Thru Managed File Transfer Portal 9.0.2 - SQL Injection

Thru Managed File Transfer Portal 9.0.2 - SQL Injection -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-056 Product: Thru Managed File Transfer Portal Manufacturer: Thru Affected Versions: 9.0.2 Tested Versions: 9.0.2 Vulnerability Type: SQL Injection CWE-89 Risk Level: Hig...

Thru Managed File Transfer Portal 9.0.2 SQL Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-056 Product: Thru Managed File Transfer Portal Manufacturer: Thru Affected Versions: 9.0.2 Tested Versions: 9.0.2 Vulnerability Type: SQL Injection CWE-89 Risk Level: High Solution Status: Open Manufacturer Notification:...

Android Information Disclosure

The vulnerability of the Bluetooth component in the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a perpetrator to obtain confidential information about contacts by establishing a connection...

CVE-2015-5923

Apple iOS before 9.0.2 does not properly restrict the options available on the lock screen, which allows physically proximate attackers to read contact data or view photos via unspecified vectors...

Design/Logic Flaw

Apple iOS before 9.0.2 does not properly restrict the options available on the lock screen, which allows physically proximate attackers to read contact data or view photos via unspecified vectors...

CVE-2015-5923

Apple iOS before 9.0.2 does not properly restrict the options available on the lock screen, which allows physically proximate attackers to read contact data or view photos via unspecified vectors...

UBUNTU-CVE-2015-2266

message/index.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 does not consider the moodle/site:readallmessages capability before accessing arbitrary conversations, which allows remote authenticated users to obtain sensitive personal-contact and...

PT-2015-1587

Name of the Vulnerable Software and Affected Versions Moodle versions 2.5.9 and earlier Moodle versions 2.6.x before 2.6.9 Moodle versions 2.7.x before 2.7.6 Moodle versions 2.8.x before 2.8.4 Description The issue is related to the lack of protection for service data in the message/index.php...

Android 2.3 信息泄露漏洞

CVE-2011-4276 Android是Google通过Open Handset Alliance发起的项目，用于为移动设备提供完整的软件集，包括操作系统、中间件等。 Android 2.3.6之前的2.3版本中的Bluetooth servicecom/android/phone/BluetoothHeadsetService.java中存在漏洞。远程攻击者可利用该漏洞借助AT电话簿转移，在蓝牙范围内获取联系人数据。 0 Android 2.3 目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接：...

CVE-2011-4276

The Bluetooth service com/android/phone/BluetoothHeadsetService.java in Android 2.3 before 2.3.6 allows remote attackers within Bluetooth range to obtain contact data via an AT phonebook transfer...

Design/Logic Flaw

The Bluetooth service com/android/phone/BluetoothHeadsetService.java in Android 2.3 before 2.3.6 allows remote attackers within Bluetooth range to obtain contact data via an AT phonebook transfer...

CVE-2011-4276

The Bluetooth service com/android/phone/BluetoothHeadsetService.java in Android 2.3 before 2.3.6 allows remote attackers within Bluetooth range to obtain contact data via an AT phonebook transfer...

CVE-2011-4276

The CVE-2011-4276 issue affects Android 2.3 before 2.3.6, where the Bluetooth service (com/android/phone/BluetoothHeadsetService.java) allows remote attackers within Bluetooth range to obtain contact data via an AT phonebook transfer. Root cause is a flaw in the Bluetooth service handling AT phon...

PT-2012-1825

Name of the Vulnerable Software and Affected Versions Android versions prior to 2.3.6 Description The issue allows remote attackers within Bluetooth range to obtain contact data via an AT phonebook transfer, specifically targeting the Bluetooth service in the...

CVE-2011-4276: Exposure of Sensitive Information to an Unauthorized Actor

The Bluetooth service com/android/phone/BluetoothHeadsetService.java in Android 2.3 before 2.3.6 allows remote attackers within Bluetooth range to obtain contact data via an AT phonebook transfer...

FreeBSD : turba -- XSS vulnerabilities in several of the address book name and contact data fields (eeebd55d-6a88-11da-b96e-000fb586ba73)

Announce of Turba H3 2.0.5 final : This 2.0.5 is a security release that fixes cross site scripting vulnerabilities in several of the address book name and contact data fields. None of the vulnerabilities can be exploited by unauthenticated users; however, we strongly recommend that all users of...

CVE-2005-4242

Multiple cross-site scripting XSS vulnerabilities in Horde Turba H3 2.0.4 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the address book and 2 contact data...

CVE-2005-4242

Multiple cross-site scripting XSS vulnerabilities in Horde Turba H3 2.0.4 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the address book and 2 contact data...

CVE-2005-4242: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Horde Turba H3 2.0.4 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the address book and 2 contact data...

SUSE-SA:2005:054: evolution

The remote host is missing the patch for the advisory SUSE-SA:2005:054 evolution. Several format string bugs allowed remote attackers to cause evolution to crash or even execute code via full vCard data, contact data from remote LDAP servers, task list data from remote servers CVE-2005-2549 or...