2270 matches found
Boost library protection bypass
Invalid UTF-8 sequences validation...
[USN-1727-1] Boost vulnerability
========================================================================== Ubuntu Security Notice USN-1727-1 February 18, 2013 boost1.49 vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: ...
CVE-2013-0252
boost::locale::utf::utftraits in the Boost.Locale library in Boost 1.48 through 1.52 does not properly detect certain invalid UTF-8 sequences, which might allow remote attackers to bypass input validation protection mechanisms via crafted trailing bytes...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the portlet subsystem in the administrative console in IBM WebSphere Application Server WAS 6.1 before 6.1.0.47 and 7.0 before 7.0.0.27 allows remote attackers to hijack the authentication of arbitrary users for requests that insert cross-site...
CVE-2012-5992
Multiple cross-site request forgery CSRF vulnerabilities on Cisco Wireless LAN Controller WLC devices with software 7.2.110.0 allow remote attackers to hijack the authentication of administrators for requests that 1 add administrative accounts via screens/aaa/mgmtusercreate.html or 2 insert XSS...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities on Cisco Wireless LAN Controller WLC devices with software 7.2.110.0 allow remote attackers to hijack the authentication of administrators for requests that 1 add administrative accounts via screens/aaa/mgmtusercreate.html or 2 insert XSS...
puppet: insufficient validation of agent names in CN of SSL certificate requests
lib/puppet/ssl/certificateauthority.rb in Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, does not properly restrict the characters in the Common Name field of a Certificate Signing Request CSR, which makes it easier for user-assisted remote attackers to trick...
Improper Handling of Alternate Encoding
Overview Affected versions of this package are vulnerable to Improper Handling of Alternate Encoding via boost::locale::utf::utftraits in the /boost/locale/utf.hpp, which does not properly detect certain invalid UTF-8 sequences. A remote attacker can bypass input validation protection mechanisms...
Fedora 18 : ruby-1.9.3.327-22.fc18 (2012-17949)
A security flaw was found on ruby currently shiped on Fedora 18 that carefully crafted sequence of strings may cause a denial of service attack on the service that parses the sequence to create a Hash object by using the strings as keys. This issue is now registered as CVE-2012-5371. This new...
CVE-2012-5387
Cross-site request forgery CSRF vulnerability in wlcms-plugin.php in the White Label CMS plugin before 1.5.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that modify the developer name via the wlcmsodevelopername parameter in a save action to...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in wlcms-plugin.php in the White Label CMS plugin before 1.5.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that modify the developer name via the wlcmsodevelopername parameter in a save action to...
CVE-2012-5387
Cross-site request forgery CSRF vulnerability in wlcms-plugin.php in the White Label CMS plugin before 1.5.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that modify the developer name via the wlcmsodevelopername parameter in a save action to...
Debian Security Advisory DSA 2542-1 (qemu-kvm)
The remote host is missing an update to qemu-kvm announced via advisory DSA 2542-1. OpenVAS Vulnerability Test $Id: deb25421.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2542-1 qemu-kvm Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...
Debian DSA-2545-1 : qemu - multiple vulnerabilities
Multiple vulnerabilities have been discovered in QEMU, a fast processor emulator. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2012-2652 : The snapshot mode of QEMU -snapshot incorrectly handles temporary files used to store the current state, making ...
Debian DSA-2542-1 : qemu-kvm - multiple vulnerabilities
Multiple vulnerabilities have been discovered in KVM, a full virtualization solution on x86 hardware. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2012-2652 : The snapshot mode of QEMU -snapshot incorrectly handles temporary files used to store the...
[SECURITY] [DSA 2542-1] qemu-kvm security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2542-1 [email protected] http://www.debian.org/security/ Raphael Geissert September 08, 2012 http://www.debian.org/security/faq -...
DSA-2542-1 qemu-kvm - multiple
Bulletin has no description...
CentOS Update for xen CESA-2012:1236 centos5
Check for the Version of xen OpenVAS Vulnerability Test CentOS Update for xen CESA-2012:1236 centos5 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
CentOS Update for kmod-kvm CESA-2012:1235 centos5
Check for the Version of kmod-kvm OpenVAS Vulnerability Test CentOS Update for kmod-kvm CESA-2012:1235 centos5 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the Wishlist module 6.x-2.x before 6.x-2.6 and 7.x-2.x before 7.x-2.6 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that insert cross-site scripting XSS sequences via the 1 wlreveal or 2 q parameter...