7228 matches found
CVE-2014-1960
The Solution Manager in SAP NetWeaver does not properly restrict access, which allows remote attackers to obtain sensitive information via unspecified vectors...
Information disclosure
The Solution Manager in SAP NetWeaver does not properly restrict access, which allows remote attackers to obtain sensitive information via unspecified vectors...
CVE-2014-1960
The Solution Manager in SAP NetWeaver does not properly restrict access, which allows remote attackers to obtain sensitive information via unspecified vectors...
CVE-2014-1960
CVE-2014-1960 affects SAP NetWeaver Solution Manager. The root cause is insufficient access restriction that allows remote information disclosure via unspecified vectors. Documented impact is partial confidentiality (CVSS2 base 5.0). Exploitation details are not provided in the sources. Remediati...
piranha security update
CentOS Errata and Security Advisory CESA-2014:0175 An updated piranha package that fixes one security issue and one bug is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Important security impact. A Common Vulnerability Scoring...
Important: Red Hat Security Advisory: piranha security update
An updated piranha package that fixes one security issue is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
Design/Logic Flaw
status.cgi in Nagios 4.0 before 4.0 beta4 and 3.x before 3.5.1 does not properly restrict access to certain users that are a contact for a service, which allows remote authenticated users to obtain sensitive information about hostnames via the servicegroup 1 overview, 2 summary, or 3 grid style i...
CVE-2014-1489
Mozilla Firefox before 27.0 does not properly restrict access to about:home buttons by script on other pages, which allows user-assisted remote attackers to cause a denial of service session restore via a crafted web site...
CVE-2014-1489
Technical details for CVE-2014-1489 are not publicly available in the provided documents. Monitor for updates from vendors and vulnerability feeds.
CVE-2014-1489
Mozilla Firefox before 27.0 does not properly restrict access to about:home buttons by script on other pages, which allows user-assisted remote attackers to cause a denial of service session restore via a crafted web site...
PT-2014-2131 · Red Hat · Spacewalk
Name of the Vulnerable Software and Affected Versions: Spacewalk version 1.6 Description: The issue allows remote attackers to inject arbitrary web script or HTML via the "Filter by Synopsis" field and other unspecified filter forms, potentially leading to cross-site scripting XSS attacks...
Mediatrix 4402 digital gateway web interface contains a cross-site scripting (XSS) vulnerability
Overview Mediatrix's web management interface for the 4402 digital gateway device with firmware version Dgw 1.1.13.186, and possibly earlier versions, contains a cross-site scripting XSS vulnerability. CWE-79 Description CWE-79: Improper Neutralization of Input During Web Page Generation...
CVE-2013-7301
Cantata before 1.2.2 does not restrict access to files in the play queue, which allows remote attackers to obtain sensitive information by reading the songs in the queue...
CVE-2013-7301
Cantata before 1.2.2 does not restrict access to files in the play queue, which allows remote attackers to obtain sensitive information by reading the songs in the queue...
CVE-2013-7301
Cantata vulnerable before 1.2.2: a flaw in the play queue allows remote attackers to read files/ songs in the queue due to lack of access restriction. Affected software: Cantata prior to version 1.2.2. Root cause: insufficient access controls on queue contents. Impact: potential information discl...
CVE-2013-4661
CiviCRM 2.0.0 through 4.2.9 and 4.3.0 through 4.3.3 does not properly enforce role-based access control RBAC restrictions for default custom searches, which allows remote authenticated users with the "access CiviCRM" permission to bypass intended access restrictions, as demonstrated by accessing...
Design/Logic Flaw
The dophysdevop function in Xen 4.1.5, 4.1.6.1, 4.2.2 through 4.2.3, and 4.3.x does not properly restrict access to the 1 PHYSDEVOPpreparemsix and 2 PHYSDEVOPreleasemsix operations, which allows local PV guests to cause a denial of service host or guest malfunction or possibly gain privileges via...
CVE-2014-1666
CVE-2014-1666 affects Xen hypervisor less-restricted access in do_physdev_op for PHYSDEVOP_prepare_msix and PHYSDEVOP_release_msix on Xen versions 4.1.5, 4.1.6.1, 4.2.2–4.2.3, and 4.3.x. The underlying issue is improper access restriction, enabling local PV guests to cause host/guest malfunction ...
CVE-2014-1666
The dophysdevop function in Xen 4.1.5, 4.1.6.1, 4.2.2 through 4.2.3, and 4.3.x does not properly restrict access to the 1 PHYSDEVOPpreparemsix and 2 PHYSDEVOPreleasemsix operations, which allows local PV guests to cause a denial of service host or guest malfunction or possibly gain privileges via...