CVE-2014-7106

The CVE-2014-7106 entry concerns the Orakel-Ball (com.wOrakelball) Android app version 0.2. The vulnerability arises because the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and extract sensitive information via crafted certificate...

[SECURITY] [DSA 2956-1] icinga security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2956-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 11, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2956-1] icinga security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2956-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 11, 2014 http://www.debian.org/security/faq -...

CVE-2013-7106

Multiple stack-based buffer overflows in Icinga before 1.8.5, 1.9 before 1.9.4, and 1.10 before 1.10.2 allow remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via a long string to the 1 displaynavtable, 2 pagelimitselector, 3 printexportlink, or 4...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in cmd.cgi in Icinga 1.8.5, 1.9.4, 1.10.2, and earlier allows remote attackers to hijack the authentication of users for unspecified commands via unspecified vectors, as demonstrated by bypassing authentication requirements for CVE-2013-7106...

CVE-2013-7106

CVE-2013-7106 affects Icinga before 1.8.5, 1.9 before 1.9.4, and 1.10 before 1.10.2, with multiple stack-based buffer overflows in CGI code (display_nav_table, page_limit_selector, print_export_link, page_num_selector in cgi; status_page_num_selector in cgi/status.c; display_command_expansion in ...

CVE-2013-7106

Removed by vendor...

CVE-2008-7106

Sophos PureMessage for Microsoft Exchange 3.0 (before 3.0.2) has a defect where, under heavy system load, it does not create or launch the associated scan engines when both antivirus and anti-spam are enabled. The result is an unspecified impact, with implied remote bypass of scanner protection o...

CVE-2006-7106

The CVE-2006-7106 entry concerns Power Phlogger up to version 2.0.9 where a PHP remote file inclusion flaw exists in config.inc.php3. The vulnerability is triggered by supplying a URL in the rel_path parameter, enabling remote attackers to execute arbitrary PHP code. This is a remote, unauthentic...