2958 matches found
openSUSE Security Update : sssd (openSUSE-2016-1238)
This update for sssd fixes one security issue and three bugs. The following vulnerability was fixed : - CVE-2014-0249: Incorrect expansion of group membership when encountering a non-POSIX group. bsc880245 The following non-security fixes were also included : - Prevent crashes of statically linke...
SUSE SLED12 / SLES12 Security Update : sssd (SUSE-SU-2016:2579-1)
This update for sssd fixes one security issue and three bugs. The following vulnerability was fixed : - CVE-2014-0249: Incorrect expansion of group membership when encountering a non-POSIX group. bsc880245 The following non-security fixes were also included : - Prevent crashes of statically linke...
CVE-2016-5425
The Tomcat package on Red Hat Enterprise Linux RHEL 7, Fedora, CentOS, Oracle Linux, and possibly other Linux distributions uses weak permissions for /usr/lib/tmpfiles.d/tomcat.conf, which allows local users to gain root privileges by leveraging membership in the tomcat group...
Simple Membership <= 3.2.8 - Cross-Site Scripting (XSS)
The Simple Membership WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
WordPress Simple Membership Plugin <= 3.2.8 - Cross Site Scripting (XSS)
Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...
WordPress Simple Membership 3.2.8 Cross Site Scripting
------------------------------------------------------------------------ Cross-Site Scripting vulnerability in Simple Membership WordPress Plugin ------------------------------------------------------------------------ Yorick Koster, July 2016...
WordPress Ultimate Membership Pro 3.3 SQL Injection
Vendor Homepage: http://wpindeed.com/ Software Link: http://codecanyon.net/item/ultimate-membership-pro-wordpress-plugin/12159253 Version: 3.3 Tested on: Debian 8, PHP 5.6.17-3 Type: Unauthenticated Blind SQLi, Unauthenticated Payment Bypass Time line: Found 07-Jun-2016, Vendor notified...
WordPress Ultimate Membership Pro Plugin 3.3 - SQL Injection
This WordPress Ultimate Membership Pro plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update WordPress plugin to the newest stable and safe...
CVE-2016-1402
The Active Directory AD integration component in Cisco Identity Service Engine ISE before 1.2.0.899 patch 7, when AD group-membership authorization is enabled, allows remote attackers to cause a denial of service authentication outage via a crafted Password Authentication Protocol PAP...
Ranger - Tool To Access And Interact With Remote Microsoft Windows Based Systems
A tool to support security professionals access and interact with remote Microsoft Windows based systems. This project was conceptualized with the thought process, we did not invent the bow or the arrow, just a more efficient way of using it. Ranger is a command-line driven attack and penetration...
LDAP Based Active Directory Enumeration: AD-LDAP-Enum
ad-ldap-enum is a Python script that was developed to discover users and their group memberships from Active Directory. In large Active Directory environments, tools such as NBTEnum were not performing fast enough. By executing LDAP queries against a domain controller, ad-ldap-enum is able to...
codeproject.com XSS vulnerability
Vulnerable URL: https://www.codeproject.com/script/Membership/Modify.aspx?meml='"--alert'XSSPOSED'...
Groups to Synchronise membership filter in Crowd/JIRA authentication not effective in some circumstances
Users existing in remote Crowd/JIRA authentication source may get access to FishEye/Crucible instance even if they are not members of specified "Groups to Synchronise"...
Groups to Synchronise membership filter in Crowd/JIRA authentication not effective in some circumstances
Users existing in remote Crowd/JIRA authentication source may get access to FishEye/Crucible instance even if they are not members of specified "Groups to Synchronise"...
Groups to Synchronise membership filter in Crowd/JIRA authentication not effective in some circumstances
Users existing in remote Crowd/JIRA authentication source may get access to FishEye/Crucible instance even if they are not members of specified "Groups to Synchronise"...
Groups to Synchronise membership filter in Crowd/JIRA authentication not effective in some circumstances
Users existing in remote Crowd/JIRA authentication source may get access to FishEye/Crucible instance even if they are not members of specified "Groups to Synchronise"...
IBM Cognos Business Intelligence Tivoli Common Reporting Elevation of Privilege Vulnerability
IBM Cognos Business Intelligence BI and IBM Tivoli Common Reporting TCR are both products of IBM Corporation, U.S.A. BI is a set of business intelligence software. The software includes reports, dashboards, and scorecards, and can assist companies in adjusting their decisions by analyzing such...
Design/Logic Flaw
IBM Tivoli Common Reporting TCR 2.1 before IF14, 2.1.1 before IF22, 2.1.1.2 before IF9, 3.1.0.0 through 3.1.2 as used in Cognos Business Intelligence before 10.2 IF16, and 3.1.2.1 as used in Cognos Business Intelligence before 10.2.1.1 IF12 preserves user permissions across group-add and...
Memberhsip Pro, versions before 2.1.1
Joomdonation extensions, Information Disclosure Memberhsip Pro versions before 2.1.1 Resolution: update to 2.1.1 Update notice URL: http://joomdonation.com/forum/membership-pro/50512-membership-pro-version-2-1-1-released.html...