CVE-2010-4340

libcloud before 0.4.1 does not verify SSL certificates for HTTPS connections, which allows remote attackers to spoof certificates and bypass intended access restrictions via a man-in-the-middle MITM attack...

GMDS CMS SQL Injection

================================================ GMDS CMS index.php SQL Injection Vulnerability ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /...

CVE-2011-0228

The Data Security component in Apple iOS before 4.2.10 and 4.3.x before 4.3.5 does not check the basicConstraints parameter during validation of X.509 certificate chains, which allows man-in-the-middle attackers to spoof an SSL server by using a non-CA certificate to sign a certificate for an...

CVE-2008-7299

IBM Tivoli Federated Identity Manager TFIM 6.2.0 before 6.2.0.2 uses an incomplete SAML 1.x browser-artifact, which allows remote OpenID providers to spoof assertions via vectors related to the Issuer field...

CVE-2008-7299

IBM Tivoli Federated Identity Manager TFIM 6.2.0 before 6.2.0.2 uses an incomplete SAML 1.x browser-artifact, which allows remote OpenID providers to spoof assertions via vectors related to the Issuer field...

kernel signal spoofing issue

kernel/signal.c in the Linux kernel before 2.6.39 allows local users to spoof the uid and pid of a signal sender via a sigqueueinfo system call...

Nmap NSE net: auth-spoof

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-1446

Google Chrome before 11.0.696.57 allows remote attackers to spoof the URL bar via vectors involving 1 a navigation error or 2 an interrupted load...

South Park: Apple's Tracking Me, Dude!

Apple may be trying to change the spin on its controversial location tracking, err…harvesting feature. The company issued a FAQ this week and pulled CEO Steve Jobs off of medical leave to argue the company’s case and quell concerns about the little known feature that include calls for an...

CVE-2011-1429

Mutt does not verify that the smtps server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL SMTP server via an arbitrary certificate, a different vulnerability than CVE-2009-3766...

Design/Logic Flaw

Mutt does not verify that the smtps server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL SMTP server via an arbitrary certificate, a different vulnerability than CVE-2009-3766...

Internet Explorer 9 Address Bar Spoof

IE9 Address Bar Spoof: For a quick demo, please visit http://keyloggeronline.com/misc/temp/about.htm Thanks. Spoof function myOpen var mywin=open'about:blank',"mywindow",'location=1,scrollbars=0,width=300,height=290';...

CVE-2011-1107

Removed by vendor...

CVE-2011-1107

Unspecified vulnerability in Google Chrome before 9.0.597.107 allows remote attackers to spoof the URL bar via unknown vectors...

Google Fixes 19 Bugs in Chrome, Pays $14K in Bug Bounties

Google has released version 9.0.597.107 of its Chrome browser, fixing 19 security vulnerabilities and paying $14,000 in rewards to researchers in the process. The new version of Chrome, which Google released on Monday afternoon, includes fixes for 16 high-severity vulnerabilities and three bugs...

PT-2011-2872

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 9.0.597.107 Description The issue allows remote attackers to spoof the URL bar via unknown vectors. Recommendations For versions prior to 9.0.597.107, update to version 9.0.597.107 or later to resolve the issue...

CVE-2011-0910

The cookie implementation in Vanilla Forums before 2.0.17.6 makes it easier for remote attackers to spoof signed requests, and consequently obtain access to arbitrary user accounts, via HMAC timing attacks...

PT-2011-2753

Name of the Vulnerable Software and Affected Versions Vanilla Forums versions prior to 2.0.17.6 Description The issue makes it easier for remote attackers to spoof signed requests and obtain access to arbitrary user accounts via HMAC timing attacks. This allows attackers to potentially gain...

CVE-2011-0910: Undefined Security Weakness

The cookie implementation in Vanilla Forums before 2.0.17.6 makes it easier for remote attackers to spoof signed requests, and consequently obtain access to arbitrary user accounts, via HMAC timing attacks...

Microsoft Internet Explorer Information Disclosure Vulnerability (2501696)

The host is installed with Internet Explorer and is prone to information disclosure vulnerability. This NVT has been replaced by NVT secpodms11-026.nasl OID:1.3.6.1.4.1.25623.1.0.902409. OpenVAS Vulnerability Test $Id: secpodmsiemhtmlinfodiscvuln.nasl 6526 2017-07-05 05:43:52Z cfischer $ Microsof...