PT-2012-1922

Name of the Vulnerable Software and Affected Versions Moodle versions 2.0.x through 2.0.5 Moodle versions 2.1.x through 2.1.2 Description The issue concerns the web services implementation, which fails to properly account for the maintenance-mode state and user attributes during login attempts...

CVE-2011-4309

Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote attackers to bypass intended access restrictions and perform global searches by leveraging the guest role and making a direct request to a URL...

CVE-2012-2707: Undefined Security Weakness

The Hostmaster Aegir module 6.x-1.x before 6.x-1.9 for Drupal does not properly exit when users do not have access to package/task nodes, which allows remote attackers to bypass intended access restrictions and edit unauthorized nodes...

CJWSoft ASPGuest GuestBook 'edit.asp' - SQL Injection Vulnerability

Title: CJWSoft ASPGuest GuestBook 'edit.asp' - SQL Injection Vulnerability Product : CJWSoft ASPGuest GuestBook Version : Free Version Vendor: http://www.cjwsoft.com/aspguest/default.asp Class: Input Validation Error CVE: Remote: Yes Local: No Published: 2012-02-24 Updated: Impact : Medium CVSSv2...

PT-2012-1927 · Red Hat · Red Hat Jboss Enterprise Application Platform

Name of the Vulnerable Software and Affected Versions: JBoss Enterprise Application Platform version 5.1.2 Description: The issue allows worker nodes to register with arbitrary virtual hosts, enabling remote attackers to bypass intended access restrictions. This can lead to the provision of...

mod_cluster: malicious worker nodes can register on any vhost

modcluster in JBoss Enterprise Application Platform 5.1.2 for Red Hat Linux allows worker nodes to register with arbitrary virtual hosts, which allows remote attackers to bypass intended access restrictions and provide malicious content, hijack sessions, and steal credentials by registering from ...

Mavili Guestbook 200711 Cross Site Scripting / SQL Injection

Title: mavili guestbook - SQL Injection and XSS Vulnerabilities Software : mavili guestbook Software Version : 200711 Vendor: http://code.google.com/p/maviliguestbook/ Vulnerability Published : 2012-01-03 Vulnerability Update Time : Status : Impact : High Bug Description : mavili guestbookversion...

SuSE 11.1 Security Update : flash-player (SAT Patch Number 5184)

This update resolves - a universal cross-site scripting issue that could be used to take actions on a user's behalf on any website or webmail provider if the user visits a malicious website. CVE-2011-2444 Note: There are reports that this issue is being exploited in the wild in active targeted...

SuSE 10 Security Update : flash-player (ZYPP Patch Number 7763)

This update resolves - a universal cross-site scripting issue that could be used to take actions on a user's behalf on any website or webmail provider if the user visits a malicious website. CVE-2011-2444 Note: There are reports that this issue is being exploited in the wild in active targeted...

Security-Assessment.com Advisory: Destination Search Admin Console Access Control Bypass

, , . .' '. ', . , '. , ., , / / / ==/ / / / / / / | Y Y / /| / /||| / / /.-. / /:wq x.0 '=.|w|.=' ='"=. presents.. Destination Search Admin Console Access Control Bypass Vendor link: http://www.localmatters.com/ PDF:...

FreeBSD Ports: linux-flashplugin

The remote host is missing an update to the system as announced in the referenced advisory. VID 53e531a7-e559-11e0-b481-001b2134ef46 OpenVAS Vulnerability Test $ Description: Auto generated from VID 53e531a7-e559-11e0-b481-001b2134ef46 Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

FreeBSD Ports: linux-flashplugin

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Adobe Flash Player Multiple Vulnerabilities September-2011 (Windows)

This host is installed with Adobe Flash Player and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodadobeflashplayermultvulnwinsep11.nasl 8178 2017-12-19 13:42:38Z cfischer $ Adobe Flash Player Multiple Vulnerabilities September-2011 Windows Authors: Madhuri D Copyright...

Adobe Flash Player Multiple Vulnerabilities September-2011 (Linux)

This host is installed with Adobe Flash Player and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodadobeflashplayermultvulnlinsep11.nasl 7029 2017-08-31 11:51:40Z teissa $ Adobe Flash Player Multiple Vulnerabilities September-2011 Linux Authors: Madhuri D Copyright:...

Adobe Flash Player Multiple Vulnerabilities (Sep 2011) - Windows

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...

Adobe Flash Player Multiple Vulnerabilities (Sep 2011) - Linux

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Adobe Flash Player Multiple Vulnerabilities (Sep 2011) - Mac OS X

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-2429

Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, related to a "security control bypass."...

CVE-2011-2429

Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, related to a "security control bypass."...

CVE-2011-2429

CVE-2011-2429 affects Adobe Flash Player prior to 10.3.183.10 on Windows/macOS/Linux/Solaris, and prior to 10.3.186.7 on Android. The issue is a security control bypass that could disclose sensitive information via unspecified vectors, implying a partial confidentiality impact. The description in...