CVE-2013-7367

CVE-2013-7367 affects SAP Enterprise Portal. The issue involves improper restriction of access to Federation configuration pages, enabling remote attackers to gain privileges via unspecified vectors. The description across multiple sources (NVD/Red Hat/CVE lists) consistently cites elevated privi...

CVE-2013-7367

SAP Enterprise Portal does not properly restrict access to the Federation configuration pages, which allows remote attackers to gain privileges via unspecified vectors...

Jenkins HP Application Automation Tools Plugin Password Encryption Security Weakness

The remote host is using the Jenkins HP Application Automation tools plugin. Nessus was able to remotely access one or more unprotected files in the Jenkins build system and decrypt the HP Application Lifecycle Management password. These passwords are currently encrypted with a known, hard-coded...

CVE-2014-0122

mod/chat/chatajax.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 does not properly check for the mod/chat:chat capability during chat sessions, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstanc...

sp mode mail issue when accessing attachments in incoming mail

Overview sp mode mail provided by NTT DOCOMO contains a function that allows other Android applications to access attachments for incoming emails. This function contains an issue in the restriction of access permissions. Satoru Takekoshi reported this vulnerability to IPA. JPCERT/CC coordinated...

CVE-2013-1398

Removed by vendor...

CVE-2013-6442

The ownerset function in smbcacls.c in smbcacls in Samba 4.0.x before 4.0.16 and 4.1.x before 4.1.6 removes an ACL during use of a --chown or --chgrp option, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging an unintended...

CVE-2014-1285

The CVE-2014-1285 entry describes a vulnerability in Apple iOS prior to 7.1 where Springboard could be manipulated to reveal the home screen by causing an activation crash, allowing physically proximate attackers to bypass access restrictions. Affected product: iOS (Springboard) before 7.1. Root ...

CVE-2013-4191

zip.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 does not properly enforce access restrictions when including content in a zip archive, which allows remote attackers to obtain sensitive information by reading a generated archive...

CVE-2013-4191

zip.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 does not properly enforce access restrictions when including content in a zip archive, which allows remote attackers to obtain sensitive information by reading a generated archive...

CVE-2013-4971

Puppet Enterprise before 3.2.0 does not properly restrict access to node endpoints in the console, which allows remote attackers to obtain sensitive information via unspecified vectors...

Information disclosure

Puppet Enterprise before 3.2.0 does not properly restrict access to node endpoints in the console, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2013-4971

Puppet Enterprise before 3.2.0 does not properly restrict access to node endpoints in the console, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2013-4971

Removed by vendor...

PT-2014-1185 · Oracle +6 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 5.5.35 and earlier Oracle MySQL Server versions 5.6.15 and earlier Description: The issue affects the availability of data in Oracle MySQL Server, related to the Partition component. It allows remote authenticated...

CVE-2011-0528

Puppet 2.6.0 through 2.6.3 does not properly restrict access to node resources, which allows remote authenticated Puppet nodes to read or modify the resources of other nodes via unspecified vectors...

CVE-2011-0528

Puppet 2.6.0 through 2.6.3 does not properly restrict access to node resources, which allows remote authenticated Puppet nodes to read or modify the resources of other nodes via unspecified vectors...

CVE-2011-0528

PVE: CVE-2011-0528 affects Puppet 2.6.0–2.6.3, which does not properly restrict access to node resources. The vulnerability lets remote authenticated Puppet nodes read or modify other nodes’ resources via unspecified vectors. The description confirms the issue but does not provide concrete exploi...

CentOS Update for piranha CESA-2014:0175 centos6

Check for the Version of piranha OpenVAS Vulnerability Test CentOS Update for piranha CESA-2014:0175 centos6 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

UBUNTU-CVE-2013-4737

The CONFIGSTRICTMEMORYRWX implementation for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, does not properly consider certain memory sections, which makes it easier for attackers to bypass intended access restrictions by...