9480 matches found
CVE-2013-6975: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in the command-line interface in Cisco NX-OS 6.22a and earlier allows local users to read arbitrary files via unspecified input, aka Bug ID CSCul05217...
PT-2014-3238
Name of the Vulnerable Software and Affected Versions Cisco NX-OS versions 6.22a and earlier Description A directory traversal issue in the command-line interface allows local users to read arbitrary files via unspecified input. Recommendations For Cisco NX-OS versions 6.22a and earlier, at the...
Fedora Update for fish FEDORA-2014-5794
Check for the Version of fish OpenVAS Vulnerability Test Fedora Update for fish FEDORA-2014-5794 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...
[SECURITY] Fedora 19 Update: fish-2.1.0-9.fc19
fish is a fully-equipped command line shell like bash or zsh that is smart and user-friendly. fish supports powerful features like syntax highlighting, autosuggestions, and tab completions that just work, with nothing to learn or configure...
[SECURITY] Fedora 20 Update: fish-2.1.0-9.fc20
fish is a fully-equipped command line shell like bash or zsh that is smart and user-friendly. fish supports powerful features like syntax highlighting, autosuggestions, and tab completions that just work, with nothing to learn or configure...
CVE-2013-7110
Transifex command-line client before 0.10 does not validate X.509 certificates for data transfer connections, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-2073...
PYSEC-2014-72
Transifex command-line client before 0.10 does not validate X.509 certificates for data transfer connections, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-2073...
CVE-2013-2073
Removed by vendor...
CVE-2013-2073
Transifex command-line client before 0.9 does not validate X.509 certificates, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate...
CVE-2013-7110
Transifex command-line client before 0.10 does not validate X.509 certificates for data transfer connections, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-2073...
PT-2014-2544
Name of the Vulnerable Software and Affected Versions Transifex command-line client versions prior to 0.9 Description The issue concerns a failure to validate X.509 certificates, allowing man-in-the-middle attackers to spoof a Transifex server by using an arbitrary certificate. Recommendations Fo...
CVE-2013-2073: Improper Input Validation
Transifex command-line client before 0.9 does not validate X.509 certificates, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate...
PT-2014-3263
Name of the Vulnerable Software and Affected Versions Transifex Command-line Client versions prior to 0.10 Description The issue allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate because it does not validate X.509 certificates for data transfer connection...
Fedora Update for wireshark FEDORA-2014-5514
Check for the Version of wireshark OpenVAS Vulnerability Test Fedora Update for wireshark FEDORA-2014-5514 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...
CVE-2013-7110: Improper Input Validation
Transifex command-line client before 0.10 does not validate X.509 certificates for data transfer connections, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-2073...
Cisco TelePresence TC and TE Software u-boot Buffer Overflow Vulnerability
A vulnerability in the implementation of executable utilities that use the universal bootloader u-boot compiler of Cisco TelePresence TC and TE Software could allow an authenticated, local attacker to create a buffer overflow and possibly execute arbitrary code on the affected system. The...
CVE-2013-6990
FortiGuard FortiAuthenticator before 3.0 allows remote administrators to gain privileges via the command line interface...
Design/Logic Flaw
FortiGuard FortiAuthenticator before 3.0 allows remote administrators to gain privileges via the command line interface...
CVE-2013-6990
FortiGuard FortiAuthenticator before 3.0 allows remote administrators to gain privileges via the command line interface...
OWASP ZAP v2.3.0 - An easy to use integrated penetration testing tool for finding vulnerabilities in web applications
OWASP Zed Attack Proxy ZAP An easy to use integrated penetration testing tool for finding vulnerabilities in web applications. It is designed to be used by people with a wide range of security experience and as such is ideal for developers and functional testers who are new to penetration testing...