CVE-2013-3809

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Audit Log...

CVE-2013-3809

Disclaimer: This data contains information about vulnerable...

PT-2013-4648 · Mysql Server +2 · Mysql Server +2

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.5.31 and earlier MySQL Server versions 5.6.11 and earlier Description: The issue affects the integrity of the system, allowing remote authenticated users to exploit it via unknown vectors related to the Audit Log...

CVE-2013-3809

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Audit Log...

CVE-2013-3809: Undefined Security Weakness

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Audit Log...

MySQL 5.5 < 5.5.32 Multiple Vulnerabilities

The version of MySQL 5.5.x installed on the remote host is prior to 5.5.32. It is, therefore, affected by multiple vulnerabilities in the following components : - Audit Log - Data Manipulation Language - Full Text Search - GIS - Server : Optimizer - Server : Parser - Server : Replication C Tenabl...

MySQL 5.6.x < 5.6.12 Multiple Vulnerabilities

The version of MySQL installed on the remote host is 5.6.x older than 5.6.12. As such, it is reportedly affected by vulnerabilities in the following components : - Audit Log - Data Manipulation Language - Full Text Search - GIS - InnoDB - Locking - MemCached - Server Optimizer - Server Privileges...

Oracle Linux 6 : 389-ds-base (ELSA-2012-0997)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0997 advisory. 1.2.10.2-18 - Resolves: Bug 830001 - unhasheduserpassword visible after changing password -- patch 0020 disallows users' direct modify on...

Dr. Web Control Center Admin UI Remote Script Code Injection

Dr. Web Control Center Admin UI Remote Script Code Injection ============================================================= Affected Products/Versions -------------------------- Product Name: Dr. Web Enterprise Server Version Number: 6.00.3.201111300 Product/Company Information...

CVE-2012-0421

The SUSE Audit Log Keeper daemon before 0.2.1-0.4.6.1 for SUSE Manager and Spacewalk uses world-readable permissions for /etc/auditlog-keeper.conf, which allows local users to obtain passwords by reading this file...

CVE-2012-0421

The SUSE Audit Log Keeper daemon before 0.2.1-0.4.6.1 for SUSE Manager and Spacewalk uses world-readable permissions for /etc/auditlog-keeper.conf, which allows local users to obtain passwords by reading this file...

CVE-2012-0421

The CVE affects the SUSE Audit Log Keeper daemon used with SUSE Manager and Spacewalk. It arises from world-readable permissions on /etc/auditlog-keeper.conf, allowing local users to read passwords stored there, as described for versions before 0.2.1-0.4.6.1. Impact is local confidentiality leaka...

CVE-2012-0421: Exposure of Sensitive Information to an Unauthorized Actor

The SUSE Audit Log Keeper daemon before 0.2.1-0.4.6.1 for SUSE Manager and Spacewalk uses world-readable permissions for /etc/auditlog-keeper.conf, which allows local users to obtain passwords by reading this file...

389-ds-base security update

1.2.10.2-18 - Resolves: Bug 830001 - unhasheduserpassword visible after changing password -- patch 0020 disallows users' direct modify on unhasheduserpassword 1.2.10.2-17 - Resolves: Bug 830001 - unhasheduserpassword visible after changing password -- patch 0019 fixes deref issue. 1.2.10.2-16 -...

Barracuda Cloud CC v3.04.015 - Multiple Vulnerabilities

Document Title: =============== Barracuda Cloud CC v3.04.015 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=441 Release Date: ============= 2012-03-28 Vulnerability Laboratory ID VL-ID: ==================================== 441...

Insider Threats vs Hackers - by Emmett Jorgensen

Insider Threats vs Hackers - by Emmett Jorgensen Emmett Jorgensen has worked in IT and Infosec for over 10 years. He works for Kanguru Solutions www.kanguru.com, a manufacturer of secure portable storage solutions. Article taken from 'The Hacker News' Magazine - October Edition. You can Download...

PT-2011-2782 · Cisco · Ciscoworks Common Services

Name of the Vulnerable Software and Affected Versions: Cisco CiscoWorks Common Services versions 3.3 and earlier Description: A directory traversal issue exists, allowing remote attackers to read arbitrary files by utilizing a .. dot dot in the file parameter of the cwhp/auditLog.do endpoint in t...

CVE-2011-1820

IBM Tivoli Directory Server TDS 5.2 before 5.2.0.5-TIV-ITDS-IF0010, 6.0 before 6.0.0.67 aka 6.0.0.8-TIV-ITDS-IF0009, 6.1 before 6.1.0.40 aka 6.1.0.5-TIV-ITDS-IF0003, 6.2 before 6.2.0.16 aka 6.2.0.3-TIV-ITDS-IF0002, and 6.3 before 6.3.0.3 aka 6.3.0.0-TIV-ITDS-IF0003 does not properly handle the...

CVE-2011-1820

CVE-2011-1820 affects IBM Tivoli Directory Server (TDS) versions listed in the NVD entry (5.2 pre-5.2.0.5…, 6.0 pre-6.0.0.67, 6.1 pre-6.1.0.40, 6.2 pre-6.2.0.16, 6.3 pre-6.3.0.3). The vulnerability stems from improper handling of the ibm-auditAttributesOnGroupEvalOp logging setting for auditing o...

CVE-2011-1820: Exposure of Sensitive Information to an Unauthorized Actor

IBM Tivoli Directory Server TDS 5.2 before 5.2.0.5-TIV-ITDS-IF0010, 6.0 before 6.0.0.67 aka 6.0.0.8-TIV-ITDS-IF0009, 6.1 before 6.1.0.40 aka 6.1.0.5-TIV-ITDS-IF0003, 6.2 before 6.2.0.16 aka 6.2.0.3-TIV-ITDS-IF0002, and 6.3 before 6.3.0.3 aka 6.3.0.0-TIV-ITDS-IF0003 does not properly handle the...