PT-2017-17049 · D Link · D-Link Dsl-2730B

Name of the Vulnerable Software and Affected Versions: D-Link DSL-2730U C1 IN 1.00 Description: The issue allows remote attackers to perform unauthorized actions, including changing the DNS or firewall configuration, or modifying any password, due to a Cross Site Request Forgery CSRF weakness...

DEBIAN-CVE-2016-10206

Cross-site request forgery CSRF vulnerability in Zoneminder 1.30 and earlier allows remote attackers to hijack the authentication of users for requests that change passwords and possibly have unspecified other impact as demonstrated by a crafted user action request to index.php...

BINOM3 Electric Power Quality Meter Hard-Coded Vulnerability

BINOM3 Electric Power Quality Meter is an electrical power quality monitor for SCADA systems from the Russian company BINOM3. A hard-coded vulnerability exists in BINOM3 Electric Power Quality Meter, where users do not have permission to change their passwords...

Design/Logic Flaw

A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to conduct arbitrary password changes against any non-administrative user. More Information: CSCuz03345. Known Affected Releases: 2.6. Known Fixed Releases: 2.7.1.12...

CVE-2017-3795

A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to conduct arbitrary password changes against any non-administrative user. More Information: CSCuz03345. Known Affected Releases: 2.6. Known Fixed Releases: 2.7.1.12...

CVE-2017-3795

CVE-2017-3795 affects Cisco WebEx Meetings Server; authenticated, remote attackers could perform arbitrary password changes for non-administrative users due to insufficient parameter security. Affected release: 2.6; fixed in 2.7.1.12. Cisco advisory cisco-sa-20170118-wms1 documents the issue and ...

CVE-2017-3795

A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to conduct arbitrary password changes against any non-administrative user. More Information: CSCuz03345. Known Affected Releases: 2.6. Known Fixed Releases: 2.7.1.12...

CVE-2016-5997

The web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.51089.0.1A FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.52249.0.2A FP3 does not apply password-quality rules to password...

CVE-2016-4066

Cross-site request forgery CSRF vulnerability in Fortinet FortiWeb before 5.5.3 allows remote attackers to hijack the authentication of administrators for requests that change the password via unspecified vectors...

Multiple Vulnerabilities in the Goo Goo Mini Printer System of Yingchuan Technology Co.

Ltd. is a high-tech enterprise in Xiamen City, a consumer electronics manufacturer held by Wanlida Nanjing Technology Co. The system of Gu Gu Mini Printer of Yingchun Technology has unauthorized access, arbitrary user information access, arbitrary user password change and SQL injection...

CVE-2016-0049

Kerberos in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 Gold and 1511 does not properly validate password changes, which allows remote attackers to bypass authentication by deploying a crafted Key...

Debian DLA-408-1 : gosa security update

GOsa is a combination of system-administrator and end-user web interface, designed to handle LDAP based setups. GOsa upstream reported a code injection vulnerability in the Samba plugin code of GOsa. During Samba password changes it has been possible to inject malicious Perl code. This upload to...

[SECURITY] [DLA 408-1] gosa security update

Package : gosa Version : 2.6.11-3+squeeze5 CVE ID : CVE-2015-8771 GOsa is a combination of system-administrator and end-user web interface, designed to handle LDAP based setups. GOsa upstream reported a code injection vulnerability in the Samba plugin code of GOsa. During Samba password changes i...

DLA-408-1 gosa - security update

Bulletin has no description...

The vulnerability of the Lepide Active Directory Self Service tool, which allows a malicious individual to change the passwords of arbitrary users

The vulnerability of the Lepide Active Directory Self Service tool is related to errors in the implementation of the password reset function. Exploiting this vulnerability could allow an attacker to change the passwords of arbitrary users through a specially created request...

SOL37250780 - TMOS vulnerability: Password changes for local users may not be preserved unless the configuration is explicitly saved

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

SUSE: Security Advisory for Samba (SUSE-SU-2014:0497-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-6827

Cross-site request forgery CSRF vulnerability in Auto-Exchanger 5.1.0 allows remote attackers to hijack the authentication of users for requests that change a password via a request to signup.php...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in webconfig/wlan/country.html/country in the Teracom T2-B-Gawv1.4U10Y-BI modem allow remote attackers to hijack the authentication of administrators for requests that 1 change the SSID or 2 change the password via a crafted request...

CVE-2014-9019

Multiple cross-site request forgery CSRF vulnerabilities in ZTE ZXDSL 831CII allow remote attackers to hijack the authentication of administrators for requests that 1 change the admin user name or 2 conduct cross-site scripting XSS attacks via the sysUserName parameter in a save action to...