4489 matches found
CVE-2009-1016
Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 allows remote authenticated users to affect confidentiality, integrity, and availability, related to IIS. NOTE: the previous information was obtained from the...
CVE-2008-6708
CVE-2008-6708 affects Avaya SIP Enablement Services (SES) 3.x and 4.0 as used with Avaya Communication Manager 3.1.x and 4.x. The vulnerability is described as an unspecified issue in the Web management interface that allows remote authenticated administrators to gain root privileges through unkn...
Mandriva Update for samba MDKSA-2007:104-1 (samba)
Check for the Version of samba OpenVAS Vulnerability Test Mandriva Update for samba MDKSA-2007:104-1 samba Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...
Mandriva Update for xscreensaver MDKSA-2007:097 (xscreensaver)
Check for the Version of xscreensaver OpenVAS Vulnerability Test Mandriva Update for xscreensaver MDKSA-2007:097 xscreensaver Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
Mandriva Update for gnome-screensaver MDVSA-2008:132 (gnome-screensaver)
Check for the Version of gnome-screensaver OpenVAS Vulnerability Test Mandriva Update for gnome-screensaver MDVSA-2008:132 gnome-screensaver Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...
CVE-2008-6659
Directory traversal vulnerability in index.php in Simple Machines Forum SMF 1.0 before 1.0.15 and 1.1 before 1.1.7 allows remote authenticated users to configure arbitrary local files for execution via directory traversal sequences in the value of the themedir field during a jsoption action,...
CVE-2009-1230
Podcast Generator pre-1.2 is vulnerable to Arbitrary File Deletion via core/admin/delete.php and related input handling flaws (e.g., persisting inputs like file/absoluteurl/theme_path with register_globals enabled). Exploitation could let an attacker delete arbitrary files on the webserver. Affec...
CVE-2008-6524
resetpass.php in openInvoice 0.90 beta and earlier allows remote authenticated users to change the passwords of arbitrary users via a modified uid parameter. NOTE: this can be leveraged with a separate vulnerability in auth.php to modify passwords without authentication...
CVE-2008-6524
resetpass.php in openInvoice 0.90 beta and earlier allows remote authenticated users to change the passwords of arbitrary users via a modified uid parameter. NOTE: this can be leveraged with a separate vulnerability in auth.php to modify passwords without authentication...
CVE-2008-6524
CVE-2008-6524 affects openInvoice up to version 0.90 beta and earlier. It allows remote authenticated users to change arbitrary user passwords via a modified uid parameter in resetpass.php. The description notes this can be leveraged with a separate vulnerability in auth.php to modify passwords w...
Default credentials
The Change My Password implementation in the admin interface in Sun Java System Identity Manager IdM 7.0 through 8.0 does not enforce the RequiresChallenge property setting, which allows remote authenticated users to change the passwords of other users, as demonstrated by changing the...
Design/Logic Flaw
Sun Java System Identity Manager IdM 7.0 through 8.0 allows remote authenticated users to gain privileges by submitting crafted commands to the Admin Console, as demonstrated by privileges for account creation and other administrative capabilities, related to the saveNoValidate action and...
CVE-2009-1077
The CVE-2009-1077 entry concerns Sun Java System Identity Manager (IdM) 7.0–8.0. The admin Change My Password functionality fails to enforce the RequiresChallenge setting, enabling remote authenticated users to change other users’ passwords, demonstrated by altering the administrator account. Doc...
CVE-2009-1078
CVE-2009-1078 affects Sun Java System Identity Manager (IdM) 7.0–8.0. The issue is that the product does not enforce the expected privilege requirements for (1) deleting audit policies and (2) modifying workflows, allowing remote authenticated users to have an unspecified impact. The available co...
Ubuntu Update for gnome-screensaver vulnerabilities USN-669-1
Ubuntu Update for Linux kernel vulnerabilities USN-669-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6691.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for gnome-screensaver vulnerabilities USN-669-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
CVE-2008-6502
Directory traversal vulnerability in Pro Chat Rooms 3.0.2 allows remote authenticated users to select an arbitrary local PHP script as an avatar via a .. dot dot in the avatar parameter, and cause other users to execute this script by using sendData.php to send a message to 1 an individual user o...
CVE-2009-0967
The FTP server in Serv-U 7.0.0.1 through 7.4.0.1 allows remote authenticated users to cause a denial of service service hang via a large number of SMNT commands without an argument...
CVE-2008-6474
The CVE-2008-6474 issue affects F5 BIG-IP 9.4.3 (management CLI/Web interface). The vulnerability is a remote code-injection where remote authenticated users with Resource Manager privileges can exploit unsanitized input related to Perl EP3 templates to create arbitrary Perl code execution with t...
CVE-2009-0809
The Web Editor in Dassault Systemes ENOVIA SmarTeam V5 before Release 18 Service Pack 8, and possibly CATIA and other products, allows remote authenticated users to read the profile card of an object in the document class via a link that is sent from the owner of the document object...