375 matches found
Apache Tomcat请求对象安全限制绕过漏洞
BUGTRAQ ID: 51442 CVE ID: CVE-2011-3375 Apache Tomcat是一个流行的开放源码的JSP应用服务器程序。 Apache Tomcat在实现上存在安全限制绕过漏洞，成功利用后可允许攻击者绕过某些安全策略限制。 0 Apache Group Tomcat 7.x Apache Group Tomcat 6.x 厂商补丁： Apache Group ------------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://jakarta.apache.org/tomcat/index.html...
Apache Struts session tampering with the security restrictions bypass vulnerability-vulnerability warning-the black bar safety net
Release date: 2011-01-01 Update date: 2011-12-16 Affected system: The Apache Group Struts 2.1.8 .1 The Apache Group Struts 2.0.9 Description: -------------------------------------------------------------------------------- BUGTRAQ ID: 5 0 9 4 0 Apache Struts is a development of Java web...
Google Chrome Multiple Vulnerabilities (Dec 2011) - Linux
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Adobe Flash Player跨域安全限制绕过漏洞
BUGTRAQ ID: 50629 CVE ID: CVE-2011-2458 Adobe Flash Player是一个集成的多媒体播放器。 Adobe Flash Player在实现上存在安全限制绕过漏洞，远程攻击者可利用此漏洞绕过某些同源策略限制。 Adobe Flash Player 9.x Adobe Flash Player 10.x Adobe AIR 3.x 厂商补丁： Adobe ----- Adobe已经为此发布了一个安全公告（APSB11-28）以及相应补丁: APSB11-28：Security update available for Adobe Flash...
Mac OS X v10.6.8 Multiple Vulnerabilities (2011-006)
This host is missing an important security update according to Mac OS X 10.6.8 Update/Mac OS X Security Update 2011-006. OpenVAS Vulnerability Test $Id: gbmacosxsu11-006.nasl 7029 2017-08-31 11:51:40Z teissa $ Mac OS X v10.6.8 Multiple Vulnerabilities 2011-006 Authors: Rachana Shetty Copyright:...
Adobe Flash Player安全限制绕过信息泄露漏洞
BUGTRAQ ID: 49718 CVE ID: CVE-2011-2429 Adobe Flash Player是一个集成的多媒体播放器。 Adobe Flash Player在实现上存在安全限制绕过信息泄露漏洞，远程攻击者可利用此漏洞获取敏感信息。 Adobe Flash Player 9.x Adobe Flash Player 10.x 厂商补丁： Adobe ----- Adobe已经为此发布了一个安全公告（APSB11-26）以及相应补丁: APSB11-26：Security update available for Adobe Flash Player...
Information disclosure
Google V8, as used in Google Chrome before 14.0.835.163, does not properly restrict access to built-in objects, which has unspecified impact and remote attack vectors...
Mac OS X v10.6.8 Multiple Vulnerabilities (2011-004)
This host is missing an important security update according to Mac OS X 10.5.8 Update/Mac OS X Security Update 2011-004. OpenVAS Vulnerability Test $Id: secpodmacosxsu11-004.nasl 7015 2017-08-28 11:51:24Z teissa $ Mac OS X v10.6.8 Multiple Vulnerabilities 2011-004 Authors: Antu Sanadi Copyright:...
PHP < 5.3.7 Security Bypass Vulnerability - Windows
PHP is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if description...
Mozilla Firefox安全限制绕过漏洞(CVE-2011-2370)
BUGTRAQ ID: 48380 CVE ID: CVE-2011-2370 Firefox是一款非常流行的开源WEB浏览器。 Firefox在实现上存在安全限制绕过漏洞，远程攻击者可利用此漏洞诱使用户接受插件和主题的安装对话框 Mozilla Firefox 4.x Mozilla Firefox 4.0.1 Mozilla Firefox 4.0 Beta1 Mozilla Firefox 4.0 Mozilla Firefox 3.x 厂商补丁： Mozilla ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
Wing FTP Server "ssh public key"身份验证安全绕过漏洞
BUGTRAQ ID: 48335 Wing FTP服务器是安全的多协议文件服务器FTP, HTTP, FTPS, HTTPS, SFTP，适用于Windows, Linux, Mac OSX和Solaris。 Wing FTP服务器在SSH身份验证的实现上存在安全漏洞，恶意用户可利用此漏洞绕过某些安全限制。 此漏洞源于SSH身份验证机制中的错误，在限制到仅公钥身份验证时，可不顾配置的限制使用密码登录 wftpserve Wing FTP Server 3.8.7 wftpserve Wing FTP Server 3.8.6 wftpserve Wing FTP Server 3.8....
