7569 matches found
CVE-2013-5096
Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly implement role-based access control, which allows remote authenticated users to modify the configuration by leveraging the read-only privilege, aka PR 863804...
CVE-2013-5097
Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly restrict access to the list of user accounts and their MD5 password hashes, which makes it easier for remote authenticated users to obtain sensitive information via a dictionary attack, a...
Design/Logic Flaw
Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly restrict access to the list of user accounts and their MD5 password hashes, which makes it easier for remote authenticated users to obtain sensitive information via a dictionary attack, a...
Design/Logic Flaw
Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly implement role-based access control, which allows remote authenticated users to modify the configuration by leveraging the read-only privilege, aka PR 863804...
CVE-2013-5095
Cross-site scripting XSS vulnerability in the web-based interface in Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka PR 884469...
Cross site scripting
Cross-site scripting XSS vulnerability in the web-based interface in Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka PR 884469...
CVE-2013-5096
Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly implement role-based access control, which allows remote authenticated users to modify the configuration by leveraging the read-only privilege, aka PR 863804...
CVE-2013-5096
CVE-2013-5096 concerns Juniper Junos Space before 13.1R1.6. The issue is a flawed role-based access control implementation that allows remote authenticated users to modify device configurations by abusing the read-only privilege (PR 863804). The affected product is Junos Space (JA1500 appliance a...
CVE-2013-5095
CVE-2013-5095 is a documented XSS vulnerability in the web-based interface of Juniper Junos Space prior to 13.1R1.6 (e.g., JA1500 and related deployments). The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The available sources confirm the affected ...
CVE-2013-5097
Juniper Junos Space before 13.1R1.6 (JA1500 and other contexts) exposes the list of user accounts and their MD5 password hashes due to improper access restriction, enabling remote authenticated users to obtain sensitive information via a dictionary attack. Affected are Junos Space deployments pri...
CVE-2013-5097
Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly restrict access to the list of user accounts and their MD5 password hashes, which makes it easier for remote authenticated users to obtain sensitive information via a dictionary attack, a...
CVE-2013-5095
Cross-site scripting XSS vulnerability in the web-based interface in Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka PR 884469...
Mitigating the LdrHotPatchRoutine DEP/ASLR bypass with MS13-063
Today we released MS13-063 which includes a defense in depth change to address an exploitation technique that could be used to bypass two important platform mitigations: Address Space Layout Randomization ASLR and Data Execution Prevention DEP. As we’ve described in the past, these mitigations pl...
[SECURITY] Fedora 17 Update: filelight-4.10.5-1.fc17
Filelight allows you to quickly understand exactly where your diskspace is being used by graphically representing your file system...
whois-ip NSE Script
Queries the WHOIS services of Regional Internet Registries RIR and attempts to retrieve information about the IP Address Assignment which contains the Target IP Address. The fields displayed contain information about the assignment and the organisation responsible for managing the address space...
[SECURITY] Fedora 18 Update: kdf-4.10.5-1.fc18
KDiskFree displays the available file devices hard drive partitions, floppy and CD/DVD drives, etc. along with information on their capacity, free space, type and mount point...
[SECURITY] Fedora 18 Update: filelight-4.10.5-1.fc18
Filelight allows you to quickly understand exactly where your diskspace is being used by graphically representing your file system...
openafs -- single-DES cell-wide key brute force vulnerability
OpenAFS Project reports: The small size of the DES key space permits an attacker to brute force a cell's service key and then forge traffic from any user within the cell. The key space search can be performed in under 1 day at a cost of around $100 using publicly available services...
Insufficient Storage for VSS Error "0x8004231F or Error: VSSControl: -2147467259"
Challenge The following error occurs during a task that utilizes the Microsoft VSS subsystem: VSSControl: -2147467259 Backup job failed. Cannot create a shadow copy of the volumes containing writer's data. VSS asynchronous operation is not completed. Operation: Shadow copies commit. Code:...