2891 matches found
ESA-2014-081 RSA® Identity Management and Governance Authentication Bypass Vulnerability
ESA-2014-081.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-081 RSA® Identity Management and Governance Authentication Bypass Vulnerability EMC Identifier: ESA-2014-081 CVE Identifier: CVE-2014-4619 Severity Rating: CVSS v2 Base Score: 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C Affected products:...
CVE-2014-6023
The s-peek credit rating report aka com.rhomobile.speek application 2.1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Design/Logic Flaw
The s-peek credit rating report aka com.rhomobile.speek application 2.1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6023
The s-peek credit rating report aka com.rhomobile.speek application 2.1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6023
The CVE-2014-6023 issue affects the Android app s-peek credit rating report (com.rhomobile.speek) version 2.1.3. The root cause is that the app does not verify X.509 certificates from SSL servers, exposing users to man-in-the-middle attacks that can spoof servers and harvest sensitive information...
ESA-2014-091: EMC Documentum Content Server Multiple Privilege Escalation Vulnerabilities
ESA-2014-091.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-091: EMC Documentum Content Server Multiple Privilege Escalation Vulnerabilities EMC Identifier: ESA-2014-091 CVE Identifier: CVE-2014-4621, CVE-2014-4622 Severity Rating: CVSS v2 Base Score: See below for individual scores f...
Adobe Flash Player security update September 2014
Adobe today released an updated Flash Player that patched a dozen vulnerabilities, and also announced that a scheduled security update for Reader and Acrobat has been postponed to the week of Sept. 15. Today’s release, which coincides with Microsoft’s monthly scheduled security updates, patches...
GD Star Rating <= 1.9.16 - Cross-Site Scripting (XSS)
The gd-star-rating WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
GD Star Rating 1.9.7 - Cross-Site Scripting (XSS)
The gd-star-rating WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
GD Star Rating 1.9.22 - Cross-Site Request Forgery (CSRF)
The gd-star-rating WordPress plugin was affected by a Cross-Site Request Forgery CSRF security vulnerability...
Comment Rating 2.9.23 - Multiple Vulnerabilities
The comment-rating WordPress plugin was affected by a Multiple Vulnerabilities security vulnerability...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the advanced-grading implementation in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted 1...
CVE-2014-3551
CVE-2014-3551 affects Moodle multiple versions of the advanced-grading rubric component. Vulnerable in 2.3.x up to 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1. Description: XSS via crafted (1) qualification or (2) rating fields in a rubric, exploita...
CVE-2014-4601
Cross-site scripting XSS vulnerability in wu-ratepost.php in the Wu-Rating plugin 1.0 12319 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the v parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in wu-ratepost.php in the Wu-Rating plugin 1.0 12319 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the v parameter...
CVE-2014-4601
Cross-site scripting XSS vulnerability in wu-ratepost.php in the Wu-Rating plugin 1.0 12319 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the v parameter...
CVE-2014-4601
The CVE-2014-4601 vulnerability affects the Wu-Rating WordPress plugin (version 1.0 build 12319 and earlier). It is a reflected/Stored XSS due to improper handling of the v parameter in wu-ratepost.php, allowing remote attackers to inject arbitrary JavaScript/HTML. Impact is user session or page ...
SynConnect PMS (index.php, loginid param) - SQL Injection Vulnerability
No description provided by source. Title: ==== SynConnect - SQL Injection vulnerability Credit: ====== Name: Bhadresh Patel Company/affiliation: Cyberoam Technologies Private Limited Website: www.cyberoam.com CVE: ===== Date: ==== 01-03-2013 CRD: ==== CRD-2013-01 Vendor: ====== Synchroweb...
Comment Rating 2.9.23 Wordpress Plugin Multiple Vulnerabilities
No description provided by source. Source: http://packetstormsecurity.org/files/view/98660/commentrating-sqldisclose.txt ================================= Vulnerability ID: HTB22842 Reference: http://www.htbridge.ch/advisory/pathdisclosureincommentratingwordpressplugin.html Product: Comment Ratin...
WordPress GD Star Rating plugin <= 1.9.10 SQL Injection
No description provided by source. Exploit Title: WordPress GD Star Rating plugin = 1.9.10 SQL Injection Vulnerability Date: 2011-09-26 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/gd-star-rating.zip Version: 1.9.10 tested Not...