896 matches found
CVE-2013-3250
Summary: CVE-2013-3250 affects the WordPress WP Maintenance Mode plugin prior to version 1.8.8. Component/host: WordPress WP Maintenance Mode (plugin). Vulnerability: CSRF flaw in settings modification that allows remote attackers to hijack the authentication of arbitrary users. Impact: enables u...
CVE-2013-3250: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the WP Maintenance Mode plugin before 1.8.8 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that modify this plugin's settings...
Important: Red Hat Security Advisory: rhev-hypervisor6 security and bug fix update
An updated rhev-hypervisor6 package that fixes two security issues and various bugs is now available. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
Release notes for Veeam MP Integration Management Pack update
Challenge Maintenance mode synchronization in System Center 2012 Operations Manager SP1 Importing the updated Veeam Integration MP will resolve the known issue related to maintenance mode synchronization in System Center 2012 Operations Manager SP1. When a vSphere host enters the maintenance mode...
WordPress Maintenance Mode Plugin <= 1.8.7 - CSRF
Because of this vulnerability, the attackers can hijack the authentication of arbitrary users for requests that modify this plugin's settings. Solution Update the plugin...
Scientific Linux Security Update : openssl on SL6.x i386/x86_64
OpenSSL is a toolkit that implements the Secure Sockets Layer SSL v2/v3 and Transport Layer Security TLS v1 protocols, as well as a full-strength, general purpose cryptography library. A buffer over-read flaw was discovered in the way OpenSSL parsed the Certificate Status Request TLS extensions i...
Design/Logic Flaw
The web services implementation in Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 does not properly consider the maintenance-mode state and account attributes during login attempts, which allows remote authenticated users to bypass intended access restrictions by connecting to a webservice serv...
CVE-2011-4590
The web services implementation in Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 does not properly consider the maintenance-mode state and account attributes during login attempts, which allows remote authenticated users to bypass intended access restrictions by connecting to a webservice serv...
CVE-2011-4590: Improper Authentication
The web services implementation in Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 does not properly consider the maintenance-mode state and account attributes during login attempts, which allows remote authenticated users to bypass intended access restrictions by connecting to a webservice serv...
NEC Backdoor Administrative Account
Exploit for hardware platform in category remote exploits NEC Corp. has a product line of high perfomance servers - http://www.nec.com.sg/index.php?q=products/enterprise-servers In the documentations it is said that there is two user privilege levels: 1. Common user - who can monitor the system...
MDVA-2008:176 : mdadm
mdadm would crash during bootup when trying to activate several raid10 devices, dropping the system in maintenance mode, where you had to manually reactivate the missing raid10 sets in order to continue the boot. The updated mdadm fixes this issue, allowing systems with raid10 to boot normally...
Update Rollup 5 for System Center 2019 Virtual Machine Manager
None None...
Update Rollup 5 for System Center 2019 Operations Manager
None None...
Update Rollup 2 for System Center 2016 Operations Manager
None None...