10917 matches found
RHEL 5 / 6 : spacewalk-backend (RHSA-2017:1259)
An update for spacewalk-backend is now available for Red Hat Satellite 5.6 and Red Hat Satellite 5.7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...
SUSE-SU-2017:1349-1 Security update for SUSE Manager Server 3.0
The following security issue in spacewalk-backend has been fixed: - Non admin or disabled user cannot make changes to a system anymore using spacewalk-channel. bsc1026633, CVE-2017-7470 Additionally, the following non-security issues have been fixed: rhnlib: - Support all TLS versions in rpclib...
SUSE-SU-2017:1346-1 Security update for SUSE Manager Proxy 3.0
The following security issue in spacewalk-backend has been fixed: - Non admin or disabled user cannot make changes to a system anymore using spacewalk-channel. bsc1026633, CVE-2017-7470 Additionally, the following non-security issues have been fixed: rhnlib: - Support all TLS versions in rpclib...
SUSE-SU-2017:1347-1 Security update for SUSE Manager Client Tools
The following security issue in spacewalk-backend has been fixed: - Non admin or disabled user cannot make changes to a system anymore using spacewalk-channel. bsc1026633, CVE-2017-7470 Additionally, the following non-security issues have been fixed: rhnlib: - Support all TLS versions in rpclib...
SUSE-SU-2017:1352-1 Security update for SUSE Manager Client Tools
The following security issue in spacewalk-backend has been fixed: - Non admin or disabled user cannot make changes to a system anymore using spacewalk-channel. bsc1026633, CVE-2017-7470 Additionally, the following non-security issues have been fixed: cobbler: - Support UEFI boot with cobbler...
PT-2018-8388 · Red Hat +1 · Spacewalk-Channel +1
Name of the Vulnerable Software and Affected Versions: spacewalk-channel affected versions not specified Description: An issue was found in spacewalk-channel where a non-admin user or disabled users can perform administrative tasks due to an incorrect authorization check in the...
Joomla! com_fields component SQL injection vulnerability
Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. A SQL injection vulnerability exists in the comfields component in Joomla! version 3.7.0, which allows remote attackers to obtain sensitive database...
Unauthorized access vulnerability in HP Photosmart 5520 series printers
The HP Photosmart 5520 series is a mid-range inkjet printer. An unauthorized access vulnerability exists in the HP Photosmart 5520 series printer. The vulnerability allows an attacker to enter the backend of the printer and view sensitive information or perform unauthorized operations...
QNAP Photo Station and Music Station Authentication Bypass Vulnerability
QNAP Photo Station, Music Station is an application that displays photos and music stored in all shared folders. An authentication bypass vulnerability exists in QNAP Photo Station version 5.2.4 and Music Station version 4.8.4. The vulnerability allows attackers to bypass authentication to enter...
Arbitrary file deletion vulnerability in SDCMS backend errorcontroller.php page
SDCMS is a website management system managed and developed by Suzhou Smoke & Fire Network Technology Co. SDCMS background errorcontroller.php page exists arbitrary file deletion vulnerability, allowing attackers to exploit the vulnerability to obtain, delete arbitrary files, can lead to system...
CVE-2017-8377
GeniXCMS 1.0.2 has SQL Injection in inc/lib/Control/Backend/menus.control.php via the menuid parameter...
Uber: phone number exposure for riders/drivers given email/uuid
Hi , Summary I have found one more vulnerable endpoint that is leaking user's phone number when i submit UUID in the request. This attack works for both Driver and Rider. Security Impact We can get any Rider or Driver private phone number by knowing his UUID. Reproduction Steps 1 . Enter victim's...
EulerOS 2.0 SP1 : curl (EulerOS-SA-2016-1074)
According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was found that the libcurl library did not prevent TLS session resumption when the client certificate had changed. An attacker could potentiall...
Arbitrary File Traversal Vulnerability in Ampcom Application Gateway
Ambient Application Gateway is an inter-network device developed by Beijing Ambient Technology Co., Ltd. to interconnect one network with another and provide specific applications. An arbitrary file traversal vulnerability exists in the ABT Application Gateway. An attacker can use user-controllab...
Cloudera HUE Session cookies stored in the database
User session cookies are stored in the database. Combined with the vulnerability related to configuration file which is world readable, it is possible to spoof a user across the entire cluster launching jobs and browsing the datalake, without having to crack password hashes. Cookies are stored in...
csrf vulnerability in dedecms v5.7 latest version
Dedecms is an open source PHP open source website management system. A csrf vulnerability exists in the latest version of dedecms v5.7. Allows attackers to exploit the vulnerability to forge form links and trick administrators to click and add backend accounts...
ZYCHCMS V04 Login Authentication Bypass Vulnerability in /admin/login.asp File
ZYCHCMS is an enterprise website management system. A login authentication bypass vulnerability exists in the /admin/login.asp file in ZYCHCMS V04. The vulnerability allows attackers to bypass authentication to enter the backend and obtain sensitive information...
CVE-2016-3109
The backend/Login/load/ script in Shopware before 5.1.5 allows remote attackers to execute arbitrary code...
