47 matches found
CVE-2013-5658
CVE-2013-5658 affects AultWare pwStore 2010.8.30.0 with a Cross-Site Scripting (XSS) vulnerability. Reported impact per CVSS: CVSS v2 base 4.3 (Medium) with no confidentiality/availability impact, but partial integrity impact; CVSS v3.1 base 6.1 (Medium) with network attack vector, low attack com...
Carriage Return And Line Feed (CRLF) Injection
Red Hat OpenShift Enterprise is a cloud computing Platform-as-a-Service PaaS solution designed for on-premise or private cloud deployments. Refer to the Red Hat OpenShift Enterprise 1.1 Release Notes for information about the changes in this release. The Release Notes will be available shortly fr...
Open Redirect
Red Hat OpenShift Enterprise is a cloud computing Platform-as-a-Service PaaS solution designed for on-premise or private cloud deployments. Refer to the Red Hat OpenShift Enterprise 1.1 Release Notes for information about the changes in this release. The Release Notes will be available shortly fr...
CVE-2017-5658
The CVE-2017-5658 issue affects Apache Pony Mail (versions 0.7–0.9). The statistics generator could disclose timing information about messages (subjects/text bodies) on private lists because it returned timestamp data without proper authorization checks. The core root cause is improper authorizat...
CVE-2018-5658
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. CSRF exists via wp-admin/admin.php...
CVE-2018-5658
CVE-2018-5658 affects the WordPress Coming Soon plugin (responsive-coming-soon-page) up to version 1.1.18. The issue is a Cross-Site Request Forgery (CSRF) vulnerability via wp-admin/admin.php, as documented by multiple sources. Some connected entries also reference authenticated CSRF and related...
CVE-2015-5658
CVE-2015-5658 is rejected/not used; this CVE ID does not represent an active vulnerability entry.
CVE-2014-5658
The MercadoLibre Android app (pre-3.10.6) was found to not validate SSL certificates, due to a faulty X509TrustManager in the LoopJ Async HTTP client. This allowed MITM attackers to spoof servers and potentially capture credentials and payment data. The issue was fixed in version 3.10.6 by updati...
CVE-2012-5658
OpenShift Origin before 1.1 is vulnerable: when running rhc-chk.rb with -d (debug mode), it writes passwords and other sensitive information in cleartext (e.g., in logs or support channels). The root cause is that the rhc-chk output is not redacted in debug mode. Red Hat’s RHSA-2013-0220 confirms...
Important: Red Hat Security Advisory: Red Hat OpenShift Enterprise 1.1 update
Red Hat OpenShift Enterprise 1.1 is now available. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in t...
PHP < 5.2.7 Multiple Vulnerabilities
PHP is prone to multiple vulnerabilities. Copyright C 2012 NopSec Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or...
Gentoo Security Advisory GLSA 201001-03 (php)
The remote host is missing updates announced in advisory GLSA 201001-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
openSUSE Security Update : apache2-mod_php5 (apache2-mod_php5-441)
This update of php5 fixes a directory traversal bug in ZipArchive CVE-2008-5658 and a buffer overflow in the mstring extension CVE-2008-5557. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...
HP-UX Update for Apache Web Server Suite HPSBUX02431
Check for the Version of Apache Web Server Suite OpenVAS Vulnerability Test HP-UX Update for Apache Web Server Suite HPSBUX02431 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...
Fedora Core 10 FEDORA-2009-3768 (maniadrive)
The remote host is missing an update to maniadrive announced via advisory FEDORA-2009-3768. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...
Fedora Core 9 FEDORA-2009-3848 (maniadrive)
The remote host is missing an update to maniadrive announced via advisory FEDORA-2009-3848. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...
Fedora Core 10 FEDORA-2009-3768 (maniadrive)
The remote host is missing an update to maniadrive announced via advisory FEDORA-2009-3768. OpenVAS Vulnerability Test $Id: fcore20093768.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-3768 maniadrive Authors: Thomas Reinke Copyright: Copyright c...
[SECURITY] [DSA 1789-1] New php5 packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-1789-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst May 04, 2009 http://www.debian.org/security/faq -...
Mandriva Linux Security Advisory : php (MDVSA-2009:045)
A number of vulnerabilities have been found and corrected in PHP : improve mbflfiltconvhtmldecflush error handling in ext/mbstring/libmbfl/filters/mbfilterhtmlent.c CVE-2008-5557. Additionally on Mandriva Linux 2009.0 and up the php-mbstring module is linked against a separate shared libmbfl...