EUVD-2010-4501

Malware in sbrugna...

Cisco Identity Services Engine XSS

The vulnerability in the web interface of the Cisco Identity Services Engine ISE management platform is related to deficiencies in the security measures used to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

SolidWall WAF DoS

The vulnerability of the SolidWall WAF lies in the deficiencies of its security mechanisms. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

SAP NetWeaver AS ABAP Authentication Bypass Privilege Escalation

The vulnerability of SAP NetWeaver AS ABAP and SAP NetWeaver ABAP integration platforms is related to deficiencies in the authentication process due to incorrect processing of user information via RFC messages, thereby compromising the security between SAP systems. Exploiting this vulnerability...

Exim Privilege Escalation

The vulnerability of the Exim message transfer agent is related to deficiencies in security mechanisms. Exploiting this vulnerability can allow attackers to gain elevated privileges...

Windows GDI+ Unauthorized Access

The vulnerability of the Windows GDI+ component in Windows operating systems is related to deficiencies in security mechanisms. Exploiting this vulnerability can allow an attacker, acting remotely, to gain unauthorized access to protected information...

Windows Function Discovery SSDP Provider Unauthorized Access

The vulnerability of the Windows Function Discovery SSDP Provider component in Windows operating systems is related to deficiencies in the implementation of security mechanisms. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Sanitize Ruby Library Confidential Data Access DoS

The vulnerability of the Sanitize library for the Ruby programming language is related to deficiencies in the security measures used to protect web page structures. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service...

Windows GDI Disclosure

The vulnerability of the Windows GDI component in Windows operating systems is related to deficiencies in security mechanisms. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

Windows GDI Information Disclosure

The vulnerability of the Windows GDI component in Windows operating systems is related to deficiencies in security mechanisms. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

Cisco DNA Center Unauthorized Access

The vulnerability of the Cisco Digital Network Architecture DNA Center management system is related to security mechanisms that are deficient. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

Windows GDI Disclosure

The vulnerability of the Windows GDI component in Microsoft Windows operating systems is related to deficiencies in security mechanisms. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

CVE-2010-4533

offlineimap before 6.3.4 added support for SSL server certificate validation but it is still possible to use SSL v2 protocol, which is a flawed protocol with multiple security deficiencies...

Security feature bypass

offlineimap before 6.3.4 added support for SSL server certificate validation but it is still possible to use SSL v2 protocol, which is a flawed protocol with multiple security deficiencies...

CVE-2010-4533

offlineimap before 6.3.4 added support for SSL server certificate validation but it is still possible to use SSL v2 protocol, which is a flawed protocol with multiple security deficiencies...

Windows GDI Disclosure

The vulnerability of the Windows GDI component in Windows operating systems is related to deficiencies in security mechanisms. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

Windows GDI Disclosure

The vulnerability of the Windows GDI component in Windows operating systems is related to deficiencies in security mechanisms. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

Windows GDI Disclosure

The vulnerability of the Windows GDI component in Windows operating systems is related to deficiencies in security mechanisms. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

Windows GDI Disclosure

The vulnerability of the Windows GDI component in Windows operating systems is related to deficiencies in security mechanisms. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

Oracle MySQL DoS

The vulnerability of the Server: Security component involves deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using the MySQL protocol...