299 matches found
PT-2014-2431
Name of the Vulnerable Software and Affected Versions libpam-pgsql version 0.7 Description The issue allows remote attackers to bypass authentication by providing a crafted password, due to the improper handling of a NULL value returned by the password search query. Recommendations For libpam-pgs...
CVE-2013-2219
The Red Hat Directory Server before 8.2.11-13 and 389 Directory Server do not properly restrict access to entity attributes, which allows remote authenticated users to obtain sensitive information via a search query for the attribute...
Design/Logic Flaw
The Red Hat Directory Server before 8.2.11-13 and 389 Directory Server do not properly restrict access to entity attributes, which allows remote authenticated users to obtain sensitive information via a search query for the attribute...
UBUNTU-CVE-2013-2219
The Red Hat Directory Server before 8.2.11-13 and 389 Directory Server do not properly restrict access to entity attributes, which allows remote authenticated users to obtain sensitive information via a search query for the attribute...
CVE-2013-2219
The Red Hat Directory Server before 8.2.11-13 and 389 Directory Server do not properly restrict access to entity attributes, which allows remote authenticated users to obtain sensitive information via a search query for the attribute...
CVE-2013-2219
The Red Hat Directory Server before 8.2.11-13 and 389 Directory Server do not properly restrict access to entity attributes, which allows remote authenticated users to obtain sensitive information via a search query for the attribute...
CVE-2013-2219: Undefined Security Weakness
The Red Hat Directory Server before 8.2.11-13 and 389 Directory Server do not properly restrict access to entity attributes, which allows remote authenticated users to obtain sensitive information via a search query for the attribute...
PT-2013-3605
Name of the Vulnerable Software and Affected Versions Red Hat Directory Server versions prior to 8.2.11-13 389 Directory Server affected versions not specified Description The issue allows remote authenticated users to obtain sensitive information via a search query for a specific attribute, due ...
PT-2013-1688
Name of the Vulnerable Software and Affected Versions Red Hat Certificate System versions prior to 8.1.3 Description The issue affects the token processing system in Red Hat Certificate System, allowing remote attackers to cause a denial of service. This is achieved by sending certain unspecified...
CVE-2012-1164
slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial of service assertion failure and daemon exit via an LDAP search query with attrsOnly set to true, which causes empty attributes to be returned...
CVE-2012-1164
slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial of service assertion failure and daemon exit via an LDAP search query with attrsOnly set to true, which causes empty attributes to be returned...
CVE-2012-1164
slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial of service assertion failure and daemon exit via an LDAP search query with attrsOnly set to true, which causes empty attributes to be returned...
CVE-2012-1164: Improper Restriction of Operations within the Bounds of a Memory Buffer
slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial of service assertion failure and daemon exit via an LDAP search query with attrsOnly set to true, which causes empty attributes to be returned...
PT-2012-1160
Name of the Vulnerable Software and Affected Versions OpenLDAP versions prior to 2.4.30 Description The issue allows remote attackers to cause a denial of service, leading to an assertion failure and daemon exit, via an LDAP search query with attrsOnly set to true. This results in empty attribute...
socialware V2.2 XSS / Upload Vulnerability
Exploit for php platform in category web applications ========================================== socialware V2.2 XSS / Upload Vulnerability ========================================== Exploit Title:Upload Vulnerability and XSS in socialware V2.2 www.iscripts.com Version: Web Application vendor...
Socialware 2.2 - Upload Cross-Site Scripting
Socialware 2.2 - Upload Cross-Site Scripting Exploit Title:Upload Vulnerability and XSS in socialware V2.2 www.iscripts.com Version: Web Application vendor :www.iscripts.com Date: 29 apr,2010 Dork:Powered by iScripts SocialWare Author:Sid3^effects Code :...
HLstatsX Community Edition 1.6.5 Cross Site Scripting
------------------------------------------- HLstatsX CE 1.6.5 XSS Vulnerability Author: Sora Contact: vhr95zw at hotmail dot com Website: http://greyhathackers.wordpress.com/ DESCRIPTION: HLstatsX Community Edition suffers from a XSS vulnerability. PoC:...
Oracle Secure Enterprise Search XSS
Digital Security Research Group DSecRG Advisory DSECRG-09-025 http://dsecrg.com/pages/vul/show.php?id=125 Application: Oracle Secure Enterprise Search SES Versions Affected: Oracle Secure Enterprise Search SES version 10.1.8.2.0 Vendor URL: http://www.oracle.com Bugs: XSS Exploits: YES Reported:...
[DSECRG-09-025] Oracle Secure Enterprise Search 10.1.8 Linked XSS vulnerability
Digital Security Research Group DSecRG Advisory DSECRG-09-025 http://dsecrg.com/pages/vul/show.php?id=125 Application: Oracle Secure Enterprise Search SES Versions Affected: Oracle Secure Enterprise Search SES version 10.1.8.2.0 Vendor URL: http://www.oracle.com Bugs: XSS Exploits: YES Reported:...