2384 matches found
Regression - "Browse Project" permission for "Reporter" grants users to see projects they are not permitted to.
Regression of JRA-4935 When i add the "Reporter" to the "Browse Project" Permission of one project. This project instantly becomes visible to ALL usersvia the project table portlet, if they have any kind of permission to see this project or not. So all users can see this project, but can't see an...
Restricted Work Log entries show in the Activity Stream in JIRA Server
h3. Summary When using a group comment visibility on worklogs the restriction is not applied in the Activity Stream. h3. Steps to Reproduce Set up a test user JIRA Users. Enable comment visibility to support groups as per Configuring JIRA...
Restricted Work Log entries show in the Activity Stream in JIRA Server
h3. Summary When using a group comment visibility on worklogs the restriction is not applied in the Activity Stream. h3. Steps to Reproduce Set up a test user JIRA Users. Enable comment visibility to support groups as per Configuring JIRA...
Restricted Work Log entries show in the Activity Stream in JIRA Server
h3. Summary When using a group comment visibility on worklogs the restriction is not applied in the Activity Stream. h3. Steps to Reproduce Set up a test user JIRA Users. Enable comment visibility to support groups as per Configuring JIRA...
SolarWinds Log & Event Manager for Log Management and SEIM Security
SolarWinds® Log & Event Manager LEM, a full-function Security & Information Event Management SIEM solution, delivers powerful log management capabilities in a highly affordable, easy-to-deploy virtual appliance. SolarWinds LEM combines real-time log analysis, event correlation, and a groundbreaki...
SA-CONTRIB-2013-034 - Node Parameter Control - Access Bypass
This module enables you to limit the visibility of the fields on the node edit form. The module doesn't sufficiently check access before allowing users to view and edit the configuration options allowing anonymous and authenticated users the ability to view and edit the configuration options. CVE...
CVE-2012-6274
creationtimestamp| type| source ---|---|--- 2013-02-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24528 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/bigantserverdupfupload.rb 2025-02-06 03:13:41+00:00...
Grant "Browse Project" permission to "Current Assignee" makes project visible to all users
panel:bgColor=e7f4fa NOTE: This bug report is for JIRA Server. Using JIRA Cloud? See the corresponding bug report|http://jira.atlassian.com/browse/JRACLOUD-31720. panel h3. Summary This bug is related to closed bug ticket https://jira.atlassian.com/browse/JRA-8950 When the Current Assignee is giv...
Grant "Browse Project" permission to "Current Assignee" makes project visible to all users
h3. Summary This bug is related to closed bug ticket https://jira.atlassian.com/browse/JRA-8950 When the Current Assignee is given the Browse Project Permission, other users are able to view this Project. They can't necessarily view issues or create issues, but they can see the project from the...
Fedora Update for proftpd FEDORA-2013-0483
Check for the Version of proftpd OpenVAS Vulnerability Test Fedora Update for proftpd FEDORA-2013-0483 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
FreeBSD : chromium -- multiple vulnerabilities (51f84e28-444e-11e2-8306-00262d5ed8ee)
Google Chrome Releases reports : 158204 High CVE-2012-5139: Use-after-free with visibility events. Credit to Chamal de Silva. 159429 High CVE-2012-5140: Use-after-free in URL loader. Credit to Chamal de Silva. 160456 Medium CVE-2012-5141: Limit Chromoting client plug-in instantiation. Credit to...
Facebook Streamlines Privacy Controls in Latest Update
In what may be the least surprising news of the day, Facebook is again making changes to its privacy controls. The existing privacy controls, which we explored in depth in our How-To Video on the subject, are a bit convoluted. So it makes sense that product manager Samuel Lessin is rolling out so...
CVE-2012-5139
Use-after-free vulnerability in Google Chrome before 23.0.1271.97 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to visibility events...
CVE-2012-5139
Use-after-free vulnerability in Google Chrome before 23.0.1271.97 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to visibility events...
Design/Logic Flaw
Use-after-free vulnerability in Google Chrome before 23.0.1271.97 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to visibility events...
CVE-2012-5139
CVE-2012-5139 is a use-after-free vulnerability in Google Chrome/Chromium related to visibility events, affecting Chrome before 23.0.1271.97 and potentially causing denial of service or other impacts. Connected advisories confirm multiple Chromium/Chrome CVEs with fixes in updated Chromium/Chrome...
CVE-2012-5139
Removed by vendor...
Beat Websites 1.0 SQL Injection
.:. Author : Metropolis .:. Home : www.metropolis.fr.cr .:. Script : Beat Websites .:. Version : 1.0 .:. Download Script: http://beatwebsites.com/ .:. .:. Information Script: .:. You to Can Make Money Running Your Own Beat Website and Keep 100% of Your Profits! .:. Take full control of your beat...
Adequate Attack Data and Threat Information Sharing No Longer a Luxury
BOSTON – While some industry groups such as the Financial Services Information Sharing and Analysis Center FS-ISAC and cross-industry groups such as the Advanced Cyber Security Center ACSC facilitate the exchange of threat information, for the most part organizations are still hamstrung by legal...
SA-CONTRIB-2012-166 - Table of Contents - Access Bypass
This module enables you to generates a list of select header tags in a box that looks like a table of contents or summary. The links added to that box point to the headers so users can quickly access each section of your documents. The module doesn't sufficiently check for node access restriction...