6764 matches found
Insufficiently random session id in Java SockJS client
Session id generation in the Java SockJS client is not sufficiently secure and could allow a user to send messages to another user’s session. Note that this only affects users of the Java SockJS client, which generates its own session id. It does not affect browser clients even if they’re...
Beckwith Electric TCP Initial Sequence Vulnerability
OVERVIEW Raheem Beyah, David Formby, and San Shin Jung of Georgia Tech, via a research project partially sponsored by the Georgia Tech National Electric Energy Testing Research and Applications Center, have identified a TCP initial sequence numbers vulnerability in two of Beckwith Electric’s...
[SECURITY] [DLA 158-1] request-tracker3.8 security update
Package : request-tracker3.8 Version : 3.8.8-7+squeeze8 CVE ID : CVE-2014-9472 CVE-2015-1165 CVE-2015-1464 Multiple vulnerabilities have been discovered in Request Tracker, an extensible trouble-ticket tracking system. The Common Vulnerabilities and Exposures project identifies the following...
Debian DSA-3176-1 : request-tracker4 - security update
Multiple vulnerabilities have been discovered in Request Tracker, an extensible trouble-ticket tracking system. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2014-9472 Christian Loos discovered a remote denial of service vulnerability, exploitable via...
DLA-158-1 request-tracker3.8 - security update
Bulletin has no description...
[SECURITY] [DSA 3176-1] request-tracker4 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3176-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 26, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DSA 3176-1] request-tracker4 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3176-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 26, 2015 http://www.debian.org/security/faq -...
rt -- Remote DoS, Information disclosure and Session Hijackingvulnerabilities
Best Practical reports: RT 3.0.0 and above, if running on Perl 5.14.0 or higher, are vulnerable to a remote denial-of-service via the email gateway; any installation which accepts mail from untrusted sources is vulnerable, regardless of the permissions configuration inside RT. This...
DSA-3176-1 request-tracker4 - security update
Bulletin has no description...
Debian Security Advisory DSA 3176-1 (request-tracker4 - security update)
Multiple vulnerabilities have been discovered in Request Tracker, an extensible trouble-ticket tracking system. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2014-9472 Christian Loos discovered a remote denial of service vulnerability, exploitable via the...
Debian: Security Advisory (DSA-3176-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
noVNC 'include/webutil.js' session hijacking vulnerability
NOVNC is a VNC client , using HTML 5 WebSockets, Canvas and JavaScript technology . A session hijacking vulnerability exists in noVNC 'include/webutil.js', which allows attackers to exploit the vulnerability to gain unauthorized access to the application...
IBM Content Navigator Cross-Site Scripting Vulnerability
IBM Content Navigator is a Web client from IBM USA that supports searching and processing documents stored in content servers around the world from a Web browser. A cross-site scripting vulnerability exists in IBM Content Navigator, which can be exploited by remote attackers to inject arbitrary w...
Multiple Cross-Site Scripting Vulnerabilities in Landsknecht Adminsystems CMS
Landsknecht Adminsystems CMS is a content management system. A cross-site scripting vulnerability exists in Landsknecht Adminsystems CMS, which allows attackers to exploit the vulnerability to obtain sensitive information and hijack sessions...
Siemens SCALANCE X-200IRT < 5.2.0 Session Hijacking
Binary data scadasiemensscalancex200cve-2015-1049.nbin...
BlinkSale Bug Bounty #1 - Encode & Validation Vulnerability
Document Title: =============== BlinkSale Bug Bounty 1 - Encode & Validation Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1416 Release Date: ============= 2015-02-06 Vulnerability Laboratory ID VL-ID: ====================================...
Siemens SCALANCE X-200IRT Web Server Session Hijacking Vulnerability
Siemens SCALANCE X-200IRT is an industrial Ethernet switch from Siemens, Germany. A security vulnerability exists in the web server in Siemens SCALANCE X-200IRT switches prior to version 5.2.0. A remote attacker could exploit the vulnerability to hijack a session...
CVE-2015-1049
The web server on Siemens SCALANCE X-200IRT switches with firmware before 5.2.0 allows remote attackers to hijack sessions via unspecified vectors...
