114 matches found
CVE-2012-0697
Affected product: HP StorageWorks P2000 G3 MSA Array Systems. CVE-2012-0697 covers a vulnerability where a default account enables a remote attacker to perform administrative tasks via unspecified vectors (directory traversal/remote access context) as described in ZDI-12-015 and HP security bulle...
CVE-2011-4788
CVE-2011-4788 is an absolute path traversal vulnerability in the web interface of HP StorageWorks P2000 G3 MSA array systems. The issue allows a remote attacker to read arbitrary files by supplying a pathname in the URI. Connected sources confirm impact on HP P2000 G3 MSA devices and identify the...
CVE-2012-0697
HP StorageWorks P2000 G3 MSA array systems have a default account, which makes it easier for remote attackers to perform administrative tasks via unspecified vectors, a different vulnerability than CVE-2011-4788...
CVE-2011-4788
Absolute path traversal vulnerability in the web interface on HP StorageWorks P2000 G3 MSA array systems allows remote attackers to read arbitrary files via a pathname in the URI...
Debian DSA-2338-1 : moodle - several vulnerabilities
Several cross-site scripting and information disclosure issues have been fixed in Moodle, a course management system for online learning : - MSA-11-0020 Continue links in error messages can lead offsite - MSA-11-0024 reCAPTCHA images were being authenticated from an older server - MSA-11-0025 Gro...
[SECURITY] [DSA 2338-1] moodle security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2338-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 07, 2011 http://www.debian.org/security/faq -...
HP StorageWorks MSA P2000 Default Credentials
The remote device appears to be an HP StorageWorks MSA P2000 series. One or more accounts are secured with a default password. A remote, unauthenticated attacker can exploit this to gain administrative access to the management interface. TRUSTED...
HP StorageWorks MSA P2000 Hidden 'admin' User Default Credentials
The remote device appears to be a HP StorageWorks MSA P2000 series. There is a hidden, undocumented account named 'admin' secured with a default password of '!admin'. A remote attacker can exploit this to gain privileged access to the management interface. TRUSTED...
CVE-2010-4115
HP StorageWorks Modular Smart Array P2000 G3 firmware TS100R011, TS100R025, TS100P002, TS200R005, TS201R014, and TS201R015 installs an undocumented admin account with a default "!admin" password, which allows remote attackers to gain privileges...
CVE-2009-4866
The CVE-2009-4866 entry covers a Cross-site scripting (XSS) vulnerability in Matt's Script Archive (MSA) Simple Search 1.0’s search.cgi, where an attacker can inject arbitrary script or HTML via the terms parameter. The OpenVAS NASL corroborates this by listing Simple Search AS XSS vulnerability....
CVE-2009-4866
Cross-site scripting XSS vulnerability in search.cgi in Matt's Script Archive MSA Simple Search 1.0 allows remote attackers to inject arbitrary web script or HTML via the terms parameter. NOTE: some of these details are obtained from third party information...
openSUSE Security Update : moodle (moodle-1933)
This patch updates Moodle to the latest stable upstream version 1.9.7 fixing multiple security issues: CVE-2009-4297, CVE-2009-4298, CVE-2009-4299, CVE-2009-4300, CVE-2009-4301, CVE-2009-4302, CVE-2009-4303, CVE-2009-4304, CVE-2009-4305, MSA-09-0030 New detection of insecure Flash player plugins...
openSUSE Security Update : moodle (moodle-1933)
This patch updates Moodle to the latest stable upstream version 1.9.7 fixing multiple security issues: CVE-2009-4297, CVE-2009-4298, CVE-2009-4299, CVE-2009-4300, CVE-2009-4301, CVE-2009-4302, CVE-2009-4303, CVE-2009-4304, CVE-2009-4305, MSA-09-0030 New detection of insecure Flash player plugins...
Ubuntu: Security Advisory (USN-791-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...