4025 matches found
CVE-2014-0945
Cross-site scripting XSS vulnerability in the RES Console in Rule Execution Server in IBM Operational Decision Manager 7.5 before FP3 IF37, 8.0 before MP1 FP2, and 8.5 before MP1 IF26 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...
CVE-2014-0944: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the RES Console in Rule Execution Server in IBM Operational Decision Manager 7.5 before FP3 IF37, 8.0 before MP1 FP2, and 8.5 before MP1 IF26 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert...
CVE-2014-0946: Exposure of Sensitive Information to an Unauthorized Actor
The RES Console in Rule Execution Server in IBM Operational Decision Manager 7.5 before FP3 IF37, 8.0 before MP1 FP2, and 8.5 before MP1 IF26 does not send appropriate Cache-Control HTTP headers, which allows remote attackers to obtain sensitive information by leveraging an unattended workstation...
Medium: mod_security
Issue Overview: apache2/modsecurity.c in ModSecurity before 2.7.6 allows remote attackers to bypass rules by using chunked transfer coding with a capitalized Chunked value in the Transfer-Encoding HTTP header. Affected Packages: modsecurity Issue Correction: Run yum update modsecurity or yum upda...
All instances of storage metadata are corrupted
Challenge A task in Veeam Backup & Replication fails with the error: All instances of storage metadata are corrupted. Copy Cause It's important first to understand what the "storage metadata" is. The storage metadata is akin to an MFT master file table for the Veeam Backup & Replication backup...
DEBIAN-CVE-2014-0187
The openvswitch-agent process in OpenStack Neutron 2013.1 before 2013.2.4 and 2014.1 before 2014.1.1 allows remote authenticated users to bypass security group restrictions via an invalid CIDR in a security group rule, which prevents further rules from being applied...
UBUNTU-CVE-2013-5705
apache2/modsecurity.c in ModSecurity before 2.7.6 allows remote attackers to bypass rules by using chunked transfer coding with a capitalized Chunked value in the Transfer-Encoding HTTP header...
CVE-2013-5705
apache2/modsecurity.c in ModSecurity before 2.7.6 allows remote attackers to bypass rules by using chunked transfer coding with a capitalized Chunked value in the Transfer-Encoding HTTP header...
PT-2014-2947
Name of the Vulnerable Software and Affected Versions ModSecurity versions prior to 2.7.6 Description The issue allows remote attackers to bypass rules by using chunked transfer coding with a capitalized Chunked value in the Transfer-Encoding HTTP header. Recommendations For versions prior to...
CVE-2013-5705: Undefined Security Weakness
apache2/modsecurity.c in ModSecurity before 2.7.6 allows remote attackers to bypass rules by using chunked transfer coding with a capitalized Chunked value in the Transfer-Encoding HTTP header...
Vulnerability of small summary: the browser in those strange logic-vulnerability warning-the black bar safety net
0x00 introduction As early as a few years ago to see a book the dig 0day act, which introduced a sogou browser vulnerabilities-the forge website, although after a lapse of four years, sogou still made the same mistake, but at that time I only know that there is this treatment, but suffer from on...
[SECURITY] Fedora 20 Update: fwsnort-1.6.4-1.fc20
fwsnort translates Snort rules into equivalent iptables rules and generates a Bourne shell script that implements the resulting iptables commands. In addition, fwsnort optionally uses the IPTables::Parse module to parse the iptables ruleset on the machine to determine which Snort rules are applic...
McAfee VirusScan Enterprise 8.5 / 8.7 hcp:// Security Bypass (SB10012)
The remote Windows host has McAfee VirusScan Enterprise version 8.5 or 8.7. It is, therefore, affected by a security bypass vulnerability due to a failure to properly interact with the processing of 'hcp://' URLs. This can lead to malware execution prior to detection. C Tenable Network Security,...
CVE-2013-7143
Cross-site scripting XSS vulnerability in Open-Xchange OX AppSuite 7.4.1 allows remote attackers to inject arbitrary web script or HTML via the title in a mail filter rule...
Cross site scripting
Cross-site scripting XSS vulnerability in Open-Xchange OX AppSuite 7.4.1 allows remote attackers to inject arbitrary web script or HTML via the title in a mail filter rule...
CVE-2013-7143
Cross-site scripting XSS vulnerability in Open-Xchange OX AppSuite 7.4.1 allows remote attackers to inject arbitrary web script or HTML via the title in a mail filter rule...
CVE-2013-7143: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Open-Xchange OX AppSuite 7.4.1 allows remote attackers to inject arbitrary web script or HTML via the title in a mail filter rule...
PT-2014-3274
Name of the Vulnerable Software and Affected Versions Open-Xchange OX AppSuite version 7.4.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the title in a mail filter rule. Recommendations For Open-Xchange OX AppSuite version 7.4.1,...
CloudFlare's Red October Crypto app with two-man rule style Encryption and Decryption
It is always important to secure our system against outside threats i.e. Hackers, but it also required to protect against insider threats. The potential of damage from an Insider threat can be estimated from the example of Edward Snowden who had worked at the NSA, and had authorized access to...