1453 matches found
Mozilla Firefox ESR Multiple Vulnerabilities - August12 (Mac OS X)
This host is installed with Mozilla Firefox ESR and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillafirefoxesrmultvulnaug12macosx.nasl 6086 2017-05-09 09:03:30Z teissa $ Mozilla Firefox ESR Multiple Vulnerabilities - August12 Mac OS X Authors: Arun Kallavi Copyright...
Mozilla Firefox ESR Multiple Vulnerabilities (Aug 2012) - Windows
Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mozilla Thunderbird ESR Multiple Vulnerabilities (Aug 2012) - Windows
Mozilla Thunderbird ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mozilla Firefox ESR Multiple Vulnerabilities (Aug 2012) - Mac OS X
Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
activemq: Unauthenticated access to web console
The web console in Apache ActiveMQ before 5.8.0 does not require authentication, which allows remote attackers to obtain sensitive information or cause a denial of service via HTTP requests...
Directory traversal
Directory traversal vulnerability in the Web Console in IBM Data Studio 3.1.0 and 3.1.1 allows remote attackers to read arbitrary files via unspecified vectors...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the Web Console in IBM Data Studio 3.1.0 and 3.1.1 allows remote attackers to hijack the authentication of arbitrary users for requests that access monitored database information...
CVE-2013-2980
Cross-site request forgery CSRF vulnerability in the Web Console in IBM Data Studio 3.1.0 and 3.1.1 allows remote attackers to hijack the authentication of arbitrary users for requests that access monitored database information...
CVE-2013-2981
CVE-2013-2981 affects IBM Data Studio Web Console versions 3.1.0 and 3.1.1. A directory traversal vulnerability allows a remote attacker who has authenticated to the web application to read arbitrary files from the server filesystem. The root cause is improper validation of file paths in the Web ...
CVE-2013-1182
The login page in the Web Console in the Manager component in Cisco Unified Computing System UCS before 1.02h, 1.1 before 1.11j, and 1.3x allows remote attackers to bypass LDAP authentication via a malformed request, aka Bug ID CSCtc91207...
Authentication flaw
The login page in the Web Console in the Manager component in Cisco Unified Computing System UCS before 1.02h, 1.1 before 1.11j, and 1.3x allows remote attackers to bypass LDAP authentication via a malformed request, aka Bug ID CSCtc91207...
CVE-2013-1182
The login page in the Web Console in the Manager component in Cisco Unified Computing System UCS before 1.02h, 1.1 before 1.11j, and 1.3x allows remote attackers to bypass LDAP authentication via a malformed request, aka Bug ID CSCtc91207...
Belkin 2307 Unprotected Console (HTTP)
The remote Belkin 2307 Web Console is not protected by a password. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
ARRIS 2307 Unprotected Console (HTTP)
The remote ARRIS 2307 Web Console is not protected by a password. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2013-3060
The web console in Apache ActiveMQ before 5.8.0 does not require authentication, which allows remote attackers to obtain sensitive information or cause a denial of service via HTTP requests...
Authentication flaw
The web console in Apache ActiveMQ before 5.8.0 does not require authentication, which allows remote attackers to obtain sensitive information or cause a denial of service via HTTP requests...
CVE-2013-3060
The web console in Apache ActiveMQ before 5.8.0 does not require authentication, which allows remote attackers to obtain sensitive information or cause a denial of service via HTTP requests...
CVE-2013-3060
CVE-2013-3060 affects Apache ActiveMQ pre-5.8.0, where the web console did not require authentication. This allows remote attackers to obtain sensitive information or cause a denial of service via HTTP requests. Public sources in the provided documents (e.g., ActiveMQ advisories and related Red H...