CVE-2013-4491

Cross-site scripting XSS vulnerability in actionpack/lib/actionview/helpers/translationhelper.rb in the internationalization component in Ruby on Rails 3.x before 3.2.16 and 4.x before 4.0.2 allows remote attackers to inject arbitrary web script or HTML via a crafted string that triggers generati...

rubygem-actionpack: i18n missing translation XSS

It was discovered that the internationalization component of Ruby on Rails could, under certain circumstances, return a fallback HTML string that contained user input. A remote attacker could possibly use this flaw to perform a reflective cross-site scripting XSS attack by providing a specially...

Default configuration

The default configuration in gnome-screensaver 3.5.4 through 3.6.0 sets the AutostartCondition line to fallback mode in the .desktop file, which prevents the program from starting automatically after login and allows physically proximate attackers to bypass screen locking and access an unattended...

CVE-2013-1050

The default configuration in gnome-screensaver 3.5.4 through 3.6.0 sets the AutostartCondition line to fallback mode in the .desktop file, which prevents the program from starting automatically after login and allows physically proximate attackers to bypass screen locking and access an unattended...

Fedora 18 : dracut-024-5.git20121019.fc18 (2012-16448)

fixed ifup exit code - fixed default 'rd.auto' parameter setting - only 'warn' not 'error', if we don't strip the initramfs - do not overwrite ifcfg from anaconda - ssh-client module fixes - strip binaries in the initramfs by default now - fixes for systemd and crypto - new dracut kernel command...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 7811)

This Linux kernel update fixes various security issues and bugs in the SUSE Linux Enterprise 10 SP4 kernel. The following security issues have been fixed : - A USB string descriptor overflow in the auerwald USB driver was fixed, which could be used by physically proximate attackers to cause a...

SuSE 11.1 Security Update : Qt (SAT Patch Number 5131)

The following security issues have been fixed : - Specially crafted font files could cause a single byte heap based buffer overflow. CVE-2011-3193 - Specially crafted grey scale images could cause a heap-based buffer overflow. CVE-2011-3194 - SSL servers could run into an endless loop CVE-2010-26...

RADIUS Authentication Bypass - Cisco Systems

Remote Authentication Dial In User Service RADIUS authentication on a device that is running certain versions of Cisco Internetworking Operating System IOS and configured with a fallback method to none can be bypassed. Systems that are configured for other authentication methods or that are not...

openSUSE Security Update : apparmor-parser (openSUSE-SU-2011:0268-1)

Fixed apparmor-parser: The parser could generate a policy using an unconfined fallback execute transition. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update apparmor-parser-3810. The text...

Ubuntu Update for apparmor update USN-1039-1

Ubuntu Update for Linux kernel vulnerabilities USN-1039-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10391.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for apparmor update USN-1039-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

USN-1039-1: AppArmor update

It was discovered that if AppArmor was misconfigured, under certain circumstances the parser could generate policy using an unconfined fallback execute transition when one was not specified...

RADIUS Authentication Bypass (cisco-sa-20050629-aaa)

Remote Authentication Dial In User Service RADIUS authentication on a device that is running certain versions of Cisco Internetworking Operating System IOS and configured with a fallback method to none can be bypassed. Systems that are configured for other authentication methods or that are not...

Mandriva Linux Security Advisory : openoffice.org (MDVSA-2010:075)

This updates provides a security update to the OpenOffice.org described as follow : OpenOffice's xmlsec uses a bundled Libtool which might load .la file in the current working directory allowing local users to gain privileges via a Trojan horse file. For enabling such vulnerability xmlsec has to...

CVE-2010-0047

Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors related to "HTML object element fallback content."...

PT-2010-1872 · Apple · Safari +1

Name of the Vulnerable Software and Affected Versions: Apple Safari versions prior to 4.0.5 Description: The issue is related to a use-after-free vulnerability in WebKit, allowing remote attackers to execute arbitrary code or cause a denial of service, such as an application crash. This is achiev...

Cisco Security Advisory: TACACS+ Authentication Bypass in Cisco Anomaly Detection and Mitigation Products

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: TACACS+ Authentication Bypass in Cisco Anomaly Detection and Mitigation Products Document ID: 69073 Advisory ID: cisco-SA-20060215-guard-auth http://www.cisco.com/warp/public/707/cisco-sa-20060215-guard.shtml Revision 1.0...

Cisco RADIUS authentication bypass

It's possible to bypass RADIUS authorisation is NONE is set at fallback authentication method...

RADIUS Authentication Bypass

Remote Authentication Dial In User Service RADIUS authentication on a device that is running certain versions of Cisco Internetworking Operating System IOS and configured with a fallback method to none can be bypassed. Systems that are configured for other authentication methods or that are not...

fallback-reboot DoS

No description provided...

[SA14328] fallback-reboot Daemon Status Denial of Service Vulnerability

TITLE: fallback-reboot Daemon Status Denial of Service Vulnerability SECUNIA ADVISORY ID: SA14328 VERIFY ADVISORY: http://secunia.com/advisories/14328/ CRITICAL: Less critical IMPACT: DoS WHERE: From local network SOFTWARE: fallback-reboot 0.x http://secunia.com/product/4693/ DESCRIPTION: A...