8231 matches found
Code injection
The Security Questions module for Drupal 6.x-1.x before 6.x-1.1 and 7.x-1.x before 7.x-1.1 does not properly restrict access, which allows remote attackers to edit an arbitrary user's questions and answers via unspecified vectors...
CVE-2012-4475
The Security Questions module for Drupal 6.x-1.x before 6.x-1.1 and 7.x-1.x before 7.x-1.1 does not properly restrict access, which allows remote attackers to edit an arbitrary user's questions and answers via unspecified vectors...
CVE-2012-4471
The vulnerability CVE-2012-4471 affects the Drupal Search Autocomplete module for Drupal 7.x-2.x before 7.x-2.4, where access control to the module’s admin page is insufficiently restricted. This allows remote attackers to disable autocompletion or alter priority order via unspecified vectors. Th...
CVE-2012-4471
The Search Autocomplete module 7.x-2.x before 7.x-2.4 for Drupal does not properly restrict access to the module admin page, which allows remote attackers to disable an autocompletion or change the priority order via unspecified vectors...
CVE-2012-4477: Undefined Security Weakness
Unspecified vulnerability in the Drag & Drop Gallery module 6.x for Drupal allows remote attackers to bypass access restrictions via unknown attack vectors...
PT-2012-5419
Name of the Vulnerable Software and Affected Versions Drupal Search Autocomplete module versions 7.x-2.x before 7.x-2.4 Description The issue allows remote attackers to disable an autocompletion or change the priority order due to improper access restriction to the module admin page...
PT-2012-5423
Name of the Vulnerable Software and Affected Versions Security Questions module for Drupal versions 6.x-1.x before 6.x-1.1 Security Questions module for Drupal versions 7.x-1.x before 7.x-1.1 Description The issue allows remote attackers to edit an arbitrary user's questions and answers due to...
CVE-2012-6038
admin/core/adminfunc.php in razorCMS before 1.2.1 does not properly restrict access to certain administrator directories and files, which allows remote authenticated users to read, edit, rename, move, copy and delete files via the 1 dir parameter in a fileman or 2 filemanview action. NOTE: this...
Input validation
The 1 JNDI service, 2 HA-JNDI service, and 3 HAJNDIFactory invoker servlet in JBoss Enterprise Application Platform 4.3.0 CP10 and 5.1.2, Web Platform 5.1.2, SOA Platform 4.2.0.CP05 and 4.3.0.CP05, Portal Platform 4.3 CP07 and 5.2.x before 5.2.2, and BRMS Platform before 5.3.0 do not properly...
PT-2012-6157 · Sinapsi +1 · Sinapsi Esolar Light Photovoltaic System Monitor +3
Name of the Vulnerable Software and Affected Versions: Sinapsi eSolar Light Photovoltaic System Monitor aka Schneider Electric Ezylog photovoltaic SCADA management server versions prior to 2.0.2870 2.2.12 Sinapsi eSolar versions prior to 2.0.2870 2.2.12 Sinapsi eSolar DUO versions prior to 2.0.28...
CVE-2012-5472: Undefined Security Weakness
lib/formslib.php in Moodle 2.2.x before 2.2.6 and 2.3.x before 2.3.3 allows remote authenticated users to bypass intended access restrictions via a modified value of a frozen form field...
PT-2012-5988
Name of the Vulnerable Software and Affected Versions Moodle versions 2.2.x through 2.2.5 Moodle versions 2.3.x through 2.3.2 Description The issue allows remote authenticated users to bypass intended access restrictions. This is achieved by modifying the value of a frozen form field in...
CVE-2012-4523: Undefined Security Weakness
radsecproxy before 1.6.1 does not properly verify certificates when there are configuration blocks with CA settings that are unrelated to the block being used for verifying the certificate chain, which might allow remote attackers to bypass intended access restrictions and spoof clients...
CVE-2012-4523
Radsecproxy vulnerable to CVE-2012-4523: in 1.6.1 and earlier, certificate verification can bypass restrictions when configuration blocks include CA settings not related to the used verification block, enabling potential client spoofing. Root cause: improper certificate-chain verification across ...
CVE-2011-2486
nspluginwrapper before 1.4.4 does not properly provide access to NPNVprivateModeBool variable settings, which could prevent Firefox plugins from determining if they should run in Private Browsing mode and allow remote attackers to bypass intended access restrictions, as demonstrated using Flash...
CVE-2011-2486: Undefined Security Weakness
nspluginwrapper before 1.4.4 does not properly provide access to NPNVprivateModeBool variable settings, which could prevent Firefox plugins from determining if they should run in Private Browsing mode and allow remote attackers to bypass intended access restrictions, as demonstrated using Flash...
CVE-2012-5885
Removed by vendor...
PT-2012-5517
Name of the Vulnerable Software and Affected Versions EMC RSA Data Protection Manager Appliance versions 2.7.x through 3.x before 3.2.1 Description The issue allows local users to bypass intended access restrictions via a brute-force attack because the software does not properly restrict the numb...
Debian Security Advisory DSA 2569-1 (icedove)
The remote host is missing an update to icedove announced via advisory DSA 2569-1. OpenVAS Vulnerability Test $Id: deb25691.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2569-1 icedove Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...