364 matches found
CVE-2014-4156: Observable Discrepancy
Proxmox VE prior to 3.2: 'AccessControl.pm' User Enumeration Vulnerability...
Proxmox Virtual Environment (VE, PVE) End of Life (EOL) Detection
The Proxmox Virtual Environment VE, PVE version on the remote host has reached the end of life EOL and should not be used anymore. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
UBUNTU-CVE-2015-4017
Salt before 2014.7.6 does not verify certificates when connecting via the aliyun, proxmox, and splunk modules...
CVE-2015-4017
Salt before 2014.7.6 does not verify certificates when connecting via the aliyun, proxmox, and splunk modules...
PYSEC-2017-31
Salt before 2014.7.6 does not verify certificates when connecting via the aliyun, proxmox, and splunk modules...
Code injection
Salt before 2014.7.6 does not verify certificates when connecting via the aliyun, proxmox, and splunk modules...
CVE-2015-4017
Salt before 2014.7.6 does not verify certificates when connecting via the aliyun, proxmox, and splunk modules...
PYSEC-2017-31
Salt before 2014.7.6 does not verify certificates when connecting via the aliyun, proxmox, and splunk modules...
CVE-2015-4017
Salt before 2014.7.6 does not verify certificates when connecting via the aliyun, proxmox, and splunk modules...
CVE-2015-4017
Salt before 2014.7.6 does not verify certificates when connecting via the aliyun, proxmox, and splunk modules...
CVE-2015-4017
Removed by vendor...
CVE-2015-4017
CVE-2015-4017 describes a vulnerability in Salt prior to 2014.7.6 where certificate verification is not performed when Salt connects via the aliyun, proxmox, and splunk modules. According to the connected SUSE/OSV records, the issue centers on Salt’s failure to validate certificates, potentially ...
PT-2017-6719
Name of the Vulnerable Software and Affected Versions Salt versions prior to 2014.7.6 Description The issue is related to the lack of certificate verification when connecting via certain modules. Specifically, the aliyun, proxmox, and splunk modules do not verify certificates. This could...
CVE-2015-4017: Improper Certificate Validation
Salt before 2014.7.6 does not verify certificates when connecting via the aliyun, proxmox, and splunk modules...
Proxmox Mail Gateway Open Redirect Vulnerability
Proxmox Mail Gateway is an e-mail gateway product from Proxmox Server Solutions, Austria. The product protects e-mail from virus, phishing and Trojan horse threats. An open redirection vulnerability exists in versions prior to Proxmox Mail Gateway hotfix 4.0-8-097d26a9. A remote attacker can...
Proxmox Mail Gateway Cross-Site Scripting Vulnerability
Proxmox Mail Gateway is an e-mail gateway product from Proxmox Server Solutions, Austria. The product protects e-mail from virus, phishing and Trojan horse threats. A cross-site scripting vulnerability exists in versions prior to Proxmox Mail Gateway hotfix 4.0-8-097d26a9. A remote attacker can...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9 allow remote attackers to inject arbitrary web script or HTML via multiple parameters, related to /users/index.htm, /quarantine/spam/manage.htm, /quarantine/spam/whitelist.htm,...
Open redirect
Open redirect vulnerability in Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the destination parameter...
CVE-2015-9057
Multiple cross-site scripting XSS vulnerabilities in Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9 allow remote attackers to inject arbitrary web script or HTML via multiple parameters, related to /users/index.htm, /quarantine/spam/manage.htm, /quarantine/spam/whitelist.htm,...
CVE-2015-9058
Open redirect vulnerability in Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the destination parameter...