Lucene search
+L

164 matches found

Mageia
Mageia
added 2015/07/27 5:18 p.m.42 views

Updated wesnoth packages fix security vulnerability

Toom Lõhmus discovered that the Lua API and preprocessor in the Battle for Wesnoth game up to version 1.12.2 included could lead to client-side authentication information disclosure using maliciously crafted files with the .pdb extension CVE-2015-5069, CVE-2015-5070. This issue has been fixed in...

4.3CVSS5.1AI score0.01715EPSS
SaveExploits0References6
NVD
NVD
added 2015/07/26 6:59 p.m.26 views

CVE-2015-2847

Honeywell Tuxedo Touch before 5.2.19.0VA relies on client-side authentication involving JavaScript, which allows remote attackers to bypass intended access restrictions by removing USERACCT requests from the client-server data stream...

5CVSS6.9AI score0.02373EPSS
SaveExploits0References1
CVE
CVE
added 2015/07/26 6:00 p.m.57 views

CVE-2015-2847

Honeywell Tuxedo Touch Controller (prior to 5.2.19.0_VA) is affected by CVE-2015-2847 due to client-side authentication performed in JavaScript. By intercepting and dropping USERACCT=… requests from the client-server data stream, a remote attacker can bypass authentication and access restricted p...

5CVSS7.2AI score0.02373EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2009/02/13 5:30 p.m.20 views

CVE-2009-0216

GE Fanuc iFIX 5.0 and earlier relies on client-side authentication involving a weakly encrypted local password file, which allows remote attackers to bypass intended access restrictions and start privileged server login sessions by recovering a password or by using a modified program module...

10CVSS7AI score0.02984EPSS
SaveExploits0References5
Rows per page
Query Builder