Java socket connection to any local port via...
Debian: Security Advisory (DSA-1534-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DSA-1532-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-1532-1 : xulrunner - several vulnerabilities
This shares a lot of text with dsa-1534.wml, dsa-1535.wml, dsa-1574.wml Several remote vulnerabilities have been discovered in Xulrunner, a runtime environment for XUL applications. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-4879 Peter Broderse...
CVE-2005-4879
creationtimestamp| type| source ---|---|--- 2008-03-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31580...
[SECURITY] [DSA 1534-1] New iceape packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-1534-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 28, 2008 http://www.debian.org/security/faq -...
Mozilla Foundation Security Advisory 2008-17
Mozilla Foundation Security Advisory 2008-17 Title: Privacy issue with SSL Client Authentication Impact: Low Announced: March 25, 2008 Reporter: Peter Brodersen and Alexander Klink Products: Firefox, SeaMonkey Fixed in: Firefox 2.0.0.13 SeaMonkey 1.1.9 Description Peter Brodersen and Alexander...
SuSE 10 Security Update : MySQL (ZYPP Patch Number 4879)
This update fixes several security vulnerabilities note: not all versions are affected by every bug : - CVE-2007-2583 - CVE-2007-2691 - CVE-2007-2692 - CVE-2007-5925 - CVE-2007-5969 - CVE-2007-6303 - CVE-2007-6304 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this...
CVE-2007-4879
CVE-2007-4879 affects Mozilla Firefox up to 2.0.0.12 (prior to 2.0.0.13) and SeaMonkey up to 1.1.8/1.1.9, allowing automatic TLS client certificate installation with minimal user interaction and automatic certificate presentation when requested. This enables cross-domain user tracking via TLS cli...
CVE-2006-4879
SQL injection vulnerability in profile.php in David Bennett PHP-Post PHPp 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter...
CVE-2006-4879
The CVE-2006-4879 entry documents a SQL injection vulnerability in the PHPp 1.0 (David Bennett PHP-Post) profile.php where the user parameter allows remote arbitrary SQL execution. Affected component: profile.php in PHP-Post (PHPp) 1.0 and earlier. Root cause: unsafely interpolated user input in ...
