6764 matches found
Mandriva Linux Security Advisory : drupal (MDVSA-2015:181)
Updated drupal packages fix security vulnerabilities : An information disclosure vulnerability was discovered in Drupal before 7.27. When pages are cached for anonymous users, form state may leak between anonymous users. Sensitive or private information recorded for one anonymous user could thus ...
Debian DLA-158-1 : request-tracker3.8 security update
Multiple vulnerabilities have been discovered in Request Tracker, an extensible trouble-ticket tracking system. The Common Vulnerabilities and Exposures project identifies the following problems : CVE-2014-9472 Christian Loos discovered a remote denial of service vulnerability, exploitable via th...
Debian DLA-65-1 : python-django security update
This update address an issue with reverse generating external URLs; a denial of service involving file uploads; a potential session hijacking issue in the remote-user middleware; and a data leak in the administrative interface. http://www.freexian.com/services/debian-lts.html CVE-2014-0480 Django...
Ebay Inc Xcom #7 - (Policy) Persistent Vulnerability
Document Title: =============== Ebay Inc Xcom 7 - Policy Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1228 Release Date: ============= 2015-03-25 Vulnerability Laboratory ID VL-ID: ==================================== 1228...
Ebay Inc Xcom #7 - (Policy) Persistent Vulnerability
Document Title: =============== Ebay Inc Xcom 7 - Policy Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1228 Release Date: ============= 2015-03-25 Vulnerability Laboratory ID VL-ID: ==================================== 1228...
Ebay Inc Xcom #6 - Persistent POST Inject Vulnerability
Document Title: =============== Ebay Inc Xcom 6 - Persistent POST Inject Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1227 Release Date: ============= 2015-03-24 Vulnerability Laboratory ID VL-ID: ==================================== 122...
[SECURITY] [DSA 3176-1] request-tracker4 security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3176-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 26, 2015 http://www.debian.org/security/faq -...
SevenIT SevDesk 3.10 - Multiple Web Vulnerabilities
Document Title: =============== SevenIT SevDesk 3.10 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1314 Release Date: ============= 2015-03-23 Vulnerability Laboratory ID VL-ID: ==================================== 1314...
Request Tracker Session Hijacking Vulnerability
Request Tracker is an enterprise level issue tracking system. Request Tracker suffers from a session hijacking vulnerability that allows an attacker to gain unauthorized access to affected applications...
Photo Manager Pro 4.4.0 iOS - Code Injection Vulnerability
Document Title: =============== Photo Manager Pro 4.4.0 iOS - Code Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1444 Release Date: ============= 2015-03-10 Vulnerability Laboratory ID VL-ID: ====================================...
Photo Manager Pro 4.4.0 iOS - Code Injection Vulnerability
Document Title: =============== Photo Manager Pro 4.4.0 iOS - Code Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1444 Release Date: ============= 2015-03-10 Vulnerability Laboratory ID VL-ID: ====================================...
CVE-2015-1464
RT aka Request Tracker before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to hijack sessions via an RSS feed URL...
CVE-2015-1464
RT aka Request Tracker before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to hijack sessions via an RSS feed URL...
DEBIAN-CVE-2015-1464
RT aka Request Tracker before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to hijack sessions via an RSS feed URL...
Design/Logic Flaw
RT aka Request Tracker before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to hijack sessions via an RSS feed URL...
CVE-2015-1464
RT aka Request Tracker before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to hijack sessions via an RSS feed URL...
CVE-2015-1464
RT aka Request Tracker before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to hijack sessions via an RSS feed URL...
CVE-2015-1464
CVE-2015-1464 concerns Request Tracker (RT) session hijacking via an RSS feed URL. The vulnerability affects RT where RSS feed URLs could be exploited to log in as the user who created the feed. Affected are RT 4.0.x before 4.0.23 and RT 4.2.x before 4.2.10. Public advisories (Fedora, Debian) ind...
FreeBSD : rt -- Remote DoS, Information disclosure and Session Hijackingvulnerabilities (d08f6002-c588-11e4-8495-6805ca0b3d42)
Best Practical reports : RT 3.0.0 and above, if running on Perl 5.14.0 or higher, are vulnerable to a remote denial-of-service via the email gateway; any installation which accepts mail from untrusted sources is vulnerable, regardless of the permissions configuration inside RT. This...
WordPress Add Link To Facebook Plugin <= 1.215 - Cross Site Scripting
Because of this vulnerability, attackers can hijack other user’s sessions, take control of another administrator’s browser or install malware on their computer. Solution Upgrade this plugin...