CVE-2013-2240

lib/flowplayer.swf.php in Gallery 3 before 3.0.9 does not properly remove query fragments, which allows remote attackers to have an unspecified impact via a replay attack, a different vulnerability than CVE-2013-2138...

CVE-2013-2138

The 1 uploadify and 2 flowplayer SWF files in Gallery 3 before 3.0.8 do not properly remove query parameters and fragments, which allows remote attackers to have an unspecified impact via a replay attack...

Design/Logic Flaw

The 1 uploadify and 2 flowplayer SWF files in Gallery 3 before 3.0.8 do not properly remove query parameters and fragments, which allows remote attackers to have an unspecified impact via a replay attack...

Security feature bypass

lib/flowplayer.swf.php in Gallery 3 before 3.0.9 does not properly remove query fragments, which allows remote attackers to have an unspecified impact via a replay attack, a different vulnerability than CVE-2013-2138...

CVE-2013-2138

The 1 uploadify and 2 flowplayer SWF files in Gallery 3 before 3.0.8 do not properly remove query parameters and fragments, which allows remote attackers to have an unspecified impact via a replay attack...

CVE-2013-2240

lib/flowplayer.swf.php in Gallery 3 before 3.0.9 does not properly remove query fragments, which allows remote attackers to have an unspecified impact via a replay attack, a different vulnerability than CVE-2013-2138...

CVE-2013-2138

The CVE-2013-2138 issue affects Gallery 3 before 3.0.8 where the uploadify and flowplayer SWF files do not properly remove query parameters and fragments, allowing an unspecified impact via a replay attack. Related entry CVE-2013-2240 notes that lib/flowplayer.swf.php in Gallery 3 before 3.0.9 al...

PT-2013-3615

Name of the Vulnerable Software and Affected Versions Gallery 3 versions prior to 3.0.9 Description The issue is related to the lib/flowplayer.swf.php file, which does not properly remove query fragments. This allows remote attackers to have an unspecified impact via a replay attack...

CVE-2013-2240

lib/flowplayer.swf.php in Gallery 3 before 3.0.9 does not properly remove query fragments, which allows remote attackers to have an unspecified impact via a replay attack, a different vulnerability than CVE-2013-2138...

PT-2013-3557

Name of the Vulnerable Software and Affected Versions Gallery 3 versions prior to 3.0.8 Description The issue affects the uploadify and flowplayer SWF files, allowing remote attackers to have an unspecified impact via a replay attack due to the improper removal of query parameters and fragments...

CVE-2013-2138: Improper Input Validation

The 1 uploadify and 2 flowplayer SWF files in Gallery 3 before 3.0.8 do not properly remove query parameters and fragments, which allows remote attackers to have an unspecified impact via a replay attack...

CVE-2013-2138

The 1 uploadify and 2 flowplayer SWF files in Gallery 3 before 3.0.8 do not properly remove query parameters and fragments, which allows remote attackers to have an unspecified impact via a replay attack...

CVE-2013-2240

The CVE-2013-2240 issue affects Gallery 3, specifically the lib/flowplayer.swf.php component used in Gallery 3 prior to version 3.0.9. The vulnerability arises because query fragments are not properly removed, which could enable a remote attacker to achieve an unspecified impact via a replay atta...

CVE-2013-2240: Undefined Security Weakness

lib/flowplayer.swf.php in Gallery 3 before 3.0.9 does not properly remove query fragments, which allows remote attackers to have an unspecified impact via a replay attack, a different vulnerability than CVE-2013-2138...

VMWare Zimbra Collaboration Suite replay attack

It's possible to bypass authentication by replaying captured session...

Zimbra Collaboration Suite (ZCS) Session Replay Vulnerability

Product: Zimbra Collaboration Suite Vendor: VMWare Vulnerable Version: 6.0.16 and probably prior Tested Version: 6.0.16 Vendor Notification: 09/03/2013 Public Disclosure: 09/13/2013 Vulnerability Type: Authentication Bypass by Capture-replay CWE-294 CVE: CVE-2013-5119 Discovered and Provided By:...

[SECURITY] Fedora 19 Update: nas-1.9.3-7.fc19

In a nutshell, NAS is the audio equivalent of an X display server. The Network Audio System NAS was developed by NCD for playing, recording, and manipulating audio data over a network. Like the X Window System, it uses the client/server model to separate applications from the specific drivers tha...

[SECURITY] Fedora 20 Update: nas-1.9.3-9.fc20

In a nutshell, NAS is the audio equivalent of an X display server. The Network Audio System NAS was developed by NCD for playing, recording, and manipulating audio data over a network. Like the X Window System, it uses the client/server model to separate applications from the specific drivers tha...

Design/Logic Flaw

Zimbra Collaboration Suite ZCS 6.0.16 and earlier allows man-in-the-middle attackers to obtain access by sniffing the network and replaying the ZMAUTHTOKEN token...

CVE-2013-5119: Improper Authentication

Zimbra Collaboration Suite ZCS 6.0.16 and earlier allows man-in-the-middle attackers to obtain access by sniffing the network and replaying the ZMAUTHTOKEN token...