4752 matches found
PR10-17 Various XSS and information disclosure flaws within KeyFax response management system
PR10-17: Various XSS and information disclosure flaws within KeyFax response management system http://www.omfax.co.uk Vulnerability found: 25th August 2010 Vendor informed: Vulnerability fixed: Severity: Medium/High Description: KeyFax response management system provides professional management o...
KeyFax Response Management System 3.2.2.6 XSS / Information Disclosure
PR10-17: Various XSS and information disclosure flaws within KeyFax response management system http://www.omfax.co.uk Vulnerability found: 25th August 2010 Vendor informed: Vulnerability fixed: Severity: Medium/High Description: KeyFax response management system provides professional management o...
[RT-SA-2011-004] Client Side Authorization ZyXEL ZyWALL USG Appliances Web Interface
Advisory: Client Side Authorization ZyXEL ZyWALL USG Appliances Web Interface The ZyXEL ZyWALL USG appliances perform parts of the authorization for their management web interface on the client side using JavaScript. By setting the JavaScript variable "isAdmin" to "true", a user with limited acce...
DEBIAN-CVE-2011-1843
Integer overflow in conf.c in Tinyproxy before 1.8.3 might allow remote attackers to bypass intended access restrictions in opportunistic circumstances via a TCP connection, related to improper handling of invalid port numbers...
Hero Wide-WEB Site any download 0DAY vulnerabilities-vulnerability warning-the black bar safety net
Inadvertently see, download player pop-up when the address, http://10.0.2.100/web/html/download.asp?file=../../herotemp/jtplayer.exe Look at the download. asp source code % Dim path path=Request. QueryString"file" If path"" Then On Error Resume Next path=Server. MapPathpath downloadfilepath End I...
[USN-1115-1] language-selector vulnerability
========================================================================== Ubuntu Security Notice USN-1115-1 April 19, 2011 language-selector vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its...
CVE-2011-1500
PreferencesPithosDialog.py in Pithos 0.3.7 does not properly restrict permissions for the .config/pithos.ini file in a user's home directory, which allows local users to obtain Pandora credentials by reading this file...
CVE-2011-1673
BackupConfig.php on the NetGear ProSafe WNAP210 allows remote attackers to obtain the administrator password by reading the configuration file...
Authorization
BackupConfig.php on the NetGear ProSafe WNAP210 allows remote attackers to obtain the administrator password by reading the configuration file...
CVE-2011-1673
BackupConfig.php on the NetGear ProSafe WNAP210 allows remote attackers to obtain the administrator password by reading the configuration file...
CVE-2011-1673
The CVE-2011-1673 entry concerns NetGear ProSafe WNAP210 where the BackupConfig.php component exposes the administrator password by allowing remote reads of the configuration file. This is a remote, unauthenticated exposure affecting the device’s config handling. The connected sources confirm the...
PT-2011-2925 · Apache · Apache Tomcat
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A regression in a previous fix caused security constraints to be ignored under certain conditions. Specifically, this occurred when there was no login...
FreeBSD Ports: awstats
The remote host is missing an update to the system as announced in the referenced advisory. VID ce6ce2f8-34ac-11e0-8103-00215c6a37bb OpenVAS Vulnerability Test $ Description: Auto generated from VID ce6ce2f8-34ac-11e0-8103-00215c6a37bb Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...
Malware Piggybacks On Anti-Phishing Software
Malware authors have discovered a shortcut to create a Trojan horse program: using components from an anti-phishing product from China-based Zhuhai Kingsoft Software. Symantec researcher Poul Jensen wrote about the malware on that company’s Connect blog on Wednesday. The Trojan package...
HP Universal CMDB Server Axis2 default password
Added: 02/22/2011 CVE: CVE-2010-0219 BID: 45625 OSVDB: 70233 Background HP Universal CMDB Server 9.0 is a modular management system that consists of a rich business-service-oriented data model with built-in discovery of configuration items CIs and configuration item dependencies, visualization an...
CVE-2010-2928
The vCenter Tomcat Management Application in VMware vCenter Server 4.1 before Update 1 stores log-on credentials in a configuration file, which allows local users to gain privileges by reading this file...
Design/Logic Flaw
The vCenter Tomcat Management Application in VMware vCenter Server 4.1 before Update 1 stores log-on credentials in a configuration file, which allows local users to gain privileges by reading this file...
CVE-2010-2928
The vCenter Tomcat Management Application in VMware vCenter Server 4.1 before Update 1 stores log-on credentials in a configuration file, which allows local users to gain privileges by reading this file...
Chamilo 1.8.7 / Dokeos 1.8.6 Remote File Disclosure
Exploit for php platform in category web applications Title: Chamilo 1.8.7 / Dokeos 1.8.6 Remote File Disclosure Date: 2011/01/31 Author: beford Software Link: http://www.dokeos.com/download/dokeos-1.8.6.1.zip http://chamilo.googlecode.com/files/chamilo-1.8.7.1-stable.tar.gz Affected products...