3386 matches found
CVE-2013-2308
CVE-2013-2308 affects SoftBank Online Service Gate components: the OWA Helper and OSG Lite . The vulnerability allows remote authenticated users to obtain their own Office 365 passwords, thereby bypassing a platform restriction, via unspecified vectors. This is documented in multiple sources (NVD...
CVE-2013-2308
The 1 OWA Helper and 2 OSG Lite programs in SoftBank Online Service Gate allow remote authenticated users to discover their own passwords, and consequently bypass an Office 365 restriction, via unspecified vectors...
Oracle Java Web Start ActiveX Control launchApp Memory Access Error (CVE-2013-2416)
A code execution vulnerability exists in Oracle Java Web Start. The vulnerability is due to memory corruption in javaws.exe, a helper application executed from the launchApp method of the JWS ActiveX control. An attacker can exploit this vulnerability by enticing the target user to open a special...
JVN#61972596: Online Service Gate vulnerable in Office 365 password management
Online Service Gate provided by SoftBank Technology is a solution to manage the use of Office 365 which allows a system administrator to manage Office 365 users' passwords. Office 365 users' passwords are intended to be managed by a system administrator and cannot be obtained by users. OWA Helper...
Mandriva Linux Security Advisory : cups-pk-helper (MDVSA-2013:069)
Updated cups-pk-helper package fixes security vulnerability : cups-pk-helper, a PolicyKit helper to configure CUPS with fine-grained privileges, wraps CUPS function calls in an insecure way. This could lead to uploading sensitive data to a CUPS resource, or overwriting specific files with the...
rubygem-actionpack: sanitize_protocol: XSS Vulnerability in the helper of Ruby on Rails
A cross-site scripting XSS flaw was found in Action Pack. A remote attacker could use this flaw to conduct XSS attacks against users of an application using Action Pack...
Eye-Fi Helper Detection
The Eye-Fi Helper software, which is used to transfer photos wirelessly to a computer, is listening on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid65687; scriptversion"1.4"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"Eye-Fi Helper...
Eye-Fi Helper < 3.4.23 Directory Traversal
The version of Eye-Fi Helper installed on the remote host is a version prior to 3.4.23. It is, therefore, affected by a directory traversal vulnerability because it fails to properly sanitize user- supplied input. An attacker could exploit this issue to overwrite arbitrary files on the vulnerable...
Cross site scripting
The sanitize helper in lib/actioncontroller/vendor/html-scanner/html/sanitizer.rb in the Action Pack component in Ruby on Rails before 2.3.18, 3.0.x and 3.1.x before 3.1.12, and 3.2.x before 3.2.13 does not properly handle encoded : colon characters in URLs, which makes it easier for remote...
XSS Vulnerability in the `sanitize` helper
The sanitize helper in Ruby on Rails is designed to filter HTML and remove all tags and attributes which could be malicious...
CVE-2013-1857 rubygem-actionpack: sanitize_protocol: XSS Vulnerability in the helper of Ruby on Rails
'The sanitize helper in lib/actioncontroller/vendor/html-scanner/html/sanitizer.rb in the Action Pack component in Ruby on Rails before 2.3.18, 3.0.x and 3.1.x before 3.1.12, and 3.2.x before 3.2.13 does not properly handle encoded : colon characters in URLs, which makes it easier for remote...
rubygem-rails -- multiple vulnerabilities
Ruby on Rails team reports: Rails versions 3.2.13 has been released. This release contains important security fixes. It is recommended users upgrade as soon as possible. Four vulnerabilities have been discovered and fixed: CVE-2013-1854 Symbol DoS vulnerability in Active Record CVE-2013-1855 XSS...
Security fix for the ALT Linux 10 package dnsmasq version 2.65-alt1
March 6, 2013 Mikhail Efremov 2.65-alt1 - Patch from Fedora: + Fix for CVE-2013-0198 checking of TCP connection interfaces - Improved resolvconf support. - Added dnsmasq.service. - Added dnsmasq-helper script. - Drop 'build without resolvconf' support. - Updated to 2.65...
CVE-2013-0277
ActiveRecord in Ruby on Rails before 2.3.17 and 3.x before 3.1.0 allows remote attackers to cause a denial of service or execute arbitrary code via crafted serialized attributes that cause the +serialize+ helper to deserialize arbitrary YAML...
CVE-2013-0277 rubygem-activerecord: Serialized Attributes YAML Vulnerability with Rails 2.3 and 3.0
ActiveRecord in Ruby on Rails before 2.3.17 and 3.x before 3.1.0 allows remote attackers to cause a denial of service or execute arbitrary code via crafted serialized attributes that cause the +serialize+ helper to deserialize arbitrary YAML...
Fedora Update for cups-pk-helper FEDORA-2012-18927
Check for the Version of cups-pk-helper OpenVAS Vulnerability Test Fedora Update for cups-pk-helper FEDORA-2012-18927 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...
Fedora Update for cups-pk-helper FEDORA-2012-18927
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora 16 : cups-pk-helper-0.1.3-4.fc16 (2012-18927)
This update fixes CVE-2012-4510. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...
