Lucene search
+L

126 matches found

Tenable Nessus
Tenable Nessus
added 2012/05/02 12:0 a.m.83 views

PHP < 5.3.11 Multiple Vulnerabilities

According to its banner, the version of PHP installed on the remote host is earlier than 5.3.11, and as such is potentially affected by multiple vulnerabilities : - During the import of environment variables, temporary changes to the 'magicquotesgpc' directive are not handled properly. This can...

6.8CVSS8.5AI score0.10173EPSS
SaveExploits5References10
NVD
NVD
added 2011/04/27 1:25 a.m.20 views

CVE-2011-1718

The Web Agents component in CA SiteMinder R6 before SP6 CR2 and R12 before SP3 CR2 does not properly handle multi-line headers, which allows remote authenticated users to conduct impersonation attacks and gain privileges via crafted data...

4.3CVSS6.4AI score0.02445EPSS
SaveExploits0References8
ATTACKERKB
ATTACKERKB
added 2011/04/27 1:25 a.m.3 views

CVE-2011-1718

The Web Agents component in CA SiteMinder R6 before SP6 CR2 and R12 before SP3 CR2 does not properly handle multi-line headers, which allows remote authenticated users to conduct impersonation attacks and gain privileges via crafted data...

4.3CVSS5.5AI score0.02445EPSS
SaveExploits0References10
Cvelist
Cvelist
added 2011/04/27 12:0 a.m.25 views

CVE-2011-1718

The Web Agents component in CA SiteMinder R6 before SP6 CR2 and R12 before SP3 CR2 does not properly handle multi-line headers, which allows remote authenticated users to conduct impersonation attacks and gain privileges via crafted data...

6.4AI score0.02445EPSS
SaveExploits0References8
securityvulns
securityvulns
added 2011/04/21 12:0 a.m.53 views

CA20110420-01: Security Notice for CA SiteMinder

CA20110420-01: Security Notice for CA SiteMinder Issued: April 20, 2011 CA Technologies support is alerting customers to a security risk associated with CA SiteMinder. A vulnerability exists that can allow a malicious user to impersonate another user. CA Technologies has issued patches to address...

4.3CVSS0.1AI score0.02445EPSS
SaveExploits0
OSV
OSV
added 2008/01/25 1:0 a.m.3 views

DEBIAN-CVE-2008-0456

CRLF injection vulnerability in the modnegotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x series, 2.0.61 and earlier in the 2.0.x series, and 1.3.39 and earlier in the 1.3.x series allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP respons...

2.6CVSS7.2AI score0.19036EPSS
SaveExploits1References1
Rows per page
Query Builder