CVE-2018-8025

CVE-2018-8025 describes an issue in Apache HBase that affects the optional "Thrift 1" API server when running over HTTP. There is a race-condition which could lead to authenticated sessions being incorrectly applied to users, e.g. one authenticated user would be considered a different user or an...

Race condition

CVE-2018-8025 describes an issue in Apache HBase that affects the optional "Thrift 1" API server when running over HTTP. There is a race-condition which could lead to authenticated sessions being incorrectly applied to users, e.g. one authenticated user would be considered a different user or an...

CVE-2018-8025

CVE-2018-8025 describes a race condition in the Apache HBase optional Thrift 1 API server over HTTP where authenticated sessions could be incorrectly applied to users. The issue affects the Thrift 1 endpoint and can cause session misassignment (e.g., a user becoming another user or an unauthentic...

CVE-2018-8025

CVE-2018-8025 describes an issue in Apache HBase that affects the optional "Thrift 1" API server when running over HTTP. There is a race-condition which could lead to authenticated sessions being incorrectly applied to users, e.g. one authenticated user would be considered a different user or an...

EMC RSA Archer < 6.2.0.5 Multiple Vulnerabilities

The version of EMC RSA Archer running on the remote web server is prior to 6.2.0.5. It is, therefore, affected by multiple vulnerabilities. See advisory for details. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid103818; scriptversion"1.10";...

CVE-2017-8025

RSA Archer GRC Platform prior to 6.2.0.5 is affected by an arbitrary file upload vulnerability. A remote unauthenticated attacker may upload malicious files via attachments to arbitrary paths on the web server. Impact details are provided in the NVD entry (CVSS components present) and related adv...

RSA Archer GRC 6.2.0.5 XSS / File Upload / Privilege Escalation Vulnerabilities

RSA Archer GRC version 6.2.0.5 suffers from cross site scripting, privilege escalation and remote file upload vulnerabilities. ESA-2017-111: RSA Archerr GRC Platform Multiple Vulnerabilities EMC Identifier: ESA-2017-111 CVE Identifier: CVE-2017-8016, CVE-2017-8025, CVE-2017-14369, CVE-2017-14370,...

CVE-2016-8025

SQL injection vulnerability in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows remote authenticated users to obtain product information via a crafted HTTP request parameter...

CVE-2016-8025

CVE-2016-8025 affects McAfee VirusScan Enterprise for Linux (VSEL) 2.0.3 and earlier. The vulnerability is a SQL injection in the web interface exposed via crafting the HTTP request parameter (mon:0), allowing an authenticated remote attacker to manipulate or disclose data stored in the backend S...

CVE-2016-8025

creationtimestamp| type| source ---|---|--- 2016-12-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40911...

Debian: Security Advisory (DSA-3438-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED12 / SLES12 Security Update : xscreensaver (SUSE-SU-2015:2053-2)

The xscreensaver package was updated to fix the following security issue : - CVE-2015-8025: Fixed a crash when hot-swapping monitors while locked bsc952062. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE-SU-2015:2053-1 Security update for xscreensaver

The xscreensaver package was updated to fix the following security issue: - CVE-2015-8025: Fixed a crash when hot-swapping monitors while locked bsc952062...

SUSE-SU-2015:2053-2 Security update for xscreensaver

The xscreensaver package was updated to fix the following security issue: - CVE-2015-8025: Fixed a crash when hot-swapping monitors while locked bsc952062...

SUSE SLED11 / SLES11 Security Update : xscreensaver (SUSE-SU-2015:2054-1)

The xscreensaver package was updated to fix the following security and non security issues : - CVE-2015-8025: Fixed a crash when hot-swapping monitors while locked bsc952062. - Added xscreensaver-insignalhandlerp.patch needed for fix of signal handling. - Refresh xscreensaver-stars.patch. Note th...

SUSE SLED12 / SLES12 Security Update : xscreensaver (SUSE-SU-2015:2053-1)

The xscreensaver package was updated to fix the following security issue : - CVE-2015-8025: Fixed a crash when hot-swapping monitors while locked bsc952062. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

openSUSE Security Update : xscreensaver (openSUSE-2015-783)

Xscreensaver was updated to fix one security issue. The following vulnerability was fixed : - CVE-2015-8025: xscreensaver could be bypassed by disconnecting HDMI cable bsc952062. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

CVE-2015-8025

driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors...

CVE-2015-8025

CVE-2015-8025 affects the xscreensaver component in XScreenSaver prior to 5.34. The issue is a faulty internal consistency check that can let someone with physical access bypass the lock screen by hot-swapping monitors, exploiting a local access scenario. Public advisories describe the impact as ...

CVE-2015-8025

driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors...