6316 matches found
PT-2015-7854
Name of the Vulnerable Software and Affected Versions Ipsilon versions 0.1.0 through 1.0.0 Description The issue is related to the providers/saml2/admin.py file in the Identity Provider IdP server, where it does not properly check permissions to update the SAML2 Service Provider SP owner. This...
PT-2015-6803
Name of the Vulnerable Software and Affected Versions Ipsilon versions 0.1.0 through 1.0.0 Description The issue is related to the Identity Provider IdP server, where the providers/saml2/admin.py file does not properly check permissions to update the SAML2 Service Provider SP owner. This allows...
CVE-2007-4049
No description is available for this CVE...
DEBIAN-CVE-2015-3255
The polkitbackendactionpoolinit function in polkitbackend/polkitbackendactionpool.c in PolicyKit aka polkit before 0.113 might allow local users to gain privileges via duplicate action IDs in action descriptions...
Design/Logic Flaw
The polkitbackendactionpoolinit function in polkitbackend/polkitbackendactionpool.c in PolicyKit aka polkit before 0.113 might allow local users to gain privileges via duplicate action IDs in action descriptions...
CVE-2015-3255
CVE-2015-3255 affects PolicyKit (polkit) before 0.113. The vulnerability in polkitbackend/polkitbackendactionpool.c (polkit_backend_action_pool_init) may allow local users to gain privileges via duplicate action IDs in action descriptions. Impact is local privilege escalation with partial confide...
CVE-2015-4625
Integer overflow in the authenticationagentnewcookie function in PolicyKit aka polkit before 0.113 allows local users to gain privileges by creating a large number of connections, which triggers the issuance of a duplicate cookie value...
CVE-2015-3255
The polkitbackendactionpoolinit function in polkitbackend/polkitbackendactionpool.c in PolicyKit aka polkit before 0.113 might allow local users to gain privileges via duplicate action IDs in action descriptions...
CVE-2015-3255
The polkitbackendactionpoolinit function in polkitbackend/polkitbackendactionpool.c in PolicyKit aka polkit before 0.113 might allow local users to gain privileges via duplicate action IDs in action descriptions...
UBUNTU-CVE-2015-3255
The polkitbackendactionpoolinit function in polkitbackend/polkitbackendactionpool.c in PolicyKit aka polkit before 0.113 might allow local users to gain privileges via duplicate action IDs in action descriptions...
UBUNTU-CVE-2015-4625
Integer overflow in the authenticationagentnewcookie function in PolicyKit aka polkit before 0.113 allows local users to gain privileges by creating a large number of connections, which triggers the issuance of a duplicate cookie value...
CVE-2015-3255: Undefined Security Weakness
The polkitbackendactionpoolinit function in polkitbackend/polkitbackendactionpool.c in PolicyKit aka polkit before 0.113 might allow local users to gain privileges via duplicate action IDs in action descriptions...
CVE-2015-5196
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-7703. Reason: This candidate is a reservation duplicate of CVE-2015-7703. Notes: All CVE users should reference CVE-2015-7703 instead of this candidate. All references and descriptions in this candidate have been removed to...
Mozilla: Errors in the handling of CORS preflight request headers (MFSA 2015-111)
Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow remote attackers to bypass CORS preflight protection mechanisms by leveraging 1 duplicate cache-key generation or 2 retrieval of a value from an incorrect HTTP Access-Control- response header...
PT-2015-7113
Name of the Vulnerable Software and Affected Versions Web Reference Database refbase versions through 0.9.6 Web Reference Database refbase bleeding-edge versions before 2015-01-08 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via severa...
CVE-2015-4520: Undefined Security Weakness
Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow remote attackers to bypass CORS preflight protection mechanisms by leveraging 1 duplicate cache-key generation or 2 retrieval of a value from an incorrect HTTP Access-Control- response header...
Amazon Linux: Security Advisory (ALAS-2015-463)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-5706
Use-after-free vulnerability in the pathopenat function in fs/namei.c in the Linux kernel 3.x and 4.x before 4.0.4 allows local users to cause a denial of service or possibly have unspecified other impact via OTMPFILE filesystem operations that leverage a duplicate cleanup operation...
CVE-2015-5196
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-7703. Reason: This candidate is a reservation duplicate of CVE-2015-7703. Notes: All CVE users should reference CVE-2015-7703 instead of this candidate. All references and descriptions in this candidate have been removed to...
UBUNTU-CVE-2015-5196
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-7703. Reason: This candidate is a reservation duplicate of CVE-2015-7703. Notes: All CVE users should reference CVE-2015-7703 instead of this candidate. All references and descriptions in this candidate have been removed to...