143 matches found
Palo Alto Networks Terminal Services Agent Arbitrary User Forgery Vulnerability
Palo Alto Networks Terminal Services Agent is a terminal services agent program. A security vulnerability exists in Palo Alto Networks Terminal Services Agent that could be exploited by remote attackers to spoof arbitrary users...
Design/Logic Flaw
Palo Alto Networks Terminal Services Agent before 7.0.7 allows attackers to spoof arbitrary users via unspecified vectors...
CVE-2017-5328
The CVE-2017-5328 entry concerns Palo Alto Networks Terminal Server Agent. Connected sources confirm a spoofing vulnerability that allows an attacker to impersonate another authenticated user, affecting Terminal Server Agent versions up to 7.0.6 (and potentially 6.0 per advisory, before 7.0.7). T...
CVE-2017-5328
Palo Alto Networks Terminal Services Agent before 7.0.7 allows attackers to spoof arbitrary users via unspecified vectors...
Apple macOS 10.12.1 iOS 10.2 - powerd Arbitrary Port Replacement
Apple macOS 10.12.1 iOS 10.2 - powerd Arbitrary Port Replacement / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=976 powerd running as root hosts the com.apple.PowerManagement.control mach service. It checks in with launchd to get a server port and then wraps that in a CFPort:...
Revive Adserver Multiple Vulnerabilities
Revive Adserver is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:revive:adserver"; if...
IBM Security Identity Manager User Forgery Vulnerability
IBM Security Identity Manager ISIM is a suite of identity management and governance solutions from IBM in the United States. The solution automates the creation, modification, re-authentication and termination of user privileges throughout the user lifecycle and supports policy-based password...
Tableau Sparkler Server User Forgery Vulnerability
Tableau is a very easy to get started with the data analysis software, just import data through a simple point and click, mouse drag and drop to generate reports. A security vulnerability exists in Salesforce Canvas Adapter for Tableau that allows remote attackers to exploit the vulnerability to...
Apache Storm User Interface Arbitrary Code Execution Vulnerability
Apache Storm is a free, open source distributed real-time computing system. Apache Storm has a security vulnerability that allows a remote user to connect to the UI backend program and execute arbitrary code on the system. Using Kerberos authentication for users, remote users can spoof arbitrary...
CVE-2014-1682
The API in Zabbix before 1.8.20rc1, 2.0.x before 2.0.11rc1, and 2.2.x before 2.2.2rc1 allows remote authenticated users to spoof arbitrary users via the user name in a user.login request...
DEBIAN-CVE-2014-1682
The API in Zabbix before 1.8.20rc1, 2.0.x before 2.0.11rc1, and 2.2.x before 2.2.2rc1 allows remote authenticated users to spoof arbitrary users via the user name in a user.login request...
Cross site request forgery (csrf)
The API in Zabbix before 1.8.20rc1, 2.0.x before 2.0.11rc1, and 2.2.x before 2.2.2rc1 allows remote authenticated users to spoof arbitrary users via the user name in a user.login request...
CVE-2014-1682
The API in Zabbix before 1.8.20rc1, 2.0.x before 2.0.11rc1, and 2.2.x before 2.2.2rc1 allows remote authenticated users to spoof arbitrary users via the user name in a user.login request...
CVE-2014-1682
The API in Zabbix before 1.8.20rc1, 2.0.x before 2.0.11rc1, and 2.2.x before 2.2.2rc1 allows remote authenticated users to spoof arbitrary users via the user name in a user.login request...
CVE-2014-1682: Improper Authentication
The API in Zabbix before 1.8.20rc1, 2.0.x before 2.0.11rc1, and 2.2.x before 2.2.2rc1 allows remote authenticated users to spoof arbitrary users via the user name in a user.login request...
CVE-2013-4340
wp-admin/includes/post.php in WordPress before 3.6.1 allows remote authenticated users to spoof the authorship of a post by leveraging the Author role and providing a modified userID parameter...
PHPValley Micro Jobs Site Script - Spoofing
PHPValley Micro Jobs Site Script - Spoofing source: https://www.securityfocus.com/bid/59536/info PHPValley Micro Jobs Site Script is prone to a vulnerability that allows attackers to spoof another user. Attackers can exploit this issue to spoof another user; other attacks are also possible...
PHPValley Micro Jobs Site Script - Spoofing
source: https://www.securityfocus.com/bid/59536/info PHPValley Micro Jobs Site Script is prone to a vulnerability that allows attackers to spoof another user. Attackers can exploit this issue to spoof another user; other attacks are also possible. PHPValley Micro Jobs Site Script 1.01 is...
CVE-2012-2669
The main function in tools/hv/hvkvpdaemon.c in hypervkvpd, as distributed in the Linux kernel before 3.4.5, does not validate the origin of Netlink messages, which allows local users to spoof Netlink communication via a crafted connector message...
CVE-2012-3520
The Netlink implementation in the Linux kernel before 3.2.30 does not properly handle messages that lack SCMCREDENTIALS data, which might allow local users to spoof Netlink communication via a crafted message, as demonstrated by a message to 1 Avahi or 2 NetworkManager...