2786 matches found
CVE-2015-0202
The moddavsvn server in Subversion 1.8.0 through 1.8.11 allows remote attackers to cause a denial of service memory consumption via a large number of REPORT requests, which trigger the traversal of FSFS repository nodes...
CVE-2015-0202
The moddavsvn server in Subversion 1.8.0 through 1.8.11 allows remote attackers to cause a denial of service memory consumption via a large number of REPORT requests, which trigger the traversal of FSFS repository nodes...
CVE-2015-0202: Undefined Security Weakness
The moddavsvn server in Subversion 1.8.0 through 1.8.11 allows remote attackers to cause a denial of service memory consumption via a large number of REPORT requests, which trigger the traversal of FSFS repository nodes...
PT-2015-4525
Name of the Vulnerable Software and Affected Versions Subversion versions 1.8.0 through 1.8.11 Description The issue allows remote attackers to cause a denial of service, specifically memory consumption, by sending a large number of REPORT requests. This triggers the traversal of FSFS repository...
Design/Logic Flaw
TYPO3 Neos 1.1.x before 1.1.3 and 1.2.x before 1.2.3 allows remote editors to access, create, and modify content nodes in the workspace of other editors via unspecified vectors...
PT-2015-5914
Name of the Vulnerable Software and Affected Versions TYPO3 Neos versions 1.1.x through 1.1.2 TYPO3 Neos versions 1.2.x through 1.2.2 Description The issue allows remote editors to access, create, and modify content nodes in the workspace of other editors. Recommendations For versions 1.1.x throu...
CVE-2015-2821: Undefined Security Weakness
TYPO3 Neos 1.1.x before 1.1.3 and 1.2.x before 1.2.3 allows remote editors to access, create, and modify content nodes in the workspace of other editors via unspecified vectors...
Code injection
Pexip Infinity before 8 uses the same SSH host keys across different customers' installations, which allows man-in-the-middle attackers to spoof Management and Conferencing Nodes by leveraging these keys...
PT-2015-4080
Name of the Vulnerable Software and Affected Versions Pexip Infinity versions prior to 8 Description The issue allows man-in-the-middle attackers to spoof Management and Conferencing Nodes by leveraging the fact that the same SSH host keys are used across different customers' installations...
[SECURITY] Fedora 20 Update: drupal6-flag-2.1-3.fc20
Flag is a flexible flagging system that is completely customizable by the administrator. Using this module, the site administrator can provide any number of flags for nodes, comments, users, and any other type of entity. Some possibilities include bookmarks, marking important, friends, or flag as...
[SECURITY] Fedora 19 Update: torque-3.0.4-5.fc19
TORQUE Tera-scale Open-source Resource and QUEue manager is a resource manager providing control over batch jobs and distributed compute nodes. TORQUE is based on OpenPBS version 2.3.12 and incorporates scalability, fault tolerance, and feature extension patches provided by USC, NCSA, OSC, the U....
Cross site scripting
Cross-site scripting XSS vulnerability in the Print aka Printer, e-mail and PDF versions module 6.x-1.x before 6.x-1.19, 7.x-1.x before 7.x-1.3, and 7.x-2.x before 7.x-2.0 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors...
CVE-2014-8078
Cross-site scripting XSS vulnerability in the Print aka Printer, e-mail and PDF versions module 6.x-1.x before 6.x-1.19, 7.x-1.x before 7.x-1.3, and 7.x-2.x before 7.x-2.0 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors...
PT-2014-8402
Name of the Vulnerable Software and Affected Versions Drupal versions 6.x-1.x before 6.x-1.19 Drupal versions 7.x-1.x before 7.x-1.3 Drupal versions 7.x-2.x before 7.x-2.0 Description A cross-site scripting XSS issue exists in the Print module for Drupal, allowing remote authenticated users with...
CVE-2014-8078: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Print aka Printer, e-mail and PDF versions module 6.x-1.x before 6.x-1.19, 7.x-1.x before 7.x-1.3, and 7.x-2.x before 7.x-2.0 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors...
[SECURITY] Fedora 21 Update: torque-4.2.8-1.fc21
TORQUE Tera-scale Open-source Resource and QUEue manager is a resource manager providing control over batch jobs and distributed compute nodes. TORQUE is based on OpenPBS version 2.3.12 and incorporates scalability, fault tolerance, and feature extension patches provided by USC, NCSA, OSC, the U....
RHEL 6 : MRG Messaging (RHSA-2012:1279)
Updated Messaging component packages that fix one security issue, multiple bugs, and add various enhancements are now available for Red Hat Enterprise MRG 2.2 for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common...
Info2www 1.0/1.1 CGI Input Handling Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1995/info The info2www script allows HTTP access to information stored in GNU EMACS Info Nodes. This script fails to properly parse input and can be used to execute commands on the server with permissions of the web serve...
Multiple Vendor ICMP Message Handling DoS
No description provided by source. source: http://www.securityfocus.com/bid/13124/info Multiple vendor implementations of TCP/IP Internet Control Message Protocol ICMP are reported prone to several denial-of-service attacks. ICMP is employed by network nodes to determine certain automatic actions...