288 matches found
CVE-2013-6492
The Piranha Configuration Tool in Piranha 0.8.6 does not properly restrict access to webpages, which allows remote attackers to bypass authentication and read or modify the LVS configuration via an HTTP POST request...
Authentication flaw
The Piranha Configuration Tool in Piranha 0.8.6 does not properly restrict access to webpages, which allows remote attackers to bypass authentication and read or modify the LVS configuration via an HTTP POST request...
CVE-2013-6492
CVE-2013-6492 affects the Piranha Configuration Tool in Piranha 0.8.6, where access to web pages was not properly restricted, enabling a remote attacker to bypass authentication and read/modify the LVS configuration via an HTTP POST request. The issue, with CVSS v2 base score 5.8 (Medium), is add...
CVE-2013-6492
The Piranha Configuration Tool in Piranha 0.8.6 does not properly restrict access to webpages, which allows remote attackers to bypass authentication and read or modify the LVS configuration via an HTTP POST request...
Scientific Linux Security Update : piranha on SL5.x i386/x86_64 (20140213)
It was discovered that the Piranha Configuration Tool did not properly restrict access to its web pages. A remote attacker able to connect to the Piranha Configuration Tool web server port could use this flaw to read or modify the LVS configuration without providing valid administrative...
piranha: web UI authentication bypass using POST requests
The Piranha Configuration Tool in Piranha 0.8.6 does not properly restrict access to webpages, which allows remote attackers to bypass authentication and read or modify the LVS configuration via an HTTP POST request...
Important: Red Hat Security Advisory: piranha security and bug fix update
An updated piranha package that fixes one security issue and one bug is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...
Fedora Update for lldpad FEDORA-2013-12178
Check for the Version of lldpad OpenVAS Vulnerability Test Fedora Update for lldpad FEDORA-2013-12178 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
[SECURITY] Fedora 19 Update: lldpad-0.9.46-2.fc19
This package contains the Linux user space daemon and configuration tool for Intel LLDP Agent with Enhanced Ethernet support for the Data Center...
CVE-2012-1513
The Web Configuration tool in VMware vCenter Orchestrator vCO 4.0 before Update 4, 4.1 before Update 2, and 4.2 before Update 1 places the vCenter Server password in an HTML document, which allows remote authenticated administrators to obtain sensitive information by reading this document...
CVE-2012-1513
CVE-2012-1513 refers to a vulnerability in the VMware vCenter Orchestrator (vCO) Web Configuration tool where the vCenter Server password is reflected back in an HTML page. This leads to potential information disclosure for remote authenticated administrators who read the page. Affected products/...
CVE-2011-4834
The CVE-2011-4834 issue affects HP Application Lifecycle Management (ALM) 11 on AIX, HP-UX, and Solaris, specifically the GetInstalledPackages function in the configuration tool. It enables local privilege escalation via two attack vectors: (1) a Trojan horse placed in /tmp/tmp.txt as a FIFO, and...
HP Application Lifestyle Management Platform 11 Code Execution
================ Privilege escalation vulnerability in HP Application Lifestyle Management ALM Platform v11 Author: 0a29406d9794e4f9b30b3c5d6702c708 twitter.com/0a29 - 0a29.blogspot.com - GMail 0a2940 ================ Description: ================ The HP Application Lifestyle Management...
CVE-2009-3692
Unspecified vulnerability in the VBoxNetAdpCtl configuration tool in Sun VirtualBox 3.0.x before 3.0.8 on Solaris x86, Linux, and Mac OS X allows local users to gain privileges via unknown vectors...
MDVA-2008:135 : draksnapshot
This update fixes several issues in draksnapshot: The draksnapshot applet received the following fixes: - on desktop startup, it will wait for 30s before checking for available disc so that notification is positioned at the right place, on the applet icon - it prevents crashing if DBus is not...
MDVA-2008:135-1 : draksnapshot
This update fixes several issues in draksnapshot: The draksnapshot applet received the following fixes: - on desktop startup, it will wait for 30s before checking for available disc so that notification is positioned at the right place, on the applet icon - it prevents crashing if DBus is not...
Mandriva Update for draksnapshot MDVA-2008:135-1 (draksnapshot)
Check for the Version of draksnapshot OpenVAS Vulnerability Test Mandriva Update for draksnapshot MDVA-2008:135-1 draksnapshot Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/o...
Fedora Update for util-linux FEDORA-2007-722
Check for the Version of util-linux OpenVAS Vulnerability Test Fedora Update for util-linux FEDORA-2007-722 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...
Fedora Update for util-linux FEDORA-2007-2462
Check for the Version of util-linux OpenVAS Vulnerability Test Fedora Update for util-linux FEDORA-2007-2462 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
F5 BIG-IP管理接口NEW_VALUE参数远程代码注入漏洞
BUGTRAQ ID: 28639 F5 BIG-IP是集成了网络流量管理、应用程序安全管理器、负载均衡等功能的多合一网络设备。 BIG-IP的配置工具实现上存在输入验证漏洞，远程攻击者可能利用此漏洞在系统上执行任意命令。 Web管理接口和CLI所使用的F5 BIG-IP重新配置工具没有正确地过滤某些重新配置请求，如果登录用户拥有Resource Manager或Administrator权限的话，就可以注入任意Perl代码，生成Unix shell命令并以root用户权限执行。 这个漏洞的起因是未经转义NEWVALUE中的单引号便使用了包含有类似于以下内容模板的Perl EP3：...