531 matches found
The vulnerability of the Oracle E-Business Suite system’s automation activities allows a perpetrator to gain unauthorized access to read data.
The vulnerability of the Oracle Application Object Library component in the Oracle E-Business Suite automation system is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to read data...
The vulnerability of the Mac OS X operating system allows a perpetrator to gain access to protected information in the kernel’s memory.
The vulnerability of the IOGraphics component in the Mac OS X operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information in the kernel memory through a specially...
Cisco IOS/IOS XE SSHv2 Body Authentication Bypass Vulnerability
Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. Cisco IOS and IOS XE Software have a security vulnerability in the implementation of the SSHv2 protocol. A remote attacker could exploit this vulnerability to bypass the user...
The vulnerability of the Internet Explorer browser, which allows a violator to access protected information
The vulnerability of the Internet Explorer browser is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information through a specially crafted web page...
CVE-2013-2056
The Inter-Satellite Sync ISS operation in Red Hat Network RHN Satellite 5.3, 5.4, and 5.5 does not properly check client "authenticity," which allows remote attackers to obtain channel content by skipping the initial authentication call...
The vulnerability of the Internet Explorer browser, which allows a hacker to gain access to the history of visited pages
The vulnerability of the Internet Explorer browser is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the history of visited pages through image caching errors...
Apache Tomcat JK Connector (mod_jk) < 1.2.41 Authentication Bypass Vulnerability
Apache Tomcat JK Connector modjk is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality of protected information
The multiple vulnerabilities in the linux-headers-2.6.18-4-all-alpha package of the Debian GNU/Linux operating system may lead to a violation of the confidentiality of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information
Multiple vulnerabilities exist in the kernel-image-2.4.27-2-sparc64-smp operating system from Debian GNU/Linux. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information
Multiple vulnerabilities exist in the kernel-image-2.4.27-xxs1500 operating system of the Debian GNU/Linux distribution. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information
Multiple vulnerabilities exist in the kernel-image-2.4.27-3-686-smp operating system from Debian GNU/Linux. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information
Multiple vulnerabilities exist in the varnish operating system package for Debian GNU/Linux; exploiting these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
UBUNTU-CVE-2011-5319
content/renderer/devicesensors/devicemotioneventpump.cc in Google Chrome before 41.0.2272.76 does not properly restrict access to high-rate accelerometer data, which makes it easier for remote attackers to capture keystrokes via a crafted web site that listens for ondevicemotion events, a differe...
CVE-2015-1546
Double free vulnerability in the getvrFilter function in servers/slapd/filter.c in OpenLDAP 2.4.40 allows remote attackers to cause a denial of service crash via a crafted search query with a matched values control...
Free Article Submissions 1.0 - SQL Injection
Exploit Title: Free Article Submissions SQL Injection Vulnerability Google Dork: inurl:/category.php?id=22 "Affiliate Programs Portal" inurl:/category.php?id=2 "Arts & Entertainment" Date: 07/12/2014 Exploit Author: BarrabravaZ Vendor Homepage: http://www.articlesetup.com/ Software Link: download...
CVE-2014-8709
The ieee80211fragment function in net/mac80211/tx.c in the Linux kernel before 3.13.5 does not properly maintain a certain tail pointer, which allows remote attackers to obtain sensitive cleartext information by reading packets...
CA20141103-01: Security Notice for CA Cloud Service Management
-----BEGIN PGP SIGNED MESSAGE----- CA20141103-01: Security Notice for CA Cloud Service Management Issued: November 3, 2014 CA Technologies Support is alerting customers to four resolved vulnerabilities with CA Cloud Service Management. Four vulnerabilities existed that could potentially allow a...
DUclassmate 1.x account.asp MM-recordId Parameter Arbitrary Password Modification
No description provided by source. source: http://www.securityfocus.com/bid/11363/info Multiple vulnerabilities have been identified in the software that may allow a remote attacker to carry out SQL injection and HTML injection attacks. An attacker may also gain unauthorized access to a user's...
Conxint FTP 2.2.603 Multiple Directory Traversal Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/21081/info Conxint is prone to multiple directory-traversal vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow a remote attacker to access any file...