7026 matches found
CVE-2010-0560
Unspecified vulnerability in the BIOS in Intel Desktop Board DB, DG, DH, DP, and DQ Series allows local administrators to execute arbitrary code in System Management Mode SSM via unknown attack vectors...
CVE-2010-0560
CVE-2010-0560 : Intel Desktop Boards BIOS contains a local privilege-escalation flaw allowing a user with administrative rights to execute arbitrary code in System Management Mode (SSM). Affected are DB, DG, DH, DP, and DQ series boards. The vulnerability is caused by an unspecified issue in the ...
Confluence adminsistrators can still view a restricted page if the type in the URL or click on a link in an email
If I set page viewing restrictions on a wki page to one group of which I am a member, other users, including confluence adminsistrators, cannot see the page when navigating within the application. If they type in the URL of the restricted page or click on a link to the restricted page, then can...
Confluence adminsistrators can still view a restricted page if the type in the URL or click on a link in an email
If I set page viewing restrictions on a wki page to one group of which I am a member, other users, including confluence adminsistrators, cannot see the page when navigating within the application. If they type in the URL of the restricted page or click on a link to the restricted page, then can...
Microsoft Releases Security Advisory 980088
Microsoft has released Security Advisory 980088 to alert users of a vulnerability in Microsoft Internet Explorer. The advisory indicates that exploitation of this vulnerability may allow an attacker to harvest user credentials and other sensitive information by enticing users to visit a malicious...
Microsoft Confirms Unpatched Windows Kernel Flaw
One day after a Google security researcher releases code to expose a flaw that affects every release of the Windows NT kernel — from Windows NT 3.1 1993 up to and including Windows 7 2009 — Microsoft has released a security advisory to acknowledge the issue and warn of the risk of privilege...
Microsoft Releases Cumulative Security Update for Internet Explorer
Microsoft has released Security Bulletin MS10-002 as a Cumulative Security Update for Internet Explorer. This update addresses multiple vulnerabilities that when exploited, may allow an attacker to execute arbitrary code. US-CERT encourages users and administrators to review Microsoft Security...
Information disclosure in FreePBX 2.5.x
Exploit for unknown platform in category web applications ======================================= Information disclosure in FreePBX 2.5.x ======================================= Advisory Name: Information disclosure in FreePBX 2.5.x Internal Cybsec Advisory Id: 2010-0101 Vulnerability Class:...
HP OpenView Network Node Manager nnmRptConfig.exe CGI Template Buffer Overflow
Added: 01/09/2010 CVE: CVE-2009-3848 BID: 37296 OSVDB: 60926 Background HP OpenView Network Node Manager is network availability and performance management software. Problem A stack buffer overflow vulnerability allows remote attackers to execute arbitrary commands by requesting the...
CVE-2009-4563
Cross-site request forgery CSRF vulnerability in zp-core/admin-options.php in Zenphoto 1.2.5 allows remote attackers to hijack the authentication of administrators for requests that change the administrative password via the 0-adminpass and 0-adminpass2 parameters in a saveoptions action...
CVE-2009-4555
Multiple cross-site request forgery CSRF vulnerabilities in AgoraCart 5.2.005 and 5.2.006 and AgoraCart GOLD 5.5.005 allow remote attackers to hijack the authentication of administrators for requests that 1 modify a .htaccess file via an unspecified request to protected/manager.cgi or 2 change th...
CVE-2009-4563
CVE-2009-4563 describes a CSRF vulnerability in Zenphoto 1.2.5, specifically in zp-core/admin-options.php. The issue allows remote attackers to hijack an administrator’s session and trigger password changes via the 0-adminpass and 0-adminpass_2 parameters in a saveoptions action. The connected do...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in admin.php in ScriptsEz Ez Blog 1.0 allow remote attackers to hijack the authentication of administrators for requests that 1 add a blog via the addblog action, 2 approve a comment via the approvecomment action, 3 change administrator...
CVE-2009-4365
Multiple cross-site request forgery CSRF vulnerabilities in admin.php in ScriptsEz Ez Blog 1.0 allow remote attackers to hijack the authentication of administrators for requests that 1 add a blog via the addblog action, 2 approve a comment via the approvecomment action, 3 change administrator...
CVE-2009-4349
The CVE-2009-4349 entry describes a CSRF vulnerability in Link Up Gold 5.0 affecting the file path administration/administrators.php . The underlying issue allows remote attackers to hijack the authentication of administrators to create new administrative accounts. This is the explicit impact sta...
Link Up Gold - Cross-Site Request Forgery (Add Admin)
Link Up Gold - Cross-Site Request Forgery Add Admin /\ == \ /\ \ /\ \ \ \ input type="hi...
CVE-2009-4173
Cross-site request forgery CSRF vulnerability in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allows remote attackers to hijack the authentication of administrators for requests that create new users, including a new administrator, via an adduser action in the editusers module in index.php...
CVE-2009-4173
Cross-site request forgery CSRF vulnerability in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allows remote attackers to hijack the authentication of administrators for requests that create new users, including a new administrator, via an adduser action in the editusers module in index.php...
CVE-2009-4173
CVE-2009-4173 affects CuteNews/CuteNews UTF-8 variants (CuteNews 1.4.6 and UTF-8 CuteNews before 8b). The issue is a cross-site request forgery (CSRF) in the adduser action of the editusers module in index.php, which can allow remote attackers to hijack administrator authentication to create new ...
