144 matches found
Tryton-server Access Privilege Vulnerability
tryton is a general-purpose application framework, GPL-3 licensed, written in Python, with PostgreSQL as the database engine. A security vulnerability exists on the server side of Tryton, which can be exploited by an authenticated attacker to write arbitrary values to record fields...
Fortinet FortiOS Access Privilege Vulnerability
Fortinet FortiOS is a set of security operating system developed by the U.S. Fiat Fortinet company dedicated to FortiGate network security platform. The system provides users with firewall, antivirus, IPSec/SSL VPN, Web content filtering and anti-spam and other security features. An access...
IBM WebSphere eXtreme Scale Access Privilege Bypass Vulnerability
IBM WebSphere eXtreme Scale is a distributed caching solution. IBM WebSphere Extreme Scale does not invalidate pre-existing session identifiers, allowing remote attackers to exploit the vulnerability to gain access to other users...
MGASA-2014-0387 Updated php-pear-CAS packages fix CVE-2014-4172
Updated php-pear-CAS packages fix security vulnerabilities: A flaw in php-pear-CAS before 1.3.3, utilized by Moodle, has been found which could potentially allow unauthorised access and privilege escalation CVE-2014-4172...
HP Service Manager multiple security vulnerabilities
Crossite scripting, unauthorized access, privilege escalation...
SIRE 2.0 - Arbitrary File Upload Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17431/info SIRE is prone to an arbitrary file-upload vulnerability. An attacker can exploit this vulnerability to upload arbitrary code and execute it in the context of the webserver process. This may facilitate...
Moderate: Red Hat Security Advisory: kernel security and bug fix update
Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat OpenStack 3.0. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...
EUVD-2013-2087
SPIP 3.0.x before 3.0.9, 2.1.x before 2.1.22, and 2.0.x before 2.0.23 allows remote attackers to gain privileges and "take editorial control" via vectors related to ecrire/inc/filtres.php...
Mozilla Thunderbird < 16.0 Multiple Vulnerabilities (Mac OS X)
The installed version of Thunderbird is earlier than 16.0 and thus, is affected by the following vulnerabilities : - Several memory safety bugs exist in the browser engine used in Mozilla-based products that could be exploited to execute arbitrary code. CVE-2012-3983 - '' elements can be abused t...
Firefox < 10.0.8 Multiple Vulnerabilities (Mac OS X)
The installed version of Firefox is earlier than 10.0.8 and thus, is affected by the following vulnerabilities : - Several memory safety bugs exist in the browser engine used in Mozilla-based products that could be exploited to execute arbitrary code. CVE-2012-3983 - Some methods of a feature use...
mysql SECURITY INVOKER functions do not drop privileges
The mysqlchangedb function in MySQL 5.0.x before 5.0.40 and 5.1.x before 5.1.18 does not restore THD::dbaccess privileges when returning from SQL SECURITY INVOKER stored routines, which allows remote authenticated users to gain privileges...
CVE-2006-1656
CVE-2006-1656 affects vserver (util-vserver) 0.30.209, where an invalid/non-numeric suexec userid parameter allows a local attacker to have commands executed as root, enabling local privilege escalation. Exploitation details are not provided in the supplied documents, and no remediation steps are...
DSA-607-1 xfree86 - several
Bulletin has no description...
Jabber Server 2.0 - Multiple Remote Buffer Overflow Vulnerabilities
source: https://www.securityfocus.com/bid/11741/info Multiple remote buffer overflow vulnerabilities affect the Jabber Server. These issues are due to a failure of the application to properly validate the length of user-supplied strings prior to copying them into finite process buffers. An attack...
CVE-2004-1952
SQL injection vulnerability in Advanced Guestbook 2.2 allows remote attackers to execute arbitrary SQL commands and gain privileges via the password...
Default Password (swift) for 'swift' Account
The account 'swift' has the password 'swift'. An attacker may use this to gain further privileges on this system. %NASLMINLEVEL 70300 This script was shamelessly copied by Michel Arboi : GNU Public License account = "swift"; password = "swift"; include'deprecatednasllevel.inc'; include'compat.inc...
CVE-2002-1577
SAP R/3 2.0B to 4.6D installs several clients with default users and passwords, which allows remote attackers to gain privileges via the 1 SAP, 2 SAPCPIC, 3 DDIC, 4 EARLYWATCH, or 5 TMSADM accounts...
Multiple vulnerabilities in atphttpd-0.4b
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 QITEST1 SECURITY ADVISORY 004 Multiple vulnerabilities in atphttpd-0.4b PROGRAM DESCRIPTION atphttpd is a caching, tiny - and buggy - webserver written by Yann Ramin [email protected]. DETAILS There are several remotely exploitable flaws in t...
CVE-2002-0009
showbug.cgi in Bugzilla before 2.14.1 allows a user with "Bugs Access" privileges to see other products that are not accessible to the user, by submitting a bug and reading the resulting Product pulldown menu...
Несанкционированный доступ через xitami (privelege escalation)
Пароль администратора хранится в открытом на чтение файле. Сам веб-сервер работает с привилегиями root. Администратор может изменить расположение Cgi-bin получив доступ с правами root...