2865 matches found
SA-CONTRIB-2012-123 - Shibboleth authentication - Access Bypass
The Shibboleth authentication module provides user authentication with Shibboleth single sign-on systems both v1.3 and v2.0 as well as some authorization features automatic role assignment based on Shibboleth attributes. The module doesn't sufficiently confirm the user's active status in Drupal...
CVE-2011-4592
The command-line cron implementation in Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 does not properly interact with IP blocking, which might allow remote attackers to bypass intended IP address restrictions by leveraging a configuration in which IP blocking was disabled to restore cron...
Command injection
The command-line cron implementation in Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 does not properly interact with IP blocking, which might allow remote attackers to bypass intended IP address restrictions by leveraging a configuration in which IP blocking was disabled to restore cron...
CVE-2011-4592
The command-line cron implementation in Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 does not properly interact with IP blocking, which might allow remote attackers to bypass intended IP address restrictions by leveraging a configuration in which IP blocking was disabled to restore cron...
CVE-2011-4592
The CVE-2011-4592 issue affects Moodle’s command-line cron on Moodle 2.0.x (before 2.0.6) and 2.1.x (before 2.1.3). The root cause is improper interaction with IP blocking, which could allow remote attackers to bypass IP restrictions by exploiting a configuration where IP blocking was disabled to...
CVE-2011-4592: Undefined Security Weakness
The command-line cron implementation in Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 does not properly interact with IP blocking, which might allow remote attackers to bypass intended IP address restrictions by leveraging a configuration in which IP blocking was disabled to restore cron...
PT-2012-1924 · Moodle · Moodle
Name of the Vulnerable Software and Affected Versions: Moodle versions 2.0.x through 2.0.5 Moodle versions 2.1.x through 2.1.2 Description: The issue is related to the command-line cron implementation, which does not properly interact with IP blocking. This might allow remote attackers to bypass...
Microsoft IE属性移除远程代码执行漏洞 (MS12-044)
CVE ID: CVE-2012-1524 Microsoft Internet Explorer是微软公司推出的一款网页浏览器。 Internet Explorer访问已经删除的对象时存在安全漏洞，可通过执行任意代码破坏内存。 0 Microsoft Internet Explorer 临时解决方法： 如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁： 将互联网和本地内联网安全区域设置为“高”阻止这些区域中的ActiveX控件和活动脚本。 将IE配置为运行活动脚本之前提示或禁止。 厂商补丁： Microsoft ---------...
Pages can prevent navigation to a target page, spoofing the address field – Opera Security Advisories
When a user types a new URL for the browser to load, the currently active page may detect when the new page is about to load and prevent the navigation, while still leaving the new URL displayed in the address bar. This can then be used to spoof the URL of the target page. The malicious page woul...
SeaMonkey 2.x < 2.10 Multiple Vulnerabilities
Binary data 6496.prm...
Mozilla Thunderbird < 13.0 Multiple Vulnerabilities
The installed version of Thunderbird is earlier than 13.0 and thus, is potentially affected by the following security issues : - An error exists in the ASN.1 decoder when handling zero length items that can lead to application crashes. CVE-2012-0441 - Multiple memory corruption errors exist...
SeaMonkey < 2.10.0 Multiple Vulnerabilities
The installed version of SeaMonkey is earlier than 2.10.0. Such versions are potentially affected by the following security issues : - An error exists in the ASN.1 decoder when handling zero length items that can lead to application crashes. CVE-2012-0441 - Multiple memory corruption errors exist...
Thunderbird 10.0.x < 10.0.5 Multiple Vulnerabilities (Mac OS X)
The installed version of Thunderbird 10.0.x is potentially affected by the following security issues : - An error exists in the ASN.1 decoder when handling zero length items that can lead to application crashes. CVE-2012-0441 - Multiple memory corruption errors exist. CVE-2012-1937, CVE-2012-1939...
Fedora Update for python-tornado FEDORA-2012-8217
Check for the Version of python-tornado OpenVAS Vulnerability Test Fedora Update for python-tornado FEDORA-2012-8217 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...
[SECURITY] Fedora 15 Update: python-tornado-2.2.1-1.fc15
Tornado is an open source version of the scalable, non-blocking web server and tools. The framework is distinct from most mainstream web server frameworks and certainly most Python frameworks because it is non-blocking and reasonably fast. Because it is non-blocking and uses epoll, it can handle...
[SECURITY] Fedora 17 Update: python-tornado-2.2.1-1.fc17
Tornado is an open source version of the scalable, non-blocking web server and tools. The framework is distinct from most mainstream web server frameworks and certainly most Python frameworks because it is non-blocking and reasonably fast. Because it is non-blocking and uses epoll, it can handle...
Design/Logic Flaw
The Network Threat Protection module in the Manager component in Symantec Endpoint Protection SEP 11.0.600x through 11.0.700x on Windows Server 2003 allows remote attackers to cause a denial of service web-server outage, or daemon crash or hang via a flood of packets that triggers automated...
CVE-2012-1821
The Network Threat Protection module in the Manager component in Symantec Endpoint Protection SEP 11.0.600x through 11.0.700x on Windows Server 2003 allows remote attackers to cause a denial of service web-server outage, or daemon crash or hang via a flood of packets that triggers automated...
tomcat: security manager restrictions bypass
Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when sendfile is enabled for the HTTP APR or HTTP NIO connector, does not validate certain request attributes, which allows local users to bypass intended file access restrictions or cause a denial of service infinite lo...
Sitecom WLM-2501 - Multiple Cross-Site Request Forgery Vulnerabilities
+--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Sitecom WLM-2501 new Multiple CSRF Vulnerabilities Date : 22-03-2012 Author : Ivano Binetti http://www.ivanobinetti.com Vendor site :...