6951 matches found
[SECURITY] Fedora 9 Update: squidGuard-1.2.1-2.fc9
squidGuard can be used to - limit the web access for some users to a list of accepted/well known web servers and/or URLs only. - block access to some listed or blacklisted web servers and/or URLs for some users. - block access to URLs matching a list of regular expressions or words for some users...
CVE-2008-6109
The CVE-2008-6109 issue affects the Robin Rawson-Tetley Animal Shelter Manager (ASM) prior to version 2.2.2, where user privileges are not properly enforced. This enables local users to bypass access restrictions by (a) opening unspecified screens related to the so‑called “double click selector b...
Code injection
Microsoft Windows does not properly enforce the Autorun and NoDriveTypeAutoRun registry values, which allows physically proximate attackers to execute arbitrary code by 1 inserting CD-ROM media, 2 inserting DVD media, 3 connecting a USB device, and 4 connecting a Firewire device; 5 allows...
CVE-2008-4297
Mercurial before 1.0.2 does not enforce the allowpull permission setting for a pull operation from hgweb, which allows remote attackers to read arbitrary files from a repository via an "hg pull" request...
CVE-2008-2246
Microsoft Windows Vista through SP1 and Server 2008 do not properly import the default IPsec policy from a Windows Server 2003 domain to a Windows Server 2008 domain, which prevents IPsec rules from being enforced and allows remote attackers to bypass intended access restrictions...
GLSA-200803-27 : MoinMoin: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200803-27 MoinMoin: Multiple vulnerabilities Multiple vulnerabilities have been discovered: A vulnerability exists in the file wikimacro.py because the macroGetval function does not properly enforce ACLs CVE-2008-1099. A directory...
CVE-2008-1099
macroGetval in wikimacro.py in MoinMoin 1.5.8 and earlier does not properly enforce ACLs, which allows remote attackers to read protected pages...
Integrity Clientless Security (ICS) Update 3.7.208.0
Check Point Integrity Clientless Security ICS protects your Web site by detecting and disabling spyware processes and allowing you to enforce security policies before a user logs onto your network. Using ICS you can prevent users with potentially harmful software from accessing your Web site, a...
Integrity Clientless Security (ICS) Update 3.7.205.0
Check Point Integrity Clientless Security ICS protects your Web site by detecting and disabling spyware processes and allowing you to enforce security policies before a user logs onto your network. Using ICS you can prevent users with potentially harmful software from accessing your Web site, a...
IPS-1 Protection Update - Authentication (v 15), DDOS (v 12), DHCP (v 8), Enterprise Software (v 2), Finger (v 10), FTP (v 23), IRC (v 13), LPD (v 11)
This advisory covers a set of protocol updates for the Authentication, DDOS, DHCP, Enterprise Software, Finger, FTP, IRC, and LPD protocol groups. The Authentication protocol group has been updated to ignore password strength tests for anonymous and guest users. Increased protocol compliance...
Integrity Clientless Security (ICS) Update 3.7.193.0
Check Point Integrity Clientless Security ICS protects your Web site by detecting and disabling spyware processes and allowing you to enforce security policies before a user logs onto your network. Using ICS you can prevent users with potentially harmful software from accessing your Web site, a...
Authorization
TestLink before 1.7.1 does not enforce an unspecified authorization mechanism, which has unknown impact and attack vectors...
CVE-2007-6006
The CVE-2007-6006 entry concerns TestLink before version 1.7.1 that does not enforce an unspecified authorization mechanism. The impact and attack vectors are not explicitly defined in the provided documents; exploitation details are not provided. No concrete remediation or vendor/version specifi...
Design/Logic Flaw
Cisco Firewall Services Module FWSM 3.16, and 3.22 and earlier, does not properly enforce edited ACLs, which might allow remote attackers to bypass intended restrictions on network traffic, aka CSCsj52536...
CVE-2007-5571
Cisco Firewall Services Module FWSM 3.16, and 3.22 and earlier, does not properly enforce edited ACLs, which might allow remote attackers to bypass intended restrictions on network traffic, aka CSCsj52536...
openSUSE 10 Security Update : fetchmail (fetchmail-2602)
Three security issues have been fixed in fetchmail : CVE-2005-4348: fetchmail when configured for multidrop mode, allows remote attackers to cause a denial of service application crash by sending messages without headers from upstream mail servers. CVE-2006-5867: fetchmail did not properly enforc...
3 3 8 9 get the broiler after the command complete works-vulnerability warning-the black bar safety net
net use $"\\ip\ipc$ "" /user:" " establishment of IPC air link net use $"\\ip\ipc$ "password" /user:"user name" to establish IPC non-empty link net use h: $"\\ip\c$ "password" /user:"username" directly after landing mapping each other C: to the local as H: net use h: $"\\ip\c$ after landing...
CVE-2006-7219
eZ publish before 3.8.5 does not properly enforce permissions for editing in a specific language, which allows remote authenticated users to create a draft in an unauthorized language by editing an archived version of an object, and then using Manage Versions to copy this version to a new draft...
CVE-2006-7218
eZ publish before 3.8.1 does not properly enforce permissions for "content edit Language" when there are four or more languages, which allows remote authenticated users to perform translations into languages that are not listed in a Module Function Limitation policy...
