CVE-2015-5505

CVE-2015-5505 relates to Drupal’s contributed HTTP Strict Transport Security (HSTS) module. The module versions 6.x-1.x prior to 6.x-1.1 and 7.x-1.x prior to 7.x-1.2 do not correctly implement the include_subdomains directive, causing the HSTS policy not to be applied to subdomains. This is descr...

HTTP Strict Transport Security - Moderately Critical - Logical Error - SA-CONTRIB-2015-118

The contributed HSTS module makes it easy for site administrators to implement HTTP Strict Transport Security HSTS by setting the Strict-Transport-Security header on each page generated by Drupal. HSTS module provides a configuration UI for the HSTS "include subdomains" directive, which indicates...

CVE-2012-5505

Plone vulnerability CVE-2012-5505 affects Plone before 4.2.3 and 4.3 before beta 1, where atat.py allows remote attackers to read private data structures by requesting a view without a name. This is an information disclosure flaw in the view-dispatch path, enabling leakage of private structures w...

CVE-2012-5505

atat.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to read private data structures via a request for a view without a name...

CVE-2014-5505

CVE-2014-5505 affects SAP Crystal Reports, where a stack-based buffer overflow occurs in the handling of data source strings within RPT files. The root cause is an overflow in processing the DataSource string, enabling remote code execution. The vulnerability is exploitable on vulnerable installa...

CVE-2014-5505

Stack-based buffer overflow in SAP Crystal Reports allows remote attackers to execute arbitrary code via a crafted data source string in an RPT file...

ManageEngine Security Manager Plus <= 5.5 build 5505 Remote SYSTEM/root SQLi

No description provided by source. !/usr/bin/python +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Security Manager Plus = 5.5 build 5505 Remote SYSTEM/root SQLi Win+Linux Date : 18-10-2012 Author ...

CVE-2013-5505

Cisco SA-20131001-CVE-2013-5505 documents an unauthenticated, remote XSS vulnerability in the Cisco Identity Services Engine (ISE) administration page. The issue stems from insufficient input validation of a parameter, allowing an attacker to inject arbitrary web script or HTML via a malicious li...

CVE-2013-1215

The vpnclient program in the Easy VPN component on Cisco Adaptive Security Appliances ASA 5505 devices allows local users to gain privileges via unspecified vectors, aka Bug ID CSCuf85295...

Code injection

The vpnclient program in the Easy VPN component on Cisco Adaptive Security Appliances ASA 5505 devices allows local users to gain privileges via unspecified vectors, aka Bug ID CSCuf85295...

CVE-2013-1215

CVE-2013-1215 concerns Cisco ASA 5505 devices where the vpnclient tool in the Easy VPN component allows an authenticated, local attacker to escalate privileges due to a mis-handling of privilege levels (Bug CSCuf85295). Affected hardware/software is Cisco ASA with the Easy VPN feature; exploitati...

CVE-2013-1215

The vpnclient program in the Easy VPN component on Cisco Adaptive Security Appliances ASA 5505 devices allows local users to gain privileges via unspecified vectors, aka Bug ID CSCuf85295...

PT-2013-2978 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5505 affected versions not specified Description: A privilege elevation issue exists in the Easy VPN component, allowing local users to gain privileges. The vulnerability can be exploited by an...

ManageEngine Security Manager Plus <= 5.5 build 5505 Multiple Vulnerabilities - Active Check

ManageEngine Security Manager Plus is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ManageEngine Security Manager Plus 5.5 build 5505 - Remote SYSTEM SQL Injection (Metasploit)

ManageEngine Security Manager Plus 5.5 build 5505 - Remote SYSTEM SQL Injection Metasploit This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...

Mandriva Update for firefox MDVSA-2008:245 (firefox)

Check for the Version of firefox OpenVAS Vulnerability Test Mandriva Update for firefox MDVSA-2008:245 firefox Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Update for firefox MDVSA-2008:245 (firefox)

Check for the Version of firefox OpenVAS Vulnerability Test Mandriva Update for firefox MDVSA-2008:245 firefox Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Ubuntu: Security Advisory (USN-690-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for epiphany-extensions FEDORA-2008-11511

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for firefox FEDORA-2008-11511

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...