1220 matches found
CVE-2018-2713
Vulnerability in the Oracle WebCenter Portal component of Oracle Fusion Middleware subcomponent: WebCenter Spaces Application. Supported versions that are affected are 11.1.1.9.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via...
CVE-2018-2713: Undefined Security Weakness
Vulnerability in the Oracle WebCenter Portal component of Oracle Fusion Middleware subcomponent: WebCenter Spaces Application. Supported versions that are affected are 11.1.1.9.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via...
Unspecified Vulnerability in Oracle Fusion Middleware (CNVD-2018-02270)
Oracle Fusion Middleware is Oracle's suite of business innovation platforms for enterprise and cloud environments, of which Oracle WebCenter Portal is a component that seamlessly integrates portals with enterprise applications. A security vulnerability exists in the WebCenter Spaces Application...
Fingerprinting Digital Documents
In this era of electronic leakers, remember that zero-width spaces and homoglyph substitution can fingerprint individual instances of files...
SA161: Local Information Disclosure Due to Meltdown and Spectre Attacks
SUMMARY Symantec Network Protection products, which run on an affected CPU chipset and execute arbitrary code from external sources, are susceptible to several information disclosure vulnerabilities aka Meltdown and Spectre attacks. A remote attacker, with the ability to execute arbitrary code...
November 27, 2017âKB4051033 (OS Build 14393.1914)
None None...
CVE-2017-1000367
Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation embedded spaces in the getprocessttyname function resulting in information disclosure and command execution...
CVE-2017-1000367
Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation embedded spaces in the getprocessttyname function resulting in information disclosure and command execution...
CVE-2017-1000367
The sudo utility (version 1.8.20 and earlier) is vulnerable to a privilege escalation flaw due to insufficient input validation in the get_process_ttyname() function. A local attacker with permission to execute commands via sudo can exploit how the program parses tty information from the proc fil...
CVE-2017-9100
login.cgi on D-Link DIR-600M devices with firmware 3.04 allows remote attackers to bypass authentication by entering more than 20 blank spaces in the password field during an admin login attempt...
Weblate: Null Password - Setting a new password doesn't check for empty spaces
Hi Again! As seen your website at https://demo.weblate.org/accounts/password/ Your password can't be too similar to your other personal information. Your password must contain at least 6 characters. Your password can't be a commonly used password. Your password can't be entirely numeric. I found...
Squirrelmail Remote Code Execution Vulnerability
SquirrelMail is a PHP-based WEB mail service program . A remote code execution vulnerability exists in DeliverSendMail.class.php in the initStream function of Squirrelmail, due to escapeshellcmd not escaping space characters. An attacker could use the vulnerability to execute arbitrary code over...
Phabricator: Autoclose can close any task regardless of policies/spaces
Description If a user can push to a repository that has autoclose enabled, they can close //any// Maniphest task on the install, including tasks whose policies otherwise restrict the user from viewing or editing, and tasks inside Spaces that the user can't view. I don't think this rises to the...
August 23, 2016 â KB3176934 (OS Build 14393.82)
None None...
Spaces - Find, discuss, do - BSD license, Customized SSL vulnerabilities
HackApp vulnerability scanner discovered that application Spaces - Find, discuss, do published at the 'play' market has multiple vulnerabilities...
PT-2016-3902
Name of the Vulnerable Software and Affected Versions Atlassian Confluence versions prior to 5.8.17 Description The issue allows remote authenticated users to read configuration files. This can be achieved by manipulating the decoratorName parameter in specific API endpoints, such as...
Open Atrium - Moderately Critical - Access Bypass - SA-CONTRIB-2016-003
Open Atrium allows you to control access via a hierarchy of public and private spaces and sub-spaces. If a public sub-space is created within a private parent-space, the content nodes of the public sub-space are accessible to users who are not members of the parent private space. This issue only...
The vulnerability of Firefox and Firefox ESR browsers allows attackers to bypass domain restrictions and execute cross-site scripting attacks.
The vulnerability of Firefox and Firefox ESR browsers is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass domain restrictions and perform cross-domain executions by adding spaces in the IP address string...
Space permissions ignored in list of blog posts by date
h3. Summary Users have the ability to view a list of all blog posts, even from spaces in which they don't have permission to access. h3. Steps to Reproduce Install Confluence 5.7.x Create two spaces Space A Space B remove all permissions for confluence-users Create a blog post in Space A Create a...
Unspecified Vulnerability in Oracle Fusion Middleware WebCenter Portal Component (CNVD-2015-02539)
Oracle Fusion Middleware is Oracle's suite of business innovation platforms for enterprise and cloud environments, of which Oracle WebCenter Portal is a component that seamlessly integrates portals with enterprise applications. A security vulnerability exists in the WebCenter Spaces Application...