FreeBSD : glpi -- remote attack via crafted POST request (7c769c89-53c2-11e1-8e52-00163e22ef61)

The GLPI project reports : The autocompletion functionality in GLPI before 0.80.2 does not blacklist certain username and password fields, which allows remote attackers to obtain sensitive information via a crafted POST request. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

CVE-2011-2720

The autocompletion functionality in GLPI before 0.80.2 does not blacklist certain username and password fields, which allows remote attackers to obtain sensitive information via a crafted POST request...

Design/Logic Flaw

The autocompletion functionality in GLPI before 0.80.2 does not blacklist certain username and password fields, which allows remote attackers to obtain sensitive information via a crafted POST request...

CVE-2011-2720

The autocompletion functionality in GLPI before 0.80.2 does not blacklist certain username and password fields, which allows remote attackers to obtain sensitive information via a crafted POST request...

CVE-2011-2720

The autocompletion functionality in GLPI before 0.80.2 does not blacklist certain username and password fields, which allows remote attackers to obtain sensitive information via a crafted POST request...

CVE-2011-2720

The CVE-2011-2720 entry concerns GLPI pre-0.80.2 where the autocompletion feature does not blacklist certain username/password fields, allowing a remote attacker to extract sensitive information via a crafted POST request. Affected software: GLPI (prior to 0.80.2). Root cause: input fields used f...

Debian Security Advisory DSA 2235-1 (icedove)

The remote host is missing an update to icedove announced via advisory DSA 2235-1. OpenVAS Vulnerability Test $Id: deb22351.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2235-1 icedove Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

glpi -- remote attack via crafted POST request

The GLPI project reports: The autocompletion functionality in GLPI before 0.80.2 does not blacklist certain username and password fields, which allows remote attackers to obtain sensitive information via a crafted POST request...

Debian Security Advisory DSA 2227-1 (iceape)

The remote host is missing an update to iceape announced via advisory DSA 2227-1. OpenVAS Vulnerability Test $Id: deb22271.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2227-1 iceape Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

CVE-2011-0067

Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, does not properly implement autocompletion for forms, which allows remote attackers to read form history entries via a Java applet that spoofs interaction with the autocomplete controls...

CVE-2011-0067

Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, does not properly implement autocompletion for forms, which allows remote attackers to read form history entries via a Java applet that spoofs interaction with the autocomplete controls...

CVE-2011-0067

CVE-2011-0067 affects Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14. It stems from improper autocompletion for forms, allowing a Java applet to spoof interaction with autocomplete controls to read form history entries. Mitigation in the connected documents sho...

CVE-2011-0067

Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, does not properly implement autocompletion for forms, which allows remote attackers to read form history entries via a Java applet that spoofs interaction with the autocomplete controls...

Debian DSA-2227-1 : iceape - several vulnerabilities

Several vulnerabilities have been found in the Iceape internet suite, an unbranded version of SeaMonkey : - CVE-2011-0069 CVE-2011-0070 CVE-2011-0072 CVE-2011-0074 CVE-2011-0075 CVE-2011-0077 CVE-2011-0078 CVE-2011-0080 CVE-2011-0081 'Scoobidiver', Ian Beer Bob Clary, Henri Sivonen, Marco Bonardo...

DSA-2228-1 iceweasel - several

Bulletin has no description...

[SECURITY] [DSA 2227-1] iceape security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2227-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 30, 2011 http://www.debian.org/security/faq -...

Drupal Realname User Reference Information Disclosure

Information disclosure vulnerability in Drupal's Realname User Reference Widget contributed module version 6.x-1.0 Discovered by Martin Barbella Description of Vulnerability: ----------------------------- Drupal is a free software package that allows an individual or a community of users to easil...