281 matches found
Device Guard Code Integrity Policy Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session. An attacker who successfully exploited this vulnerability could inject code into a trusted PowerShell process to bypass the Device Guard Code...
Zendo Project Management Software Open Source 9.1.1 SQL Injection Vulnerability
Zendo is an open source project management software. Zendo Project Management Software Open Source 9.1.1 SQL injection vulnerability exists in module\block\control.php page. Due to the lack of filtering of the 'main' parameter, allowing attackers to exploit the vulnerability to obtain sensitive...
CVE-2016-9848
An issue was discovered in phpMyAdmin. phpinfo phpinfo.php shows PHP information including values of HttpOnly cookies. All 4.6.x versions prior to 4.6.5, 4.4.x versions prior to 4.4.15.9, and 4.0.x versions prior to 4.0.10.18 are affected...
CVE-2016-5967
The installation component in IBM Rational Asset Analyzer RAA 6.1.0 before FP10 allows local users to discover the WAS Admin password by reading IM native logs...
SQL Injection Vulnerability in Agricultural Internet of Things Sensing Platform System
Agricultural IoT sensing platform system is an industrial control system. An SQL injection vulnerability exists in the Agricultural Internet of Things Sensing Platform System, which can be exploited by attackers to obtain sensitive information from the database...
Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information
Multiple vulnerabilities exist in the kernel-image-2.6.8-4-686 operating system from Debian GNU/Linux. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
RSA Certificate Manager and Registration Manager Directory Traversal Vulnerability
RSA Certificate Manager and Registration Manager is a certificate management and registration management program. The OneStep component of RSA Certificate Manager and Registration Manager fails to properly validate user input, allowing an attacker to submit a special KCSOSCERRORPAGE parameter to...
IBM Tivoli Security Directory Server Information Disclosure Vulnerability (CNVD-2015-04104)
IBM Tivoli Security Directory Server now known as IBM Security Directory Server, ISDS is a suite of enterprise identity management software from IBM in the United States that uses the Lightweight Directory Access Protocol LDAP. The software provides a trusted identity data infrastructure for...
UBUNTU-CVE-2015-2270
lib/moodlelib.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4, when the theme uses the blocks-regions feature, establishes the course state at an incorrect point in the login-validation process, which allows remote attackers to obtain sensitive course...
Vulnerabilities of the Red Hat Linux operating system, which allow a remote attacker to compromise the accessibility of protected information
The xinetd-2.3.11 package of the Red Hat Linux operating system has multiple vulnerabilities that, if exploited, may lead to a violation of the accessibility of protected information. Exploitation of these vulnerabilities can be carried out remotely...
The vulnerability of the Red Hat Enterprise Linux operating system, which allows a malicious individual to compromise the accessibility of protected information
The vulnerability of the gnome-screensaver-2.16.1 package in the Red Hat Enterprise Linux operating system can lead to a violation of the accessibility of protected information. This vulnerability can be exploited locally...
The vulnerability of the Red Hat Enterprise Linux operating system, which allows a remote attacker to compromise the accessibility of protected information
The vulnerability of the libpurple-tcl-2.5.8 package on the Red Hat Enterprise Linux operating system can lead to a violation of the accessibility of protected information. This vulnerability can be exploited remotely...
The vulnerability of the Red Hat Enterprise Linux operating system, which allows a remote attacker to compromise the accessibility of protected information
The vulnerability of the scsi-target-utils-1.0.4 package in the Red Hat Enterprise Linux operating system can lead to a violation of the accessibility of protected information. This vulnerability can be exploited remotely...
Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information
The multiple vulnerabilities in the kernel-headers-2.4.27-apus package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Bugzilla Vulnerability Exposes Bug Collections
Hundreds of open source software projects that make use of Bugzilla, Mozilla’s bug-tracking software, anxiously await a patch for a vulnerability that exposes private bugs collected by the system. Mozilla is today expected to make available a patch for the vulnerability in its account creation...
Ubuntu 11.10 / 12.04 LTS / 12.10 : glance vulnerability (USN-1710-1)
Dan Prince discovered an issue in Glance error reporting. An authenticated attacker could exploit this to expose the Glance operator's Swift credentials for a misconfigured or otherwise unusable Swift endpoint. Note that Tenable Network Security has extracted the preceding description block...
WordPress Plugin Backup 2.0.1 - Information Disclosure
Exploit Title: WordPress Backup plugin exposes site data Google Dork: http://www.google.com/search?q=inurl:wp-content/backup.log Date: 01-jul-2012 Exploit Author: Stephan Knauss Vendor Homepage: http://wordpress.org/extend/plugins/backup/ Software Link:...
[USN-1247-1] Nova vulnerability
========================================================================== Ubuntu Security Notice USN-1247-1 October 25, 2011 nova vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubun...
SIG Sauer - Security Intelligence Group Hacked by LulzaMac
SIG Sauer - Security Intelligence Group Hacked by LulzaMac Nothing is Secure on Internet Now. SIGARMS Academy website Hacked by hacker "LulzaMac". SIGARMS Academy is committed to providing safe, responsible and accurate firearms training and courses which are nationally and internationally...
