8231 matches found
PT-2011-4348
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 5 Description The issue arises from the Data Access component's improper handling of multiple user accounts on the same mail server. This allows local users to bypass intended access restrictions by leveraging a...
CVE-2011-3155: Undefined Security Weakness
Unspecified vulnerability in HP Onboard Administrator OA 3.21 through 3.31 allows remote attackers to bypass intended access restrictions via unknown vectors...
Cybozu Office vulnerable in restricting access
Overview Cybozu Office contains a vulnerability in restricting access permissions. Cybozu Office is a groupware.Cybozu Office contains a vulnerability in restricting access permissions. Masako Ohno reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...
PT-2011-1859 · Clearbudget · Clearbudget
Name of the Vulnerable Software and Affected Versions: clearBudget version 0.9.8 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the actionPath parameter in the logic/controller.class.php file. This is a remote file inclusion issue. Note that this issue h...
CVE-2011-2878
Google Chrome before 14.0.835.202 does not properly restrict access to the window prototype, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors...
CVE-2011-2878
Removed by vendor...
CVE-2011-2495
fs/proc/base.c in the Linux kernel before 2.6.39.4 does not properly restrict access to /proc//io files, which allows local users to obtain sensitive I/O statistics by polling a file, as demonstrated by discovering the length of another user's password...
BaserCMS vulnerable to access restriction
Overview BaserCMS contains a vulnerability in access restriction. BaserCMS is an open-source Contents Management System CMS. BaserCMS contains a vulnerability in access restriction where adding a user in the user group "operators" which is created by default when BaserCMS is installed. Masako Ohn...
JVN#16617002: BaserCMS vulnerable to access restriction
BaserCMS is an open-source Contents Management System CMS. BaserCMS contains a vulnerability in access restriction where adding a user in the user group "operators" which is created by default when BaserCMS is installed. Impact Users without administrative privileges may obtain administrative...
ProjectForum XSS vulnerability
Overview ProjectForum 7.0.1.3038 and possibly previous versions, are vulnerable to cross site scripting XSS. Description CourseForum's ProjectForum software fails to sanitize all input fields. As a result, cross site scripting XSS attacks can be conducted. By default, a non-credentialed user can...
CVE-2011-3001: Undefined Security Weakness
Mozilla Firefox 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not prevent manual add-on installation in response to the holding of the Enter key, which allows user-assisted remote attackers to bypass intended access restrictions via a crafted web site that triggers an...
CVE-2011-2372: Undefined Security Weakness
Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not prevent the starting of a download in response to the holding of the Enter key, which allows user-assisted remote attackers to bypass intended access restrictions via a crafted web site...
CVE-2011-3645
Newgen OmniDocs vulnerability CVE-2011-3645 exists in the Omnidocs web interface. Multiple parameter manipulations enable unauthorized privilege escalation and bypass of access controls: modifying FolderRights in doccab/doclist.jsp can grant arbitrary permissions (including rights to add/delete f...
CVE-2011-3645
Newgen OmniDocs allows remote attackers to bypass intended access restrictions via 1 a modified FolderRights parameter to doccab/doclist.jsp, which leads to arbitrary permission changes; or 2 a modified UserIndex parameter to doccab/userprofile/editprofile.jsp, which selects the settings page of ...
PT-2011-4239
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 4.x through 6 Thunderbird versions prior to 7.0 SeaMonkey versions prior to 2.4 Description The issue allows user-assisted remote attackers to bypass intended access restrictions via a crafted web site. This occurs...
CVE-2011-3645: Undefined Security Weakness
Newgen OmniDocs allows remote attackers to bypass intended access restrictions via 1 a modified FolderRights parameter to doccab/doclist.jsp, which leads to arbitrary permission changes; or 2 a modified UserIndex parameter to doccab/userprofile/editprofile.jsp, which selects the settings page of ...
PT-2011-4556
Name of the Vulnerable Software and Affected Versions Newgen OmniDocs affected versions not specified Description The issue allows remote attackers to bypass intended access restrictions. This can be achieved through modifying the FolderRights parameter to the "doccab/doclist.jsp" endpoint, leadi...
Freefloat FTPD Invalid Command Overflow
Added: 09/26/2011 BID: 48704 Background Freefloat is a software series developed directly for handheld terminals. Freefloat FTP Server is a free FTP server for various versions of Windows including Windows CE/Pocket PC. Problem Freefloat FTP Server is vulnerable to a stack overflow as a result of...
Security feature bypass
Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, related to a "security control bypass."...