268 matches found
Improper access control
Artiphp CMS 5.5.0 Neo r422 stores database backups with predictable names under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request...
An authentication information Exposure Vulnerability in JP1/IT Resource Management - Manager
Overview An authentication information exposure vulnerability was found in JP1/IT Resource Management - Manager. Impact An authentication information might be exposured. Solution Please refer to the 'Vendor Information' section for the official countermeasure and take appropriate action...
Critical Security Upgrade Notice for FormIt, Quip and Login
We received a report of a potential vulnerability in FormIt, Quip and Login that could be used to expose system settings including database information. This has been been corrected and new versions have been posted. Upgrading of FormIt, Login and Quip to the latest versions via Package Manager...
PHPizabi v0.848b C1 HFP3 Database Information Disclosure Vuln
Exploit for unknown platform in category web applications ============================================================= PHPizabi v0.848b C1 HFP3 Database Information Disclosure Vuln =============================================================...
CVE-2002-1325
CVE-2002-1325 affects Microsoft Virtual Machine (VM) versions up to build 5.0.3805. A Java applet that accesses the user.dir system property can disclose the local user’s username to a remote attacker, via a crafted page or email. CERT notes the vulnerability could leak the user’s system path and...
[SECURITY] [DSA-392-1] New webfs packages fix buffer overflows, file and directory exposure
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 392-1 [email protected] http://www.debian.org/security/ Matt Zimmerman September 29th, 2003 http://www.debian.org/security/faq -...
Important: Red Hat Security Advisory: tomcat security update for Stronghold
Updated tomcat packages are now available for Stronghold Cross Platform to close a JSP source code exposure vulnerability. Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. A source code exposure...
