Linksys WRT54GC 1.5.7 (Firmware) 'administration.cgi' Access Validation Vulnerability

The Linksys WRT54GC router is prone to an access-validation vulnerability because of a lack of authentication when users access specific administration applications. Successful attacks will lead to a compromise of the vulnerable device, which may lead to further attacks. Linksys WRT54GC running...

2Wire Routers 'H04_POST' - Access Validation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27516/info Multiple 2Wire routers are prone to an access-validation vulnerability because they fail to adequately authenticate users before performing certain actions. Unauthenticated attackers can leverage this issue to...

Macromedia ColdFusion MX 6.1 Template Handling Privilege Escalation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11316/info Reportedly Macromedia ColdFusion MX is affected by privilege escalation vulnerability when handling templates. This issue is due to an access validation error that allows a user to perform actions with...

Symantec Brightmail Anti-spam 6.0 Unauthorized Message Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10657/info Symantec Brightmail anti-spam is reported prone to an unauthorized message disclosure vulnerability. This issue exists in the Brightmail anti-spam control center. Due to improper access validation a remote...

TEMENOS T24 R07.03 Authentication Bypass

TEMENOS T24 R07.03 authentication bypass Class: Access Validation Error Remote: Yes Local: No Published: 26/06/2012 Credit: Raymond Rizk of Dionach Limited [email protected] Vulnerable: TEMENOS T24 R07.03 TEMENOS T24 is prone to an authentication bypass vulnerability as it fails to properly enfor...

Joomla Simple File Upload Module Remote Code Execution Vulnerability

This host is running Joomla Simple File Upload Module and is prone to remote code execution vulnerability. OpenVAS Vulnerability Test $Id: gbjoomlasimplefileuploadcodeexecvuln.nasl 5841 2017-04-03 12:46:41Z cfi $ Joomla Simple File Upload Module Remote Code Execution Vulnerability Authors: Madhur...

A species vulnerability--IIS 5.1 Directory Authentication Bypass-vulnerability warning-the black bar safety net

Bugtraq ID: 4 1 3 1 4 CVE ID: CVE-2 0 1 0-2 7 3 1 CNCVE ID: CNCVE-2 0 1 0 2 7 3 1 Vulnerability published:2010-07-01 Vulnerability update time:2010-09-14 Vulnerability causes: access validation error Danger level: low Affected systems: Microsoft IIS 5.1 Hazard: a remote attacker can exploit the...

IBM Db2 Multiple Security Bypass Vulnerabilities (May 2011)

IBM Db2 is prone to multiple security bypass vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ibm:db2";...

IBM DB2 Multiple Security Bypass Vulnerabilities (May-11)

The host is running IBM DB2 and is prone to multiple security bypass vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmdb2multsecbypassvuln.nasl 7585 2017-10-26 15:03:01Z cfischer $ IBM DB2 Multiple Security Bypass Vulnerabilities May-11 Authors: Antu Sanadi Copyright: Copyright c 2011...

Sawmill Enterprise < 8.1.7.3 - Multiple Vulnerabilities

SEC Consult Security Advisory ======================================================================= title: Multiple critical vulnerabilities product: Sawmill - Universal Log File Analysis vulnerable version: Sawmill Enterprise v8.1.7.3 fixed version: v8.1.7.3 impact: critical homepage:...

Oracle Database Server ctxsys.driload Access Validation (CVE-2004-0637)

Stored procedures are a powerful feature of an Oracle database server. They are essentially a set of SQL statements that are stored server-side, which are called by name and optionally passed a set of parameters. Stored procedures provide improved performance, because only data specific to the...

2WIRE Routers - CD35_SETUP_01 Access Validation

2WIRE Routers - CD35SETUP01 Access Validation source: https://www.securityfocus.com/bid/36031/info Multiple 2Wire routers are prone to an access-validation vulnerability because they fail to adequately authenticate users before performing certain actions. Unauthenticated attackers can leverage th...

2WIRE Routers - 'CD35_SETUP_01' Access Validation

source: https://www.securityfocus.com/bid/36031/info Multiple 2Wire routers are prone to an access-validation vulnerability because they fail to adequately authenticate users before performing certain actions. Unauthenticated attackers can leverage this issue to change the router's administrative...

Linksys WRT54GC 1.5.7 Firmware - administration.cgi Access Validation

Linksys WRT54GC 1.5.7 Firmware - administration.cgi Access Validation source: https://www.securityfocus.com/bid/34616/info The Linksys WRT54GC router is prone to an access-validation vulnerability because of a lack of authentication when users access specific administration applications. Successf...

Linksys WRT54GC 1.5.7 Firmware - 'administration.cgi' Access Validation

source: https://www.securityfocus.com/bid/34616/info The Linksys WRT54GC router is prone to an access-validation vulnerability because of a lack of authentication when users access specific administration applications. Successful attacks will lead to a compromise of the vulnerable device, which m...

RazorCMS 0.3RC2 - Multiple Vulnerabilities

RazorCMS 0.3RC2 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/34566/info razorCMS is prone to a local information-disclosure vulnerability, a local access-validation vulnerability, a security-bypass vulnerability, and multiple cross-site-scripting vulnerabilities. Attackers...

RazorCMS 0.3RC2 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/34566/info razorCMS is prone to a local information-disclosure vulnerability, a local access-validation vulnerability, a security-bypass vulnerability, and multiple cross-site-scripting vulnerabilities. Attackers can exploit these issues to gain access to...

Microsoft Windows WINS Server WPAD and ISATAP Access Validation Vulnerability

Description The Microsoft Windows WINS Server is prone to an access-validation vulnerability because the software fails to properly restrict access when defining WPAD Web Proxy Autodiscovery Protocol and ISATAP Intra-Site Automatic Tunnel Addressing Protocol entries. An authenticated attacker may...

Microsoft Windows DNS Server WPAD Access Validation Vulnerability

Description The Microsoft Windows DNS Server is prone to an access-validation vulnerability because the software fails to properly restrict access when defining WPAD Web Proxy Autodiscovery Protocol entries. An authenticated attacker may exploit this issue to create a WPAD DNS entry. This may aid...

[SECURITY] [DSA 1697-1] New iceape packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1697-1 [email protected] http://www.debian.org/security/ Steffen Joeris January 07, 2009 http://www.debian.org/security/faq -...