142 matches found
Fedora 28 : php-symfony (2018-eba0006df2)
Version 2.8.41 2018-05-25 - bug 27359 HttpFoundation Fix perf issue during MimeTypeGuesser intialization nicolas-grekas - security cve-2018-11408 SecurityBundle Fail if security.httputils cannot be configured - security cve-2018-11406 clear CSRF tokens when the user is logged out - security...
Authentication flaw
Cybozu Garoon 3.0.0 to 4.2.6 allows remote authenticated attackers to bypass access restriction to alter setting data of session authentication via unspecified vectors...
CVE-2018-0533
Cybozu Garoon contains an authentication bypass flaw CVE-2018-0533 that allows remote authenticated users to bypass access restrictions and alter data in session authentication settings. Affected products/versions include Cybozu Garoon 3.0.0 to 4.2.6 (and related entries covering 3.0.0–4.2.6 acro...
CVE-2018-0533
Cybozu Garoon 3.0.0 to 4.2.6 allows remote authenticated attackers to bypass access restriction to alter setting data of session authentication via unspecified vectors...
CVE-2018-0533: Undefined Security Weakness
Cybozu Garoon 3.0.0 to 4.2.6 allows remote authenticated attackers to bypass access restriction to alter setting data of session authentication via unspecified vectors...
PT-2018-8892
Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 3.0.0 through 4.2.6 Description The issue allows remote authenticated attackers to bypass access restrictions and alter setting data of session authentication. Recommendations For versions 3.0.0 through 4.2.6, update to ...
Cybozu Garoon Operational Limit Bypass Vulnerability (CNVD-2018-08811)
Cybozu Garoon is an office software with Chinese, Japanese, and English languages. An operation restriction bypass vulnerability exists in the session authentication settings in Cybozu Garoon 3.0.0 through 4.2.6. The vulnerability can be exploited by users logging in to the product with...
CVE-2016-8712
An exploitable nonce reuse vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless AP running firmware 1.1. The device uses one nonce for all session authentication requests and only changes the nonce if the web application has been idle for 300 seconds...
CVE-2016-0883
Pivotal Cloud Foundry PCF Ops Manager before 1.5.14 and 1.6.x before 1.6.9 uses the same cookie-encryption key across different customers' installations, which allows remote attackers to bypass session authentication by leveraging knowledge of this key from another installation...
CVE-2016-0883
Pivotal Cloud Foundry PCF Ops Manager before 1.5.14 and 1.6.x before 1.6.9 uses the same cookie-encryption key across different customers' installations, which allows remote attackers to bypass session authentication by leveraging knowledge of this key from another installation...
CVE-2016-0883
CVE-2016-0883 affects Pivotal Cloud Foundry Ops Manager prior to 1.5.14 and 1.6.x prior to 1.6.9. The issue is that the same cookie-encryption key was used across different customers’ installations, enabling remote attackers to bypass session authentication by leveraging knowledge of the key from...
PT-2016-4442
Name of the Vulnerable Software and Affected Versions Pivotal Cloud Foundry PCF Ops Manager versions prior to 1.5.14 Pivotal Cloud Foundry PCF Ops Manager versions 1.6.x prior to 1.6.9 Description The issue allows remote attackers to bypass session authentication by leveraging knowledge of the...
CVE-2016-0883: Improper Authentication
Pivotal Cloud Foundry PCF Ops Manager before 1.5.14 and 1.6.x before 1.6.9 uses the same cookie-encryption key across different customers' installations, which allows remote attackers to bypass session authentication by leveraging knowledge of this key from another installation...
Advantech WebAccess Remote Authentication Bypass Vulnerability
This vulnerability allows remote attackers to bypass authentication requirements on vulnerable installations of Advantech WebAccess. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ChkCookieNoRedir function. By providing arbitrary values to certai...
CVE-2014-1673
Check Point Session Authentication Agent allows remote attackers to obtain sensitive information user credentials via unspecified vectors...
CVE-2014-1673
Technical details (affected product/version, exploit vectors, root cause) are not provided in the connected documents. No public specifics available; monitor for updates.
CVE-2014-1673
Check Point Session Authentication Agent allows remote attackers to obtain sensitive information user credentials via unspecified vectors...
PT-2014-4287
Name of the Vulnerable Software and Affected Versions Check Point Session Authentication Agent affected versions not specified Description The issue allows remote attackers to obtain sensitive information, specifically user credentials, via unspecified vectors. Recommendations At the moment, ther...
CVE-2014-1673: Undefined Security Weakness
Check Point Session Authentication Agent allows remote attackers to obtain sensitive information user credentials via unspecified vectors...
