5202 matches found
Lms Web Ensino - Multiple Input Validation Vulnerabilities
Lms Web Ensino - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/46829/info LMS Web Ensino is prone to the following input-validation vulnerabilities: 1. Multiple cross-site scripting vulnerabilities 2. An SQL-injection vulnerability 3. A cross-site...
Lms Web Ensino - Multiple Input Validation Vulnerabilities
source: https://www.securityfocus.com/bid/46829/info LMS Web Ensino is prone to the following input-validation vulnerabilities: 1. Multiple cross-site scripting vulnerabilities 2. An SQL-injection vulnerability 3. A cross-site request-forgery vulnerability 4. A session-fixation vulnerability...
Session fixation
The xfsfsgeometry function in fs/xfs/xfsfsops.c in the Linux kernel before 2.6.38-rc6-git3 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an FSGEOMETRYV1 ioctl call...
CVE-2011-0717
Session fixation vulnerability in Red Hat Network RHN Satellite Server 5.4 allows remote attackers to hijack web sessions via unspecified vectors related to Spacewalk...
Session fixation
Session fixation vulnerability in Red Hat Network RHN Satellite Server 5.4 allows remote attackers to hijack web sessions via unspecified vectors related to Spacewalk...
CVE-2011-0717
Session fixation vulnerability in Red Hat Network RHN Satellite Server 5.4 allows remote attackers to hijack web sessions via unspecified vectors related to Spacewalk...
CVE-2011-0717
The CVE-2011-0717 issue affects Red Hat Network Satellite Server 5.4 (Spacewalk-related). The root cause is a session fixation flaw where session cookies can be manipulated, enabling an attacker to hijack a user’s session after login. Documented impact includes potential partial disclosure/integr...
PT-2011-2581 · Red Hat · Spacewalk +1
Name of the Vulnerable Software and Affected Versions: Red Hat Network RHN Satellite Server version 5.4 Description: A session fixation issue in Red Hat Network Satellite Server allows remote attackers to hijack web sessions. The issue is related to Spacewalk, but the specific vectors are not...
CVE-2011-0717: Undefined Security Weakness
Session fixation vulnerability in Red Hat Network RHN Satellite Server 5.4 allows remote attackers to hijack web sessions via unspecified vectors related to Spacewalk...
Moderate: Red Hat Security Advisory: Red Hat Network Satellite Server security update
Updated packages that fix two security issues are now available for Red Hat Network Satellite Server 5.4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
Spacewalk: Session fixation flaw
Session fixation vulnerability in Red Hat Network RHN Satellite Server 5.4 allows remote attackers to hijack web sessions via unspecified vectors related to Spacewalk...
CVE-2011-0584
Session fixation vulnerability in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to hijack web sessions via unspecified vectors...
Session fixation
Session fixation vulnerability in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to hijack web sessions via unspecified vectors...
CVE-2011-0584
Session fixation vulnerability in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to hijack web sessions via unspecified vectors...
CVE-2011-0584
CVE-2011-0584 refers to a session fixation vulnerability in Adobe ColdFusion 8.0 through 9.0.1 . The issue allows remote attackers to hijack web sessions via unspecified vectors, indicating an authentication/session management weakness that persists across affected ColdFusion versions. The vulner...
CVE-2011-0584: Undefined Security Weakness
Session fixation vulnerability in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to hijack web sessions via unspecified vectors...
PT-2011-2471
Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 8.0 through 9.0.1 Description A session fixation issue allows remote attackers to hijack web sessions. The exact vectors used for the attack are not specified. Recommendations For Adobe ColdFusion versions 8.0 through...
Session fixation
Hastymail2 before RC 8 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...
Session fixation
Cookie.php in Piwik before 1.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...
CVE-2010-4499
Session fixation vulnerability in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before 1.0.1, allows remote attackers to hijack web sessions via unspecified vectors...