Google Chrome弹出窗口拦截器安全绕过漏洞
Bugtraq ID: 47966 CVE ID：CVE-2011-1801 Google Chrome是一款流行的WEB浏览器。 Google Chrome窗口拦截器存在安全漏洞，远程攻击者可以利用漏洞绕过安全限制，打开任意弹出窗口。 Google Chrome 9.0.597.94 Google Chrome 9.0.597.84 Google Chrome 9.0.597.107 Google Chrome 8.0.552.344 Google Chrome 8.0.552.310 Google Chrome 8.0.552.309 Google Chrome 8.0.552.30...
PHP "phar/phar_object.c"格式字符串漏洞
BUGTRAQ ID: 46854 PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 PHP的"phar/pharobject.c"函数在实现上存在格式字符串漏洞，远程攻击者可利用此漏洞绕过某些安全限制或取得提升的权限。 此漏洞源于在将用户提供的输入用作格式说明符发送到格式化的打印函数之前未正确过滤。 PHP PHP 5.3.x PHP PHP 5.2.x 厂商补丁： PHP --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.php.net...
Apache Tomcat "@ServletSecurity" annotation security restriction bypass vulnerability and fix-vulnerability warning-the black bar safety net
Affected version: Apache Group Tomcat 7. x Vulnerability description: Apache Tomcat is a popular open source JSP application server program. Apache Tomcat in the realization of the presence of the"@ServletSecurity" annotation security restriction bypass vulnerability, remote attacker could exploi...
Apache Tomcat "@ServletSecurity" 注释安全限制绕过漏洞
CVE ID: CVE-2011-1088 Apache Tomcat是一个流行的开放源码的JSP应用服务器程序。 Apache Tomcat在实现上存在"@ServletSecurity" 注释安全限制绕过漏洞，远程攻击者可利用此漏洞绕过某些安全限制。 由于应用程序在加载小服务程序时未能正确执行"@ServletSecurity" 注释，可通过绕过注释指定的安全限制并泄露某些信息。 Apache Group Tomcat 7.x 厂商补丁： Apache Group ------------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
HP StorageWorks File Migration Agent Unauthorized Access
The remote HP StorageWorks File Migration Agent does not have any integrated authentication mechanism. An attacker can exploit this issue to modify archives and retrieve credentials. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...
Achievo跨站请求伪造和绕过安全限制漏洞
BUGTRAQ ID: 43544 Achievo是一款基于WEB的用于商业环境的项目管理工具。 Achievo没有正确地验证用户所提供URL中的confirm参数，已登录用户受骗跟随了恶意链接就可能导致未经确认便删除项目或任务；此外Time Registration模块在添加或删除项目时间时没有正确地处理访问权限，用户可以非授权添加或删除其他用户的时间。 Achievo = 1.4.3 厂商补丁： Achievo ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.achievo.org...
BSI Hotel Booking System SQL Injection
----------------------------------------------------------------------------------------- ECHOADV113$2010 BSI Hotel Booking System Admin Login Bypass Vulnerability ----------------------------------------------------------------------------------------- Author : K-159 Date : September, 22th 2010...
CVE-2010-1416
Removed by vendor...
Linux Kernel ReiserFS file system implementation to bypass security restrictions vulnerability-vulnerability warning-the black bar safety net
Affected version: Linux kernel 2.6. x vulnerability description: The Linux Kernel is open sourceOSLinux the kernel. Linux Kernel ReiserFS file system implementation does not properly restrict. reiserfspriv Directory Access, the local user can modify the ACL or extended attributes get root access...