4074 matches found
Ubuntu: Security Advisory (USN-3220-3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
UBUNTU-CVE-2017-6471
In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a WSP infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wsp.c by validating the capability length...
CVE-2016-8643
In Moodle 2.x and 3.x, non-admin site managers may accidentally edit admins via web services...
CVE-2016-8643
In Moodle 2.x and 3.x, non-admin site managers may accidentally edit admins via web services...
Code injection
In Moodle 2.x and 3.x, non-admin site managers may accidentally edit admins via web services...
UBUNTU-CVE-2016-8643
In Moodle 2.x and 3.x, non-admin site managers may accidentally edit admins via web services...
CVE-2016-8643
In Moodle 2.x and 3.x, non-admin site managers may accidentally edit admins via web services...
CVE-2016-8643
Technical details (affected product/version, root cause, impact, and fixes) are not publicly provided in the supplied documents. Please monitor for updates from vendors and security bodies.
CVE-2016-8643
In Moodle 2.x and 3.x, non-admin site managers may accidentally edit admins via web services...
CVE-2016-8643
In Moodle 2.x and 3.x, non-admin site managers may accidentally edit admins via web services...
CVE-2016-8643: Improper Access Control
In Moodle 2.x and 3.x, non-admin site managers may accidentally edit admins via web services...
PT-2017-1085
Name of the Vulnerable Software and Affected Versions Moodle versions 2.x through 3.x Description The issue is related to insufficient access control in the administration service of the Moodle learning management system. This can potentially allow a remote attacker to compromise the...
CVE-2016-10086
RESTful web services in CA Service Desk Manager 12.9 and CA Service Desk Management 14.1 might allow remote authenticated users to read or modify task information by leveraging incorrect permissions applied to a RESTful request...
Cross site request forgery (csrf)
RESTful web services in CA Service Desk Manager 12.9 and CA Service Desk Management 14.1 might allow remote authenticated users to read or modify task information by leveraging incorrect permissions applied to a RESTful request...
CVE-2016-10086
CA Service Desk Manager 12.9 and CA Service Desk Management 14.1 contain a RESTful services vulnerability (CVE-2016-10086) where remote authenticated users could read or modify task information due to incorrect permissions on RESTful requests. The affected components are REST endpoints handling t...
CVE-2016-10086
RESTful web services in CA Service Desk Manager 12.9 and CA Service Desk Management 14.1 might allow remote authenticated users to read or modify task information by leveraging incorrect permissions applied to a RESTful request...
CVE-2016-10086: Undefined Security Weakness
RESTful web services in CA Service Desk Manager 12.9 and CA Service Desk Management 14.1 might allow remote authenticated users to read or modify task information by leveraging incorrect permissions applied to a RESTful request...
HPE Helion Eucalyptus Security Bypass Vulnerability
HPE Helion Eucalyptus is an open source for building Amazon Web Services AWS compatible private cloud solutions. A security bypass vulnerability exists in HPE Helion Eucalyptus, which allows remote attackers to submit a special request to perform an unauthorized operation...
Description of the cumulative update package for Communicator 2007 R2: November 2010
Describes the issues that are fixed in the November, 2010 cumulative update package for Communicator 2007 R2.SummaryThis article describes the Microsoft Office Communicator 2007 R2 issues that are fixed in the update for Communicator 2007 R2 that is dated November 2010.This article describes the...
