1204 matches found
Tomcat/JBoss Web - Bypass of CSRF prevention filter
org/apache/catalina/filters/CsrfPreventionFilter.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.32 allows remote attackers to bypass the cross-site request forgery CSRF protection mechanism via a request that lacks a session identifier...
Opera Multiple Vulnerabilities -01 Feb 13 (Mac OS X)
This host is installed with Opera and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamultvuln01feb13macosx.nasl 27789 2013-02-11 14:02:27Z feb$ Opera Multiple Vulnerabilities -01 Feb 13 Mac OS X Authors: Arun Kallavi Copyright: Copyright c 2013 Greenbone Networks Gmb...
Opera Multiple Vulnerabilities -01 (Feb 2013) - Mac OS X
Opera is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
TomatoCart 1.x | Cross Site Request Forgery Protection Bypass via JavaScript Hijacking
OVERVIEW TomatoCart 1.x versions are vulnerable to Cross Site Request Forgery Protection Bypass. 2. BACKGROUND TomatoCart is an innovative Open Source shopping cart solution developed by Wuxi Elootec Technology Co., Ltd. It is forked from osCommerce 3 as a separate project and is released under...
Google Chrome for Android multiple security vulnerabilities
Multiple protection bypass and privilege escalation vulnerabilities...
RedHat Update for kernel RHSA-2012:1580-01
Check for the Version of kernel OpenVAS Vulnerability Test RedHat Update for kernel RHSA-2012:1580-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
Forescout NAC multiple security vulnerabilities
Crossite scripting, protection bypass...
Apache Tomcat multiple security vulnerabilities
Protection bypass, DoS...
The latest FCKEditor ASP upload bypass vulnerability-vulnerability warning-the black bar safety net
exploiut-db: FCKEditor ASP Version 2.6.8 File Upload Protection Bypass - Title: FCKEditor 2.6.8 ASP Version File Upload Protection bypass - Credit goes to: Mostafa Azizi, Soroush Dalili - Link:http://sourceforge. net/projects/fckeditor/files/FCKeditor/ - Description: There is no validation on...
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
Multiple memory corruptions, buffer overflows, privilege escalations and protection bypass...
FCKEditor Core ASP 2.6.8 - Arbitrary File Upload Protection Bypass
Title: FCKEditor 2.6.8 ASP Version File Upload Protection bypass - Credit goes to: Mostafa Azizi, Soroush Dalili - Link: http://sourceforge.net/projects/fckeditor/files/FCKeditor/ - Description: There is no validation on the extensions when FCKEditor 2.6.8 ASP version is dealing with the...
Cisco Nexus 1000V protection bypass
Under some conditions devices with invalid licenses and disabled protection do not display valid status...
Apple iOS 6.0 multiple security vulnerabilities
Information leakage, protection bypass, memory corruption, race conditions...
RSA SecurID Authentication Agent / RSA Authentication Client protection bypass
Under some condition user may login with windows credentials only...
Code injection
Mail in Apple iOS before 6 does not properly implement the Data Protection feature for e-mail attachments, which allows physically proximate attackers to bypass an intended passcode requirement via unspecified vectors...
Asterisk security vulnerabilities
Asterisk Manager code execution, IAX2 protection bypass...
Cisco AnyConnect Secure Mobility Client multiple security vulnerabilities
Code execution, protection bypass...
emacs protection bypass
"enable-local-variables" doesn't work...
glibc: incorrect size calculation in formatted printing can lead to FORTIFY_SOURCE format string protection bypass
The vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library aka glibc 2.12 and other versions does not properly calculate a buffer length, which allows context-dependent attackers to bypass the FORTIFYSOURCE format-string protection mechanism and cause a denial of service stack...