PT-2013-3615

Name of the Vulnerable Software and Affected Versions Gallery 3 versions prior to 3.0.9 Description The issue is related to the lib/flowplayer.swf.php file, which does not properly remove query fragments. This allows remote attackers to have an unspecified impact via a replay attack...

CVE-2013-2138: Improper Input Validation

The 1 uploadify and 2 flowplayer SWF files in Gallery 3 before 3.0.8 do not properly remove query parameters and fragments, which allows remote attackers to have an unspecified impact via a replay attack...

CVE-2013-2138

The CVE-2013-2138 issue affects Gallery 3 before 3.0.8 where the uploadify and flowplayer SWF files do not properly remove query parameters and fragments, allowing an unspecified impact via a replay attack. Related entry CVE-2013-2240 notes that lib/flowplayer.swf.php in Gallery 3 before 3.0.9 al...

PT-2013-3557

Name of the Vulnerable Software and Affected Versions Gallery 3 versions prior to 3.0.8 Description The issue affects the uploadify and flowplayer SWF files, allowing remote attackers to have an unspecified impact via a replay attack due to the improper removal of query parameters and fragments...

CVE-2013-2240

The CVE-2013-2240 issue affects Gallery 3, specifically the lib/flowplayer.swf.php component used in Gallery 3 prior to version 3.0.9. The vulnerability arises because query fragments are not properly removed, which could enable a remote attacker to achieve an unspecified impact via a replay atta...

CVE-2013-2240: Undefined Security Weakness

lib/flowplayer.swf.php in Gallery 3 before 3.0.9 does not properly remove query fragments, which allows remote attackers to have an unspecified impact via a replay attack, a different vulnerability than CVE-2013-2138...

CVE-2013-2240

lib/flowplayer.swf.php in Gallery 3 before 3.0.9 does not properly remove query fragments, which allows remote attackers to have an unspecified impact via a replay attack, a different vulnerability than CVE-2013-2138...

CVE-2013-2138

The 1 uploadify and 2 flowplayer SWF files in Gallery 3 before 3.0.8 do not properly remove query parameters and fragments, which allows remote attackers to have an unspecified impact via a replay attack...

VMWare Zimbra Collaboration Suite replay attack

It's possible to bypass authentication by replaying captured session...

Design/Logic Flaw

Dahua DVR appliances do not properly restrict UPnP requests, which makes it easier for remote attackers to obtain access via vectors involving a replay attack against the TELNET port...

CVE-2013-3613

CVE-2013-3613 affects Dahua DVR appliances. UPnP requests from untrusted addresses are not properly restricted, enabling remote attackers to obtain access via vectors involving a replay attack against the TELNET port (administrative service on TCP 37777 by default). Root cause is inadequate acces...

CVE-2013-3613

Dahua DVR appliances do not properly restrict UPnP requests, which makes it easier for remote attackers to obtain access via vectors involving a replay attack against the TELNET port...

PT-2013-4518

Name of the Vulnerable Software and Affected Versions Dahua DVR appliances affected versions not specified Description The issue is related to the improper restriction of UPnP requests, making it easier for remote attackers to gain access. This can be achieved through vectors involving a replay...

CVE-2013-3613: Improper Authentication

Dahua DVR appliances do not properly restrict UPnP requests, which makes it easier for remote attackers to obtain access via vectors involving a replay attack against the TELNET port...

CVE-2013-2051

The Tomcat 6 DIGEST authentication functionality as used in Red Hat Enterprise Linux 6 allows remote attackers to bypass intended access restrictions by performing a replay attack after a nonce becomes stale. NOTE: this issue is due to an incomplete fix for CVE-2012-5887...

Authentication flaw

The Tomcat 6 DIGEST authentication functionality as used in Red Hat Enterprise Linux 6 allows remote attackers to bypass intended access restrictions by performing a replay attack after a nonce becomes stale. NOTE: this issue is due to an incomplete fix for CVE-2012-5887...

CVE-2013-2051

The Tomcat 6 DIGEST authentication functionality as used in Red Hat Enterprise Linux 6 allows remote attackers to bypass intended access restrictions by performing a replay attack after a nonce becomes stale. NOTE: this issue is due to an incomplete fix for CVE-2012-5887...

CVE-2013-2051

The Tomcat 6 DIGEST authentication functionality as used in Red Hat Enterprise Linux 6 allows remote attackers to bypass intended access restrictions by performing a replay attack after a nonce becomes stale. NOTE: this issue is due to an incomplete fix for CVE-2012-5887...

CVE-2013-2051

Removed by vendor...

CVE-2013-2051: Undefined Security Weakness

The Tomcat 6 DIGEST authentication functionality as used in Red Hat Enterprise Linux 6 allows remote attackers to bypass intended access restrictions by performing a replay attack after a nonce becomes stale. NOTE: this issue is due to an incomplete fix for CVE-2012-5887...