89 matches found
Cisco AnyConnect Secure Mobility Client Identity Spoofing Vulnerability
Cisco AnyConnect Secure Mobility is a secure enterprise mobility solution. An identity spoofing vulnerability exists in the Cisco AnyConnect Secure Mobility Client, which allows remote attackers to spoof forms of authentication and capture credentials via unspecified vectors...
PHP-Fusion 7.02.05 SQL Injection
SQL Injection vulnerability exists in releases since 7.02.01 till 7.02.05 of PHP-Fusion CMS. The vulnerability allows the attacker to authenticate as an arbitrary user and act with its rights which might lead to the code execution. Because of exploitation simplicity, the potential risk is very...
PHP-Fusion CMS 7.02.05 SQL Injection
SQL Injection vulnerability exists in releases since 7.02.01 till 7.02.05 of PHP-Fusion CMS. The vulnerability allows the attacker to authenticate as an arbitrary user and act with its rights which might lead to the code execution. Because of exploitation simplicity, the potential risk is very...
Microsoft Windows Active Directory Single Sign On Authentication Spoofing Vulnerability
Description Microsoft Windows Active Directory Federation Services ADFS is prone to an authentication-spoofing vulnerability affecting single sign-on SSO websites because it fails to properly implement session management. Successful exploits will allow attackers to authenticate to trusted servers...
CVE-2009-0161: Improper Input Validation
The OpenSSL::OCSP module for Ruby in Apple Mac OS X 10.5 before 10.5.7 misinterprets an unspecified invalid response as a successful OCSP certificate validation, which might allow remote attackers to spoof certificate authentication via a revoked certificate...
CVE-2007-5810
Hitachi Web Server versions 01-00 to 03-00-01 (as used by Cosminexus) do not properly validate SSL client certificates, allowing remote attackers to spoof authentication with a forged certificate. The vulnerability is mitigated if SSL client authentication is disabled; no explicit patch/version i...
CVE-2007-5810: Improper Input Validation
Hitachi Web Server 01-00 through 03-00-01, as used by certain Cosminexus products, does not properly validate SSL client certificates, which might allow remote attackers to spoof authentication via a client certificate with a forged signature...