CVE-2014-6574

Affected software : Oracle Agile PLM for Process, part of Oracle Supply Chain Products Suite 6.1.0.3. Vulnerability description : Unspecified vulnerability related to the Testing Protocol Library could allow remote attackers to compromise integrity. Documents indicate the issue affects the specif...

CVE-2012-6574

The CVE-2012-6574 entry pertains to the Fonecta verify module for Drupal (7.x-1.x) prior to 7.x-1.6, where an XSS vulnerability exists due to unsanitized data retrieved from an untrusted third-party source. The vulnerability affects Fonecta verify 7.x-1.x versions before 7.x-1.6, enabling remote ...

SA-CONTRIB-2012-144 Fonecta verify - Cross Site Scripting (XSS)

Fonecta verify provides an interface to retrieve information from the Finnish Fonecta company information database. The module contains an arbitrary script injection vulnerability XSS due to the fact that it fails to sanitize data retrieved from an untrusted third party source. This vulnerability...

CVE-2008-6574

CVE-2008-6574 affects Avaya Communication Manager SIP Enablement Services (SES) on versions 3.1.x and 4.x. The vulnerability allows remote attackers to gain privileges and cause a denial of service through unspecified vectors related to reuse of valid credentials. The connected documents do not p...

Debian Security Advisory DSA 1467-1 (mantis)

The remote host is missing an update to mantis announced via advisory DSA 1467-1. OpenVAS Vulnerability Test $Id: deb14671.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1467-1 mantis Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian: Security Advisory (DSA-1467-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1467-1 : mantis - several vulnerabilities

Several remote vulnerabilities have been discovered in Mantis, a web-based bug tracking system. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-6574 Custom fields were not appropriately protected by per-item access control, allowing for sensitive da...

[SECURITY] [DSA 1467-1] New mantis packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1467-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst January 19, 2008 http://www.debian.org/security/faq -...

DSA-1467-1 mantis - several vulnerabilities

Bulletin has no description...

CVE-2006-6574

CVE-2006-6574 affects MantisBT. The vulnerability is that Mantis before 1.1.0a2 does not implement per-item access control for Issue History (Bug History), allowing remote attackers to obtain sensitive information by reading the Change column (e.g., in a custom field). This is the exact issue des...