151 matches found
Baidu UEditor suffers from unauthorized access vulnerability
UEditor is a web editor developed by Baidu web front-end research and development department. An unauthorized access vulnerability exists in Baidu UEditor. An attacker can exploit the vulnerability to log in to the system without an account password and perform unauthorized operations...
EZSA-2018-005 Passwordless login for LDAP users
More info at http://share.ez.no/community-project/security-advisories/ezsa-2018-005-passwordless-login-for-ldap-users...
The vulnerability of the implementation of the commit-scenarios mechanism in the JunOS operating system allows a perpetrator to gain access to the device with root privileges.
The vulnerability of the Junos operating system’s commit-scenario mechanism is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to gain access to a device with root privileges without using a password, after reloading the specially crafted commit-scenari...
PT-2016-7860 · Pivotal +4 · Rabbitmq +3
Name of the Vulnerable Software and Affected Versions: Pivotal RabbitMQ versions 3.x through 3.5.7 Pivotal RabbitMQ versions 3.6.x through 3.6.5 RabbitMQ for PCF versions 1.5.x through 1.5.19 RabbitMQ for PCF versions 1.6.x through 1.6.11 RabbitMQ for PCF versions 1.7.x through 1.7.6 Description:...
Passwordless Login Plugin - Multiple Input XSS
The Passwordless Login WordPress plugin was affected by a Multiple Input XSS security vulnerability...
Gentoo Security Advisory GLSA 200804-24 (dbmail)
The remote host is missing updates announced in advisory GLSA 200804-24. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 200804-24 (dbmail)
The remote host is missing updates announced in advisory GLSA 200804-24. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
[ GLSA 200804-24 ] DBmail: Data disclosure
Gentoo Linux Security Advisory GLSA 200804-24 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
PT-2003-1416 · Sgi · Irix
Name of the Vulnerable Software and Affected Versions: IRIX versions 6.5.19 and earlier Description: The issue concerns the LDAP name service nsd not properly verifying if the USERPASSWORD attribute has been provided by an LDAP server. This could allow attackers to log in without a password...
