CVE-2012-3385

WordPress before 3.4.1 does not properly restrict access to post contents such as private or draft posts, which allows remote authors or contributors to obtain sensitive information via unknown vectors...

CVE-2012-3385

WordPress before 3.4.1 does not properly restrict access to post contents such as private or draft posts, which allows remote authors or contributors to obtain sensitive information via unknown vectors...

EMC Celerra/VNX/VNXe unauthorized access

NFS access restriction vulnerabilities...

CVE-2012-0215

model/modelstorage.py in the Tryton application framework trytond before 2.4.0 for Python does not properly restrict access to the Many2Many field in the relation model, which allows remote authenticated users to modify the privileges of arbitrary users via a 1 create, 2 write, 3 delete, or 4 cop...

Code injection

model/modelstorage.py in the Tryton application framework trytond before 2.4.0 for Python does not properly restrict access to the Many2Many field in the relation model, which allows remote authenticated users to modify the privileges of arbitrary users via a 1 create, 2 write, 3 delete, or 4 cop...

CVE-2012-0215

CVE-2012-0215 affects the Trytond application framework prior to 2.4.0 (Python). The flaw is an improper restriction on the Many2Many field in the relation model, allowing remote authenticated users to modify privileges of arbitrary users via rpc calls: (1) create, (2) write, (3) delete, or (4) c...

CVE-2012-0215

model/modelstorage.py in the Tryton application framework trytond before 2.4.0 for Python does not properly restrict access to the Many2Many field in the relation model, which allows remote authenticated users to modify the privileges of arbitrary users via a 1 create, 2 write, 3 delete, or 4 cop...

CVE-2011-4300

The filebrowser component in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 does not properly restrict access to category and course data, which allows remote attackers to obtain potentially sensitive information via a request for a file...

CVE-2011-4300

The CVE-2011-4300 issue affects Moodle’s file_browser in versions 2.0.0–2.0.4 and 2.1.0–2.1.1. It fails to properly restrict access to category and course data, enabling remote attackers to obtain potentially sensitive information by requesting a file. The documented remediation is to upgrade to ...

Design/Logic Flaw

The Application Snoop Servlet in IBM WebSphere Application Server 7.0 before 7.0.0.23 does not properly restrict access, which allows remote attackers to obtain sensitive client and request information via a direct request...

CVE-2012-2170

CVE-2012-2170 - IBM WebSphere Application Server (7.x) Affects IBM WebSphere Application Server 7.x prior to 7.0.0.23. The vulnerability stems from the Application Snoop Servlet not properly restricting access, enabling remote attackers to obtain sensitive client and request information via a dir...

CVE-2012-2692

MantisBT versions before 1.2.11 are vulnerable: when form_security_validation is OFF, delete_attachments_threshold permission is not enforced, allowing remote authenticated users with certain privileges to delete arbitrary attachments. Root cause: missing permission check in delete path. Impact: ...

PT-2012-1161 · Gentoo +4 · Gentoo Linux +4

Name of the Vulnerable Software and Affected Versions: OpenLDAP versions prior to 2.4.35 Gentoo Linux affected versions not specified Description: The issue affects the confidentiality, integrity, and availability of protected information. It can be exploited remotely, potentially allowing...

Design/Logic Flaw

fs/proc/base.c in the Linux kernel before 2.6.39.4 does not properly restrict access to /proc//io files, which allows local users to obtain sensitive I/O statistics by polling a file, as demonstrated by discovering the length of another user's password...

CVE-2012-1012

server/serverstubs.c in the kadmin protocol implementation in MIT Kerberos 5 aka krb5 1.10 before 1.10.1 does not properly restrict access to 1 SETSTRING and 2 GETSTRINGS operations, which might allow remote authenticated administrators to modify or read string attributes by leveraging the global...

CVE-2012-1012

server/serverstubs.c in the kadmin protocol implementation in MIT Kerberos 5 aka krb5 1.10 before 1.10.1 does not properly restrict access to 1 SETSTRING and 2 GETSTRINGS operations, which might allow remote authenticated administrators to modify or read string attributes by leveraging the global...

CVE-2012-1012

CVE-2012-1012 affects MIT Kerberos 5 (krb5) 1.10 and earlier with kadmind RPC ACLs that don’t properly restrict access to SET_STRING and GET_STRINGS. This could allow remote authenticated administrators to modify or read string attributes via the global list privilege. The publicly documented fix...

RedHat Update for subversion RHSA-2011:0258-01

Check for the Version of subversion OpenVAS Vulnerability Test RedHat Update for subversion RHSA-2011:0258-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

CVE-2011-5093

CVE-2011-5093 affects Best Practical Solutions RT, 4.x prior to 4.0.6. The DisallowExecuteCode option is not properly implemented, allowing remote authenticated users to bypass access restrictions and execute arbitrary code via a privileged account. This is part of the RT multi-vulnerability set ...

Seagate BlackArmor device static administrator password reset vulnerability

Overview The Seagate BlackArmor network attached storage device contains a static administrator password reset vulnerability. Description The Seagate BlackArmor network attached storage device contain a static php file used to reset the administrator password. A remote unauthenticated attacker wi...