1205 matches found
CVE-2014-5599
The Tiny Farm Android app (package com.com2us.tinyfarm.normal.freefull.google.global.android.common, version 2.02.00) is affected by CVE-2014-5599, where the app does not verify X.509 certificates from SSL servers. This missing certificate validation enables man-in-the-middle attackers to spoof s...
CVE-2014-5599
The Tiny Farm aka com.com2us.tinyfarm.normal.freefull.google.global.android.common application 2.02.00 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5818: Undefined Security Weakness
The Tiny Tower aka com.mobage.ww.a560.tinytowerandroid application 1.7.0.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5599: Undefined Security Weakness
The Tiny Farm aka com.com2us.tinyfarm.normal.freefull.google.global.android.common application 2.02.00 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
tiny-url <= 1.3.2 - XSS in ZeroClipboard
The Tiny URL WordPress plugin was affected by a XSS in ZeroClipboard security vulnerability...
Tiny Web Gallery 1.5 Image Parameter Multiple Remote File Include Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/19462/info Tiny Web Gallery is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary...
Tiny Server <= 1.1.9 HTTP HEAD DoS
No description provided by source. !/usr/bin/python Overflow exploiting a vulnerability in Tiny Server =1.1.9 HTTP HEAD request. Date of Discovery: 3/19/2012 0 Day Author: Brock Haun Vulnerable Software Download: http://tinyserver.sourceforge.net/tinyserverfull.zip Software Version: =1.1.9 Target...
Tiny Portal 1.0 - 'shouts' Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28630/info Tiny Portal is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
XOOPS Tiny Event 1.01 - 'print' Option SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27931/info Tiny Event is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise th...
Low: perl-Capture-Tiny
Issue Overview: It was found 1 that the Capture::Tiny module, provided by the perl-Capture-Tiny package, used the File::temp::tmpnam module to generate temporary files: ./lib/Capture/Tiny.pm: $stash-flagfiles$which = scalar tmpnam; This module makes use of the mktemp function when called in the...
UBUNTU-CVE-2012-4230
The bbcode plugin in TinyMCE 3.5.8 does not properly enforce the TinyMCE security policy for the 1 encoding directive and 2 validelements attribute, which allows attackers to conduct cross-site scripting XSS attacks via application-specific vectors, as demonstrated using a textarea element...
Fedora Update for perl-Capture-Tiny FEDORA-2014-2321
Check for the Version of perl-Capture-Tiny OpenVAS Vulnerability Test Fedora Update for perl-Capture-Tiny FEDORA-2014-2321 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
Fedora Update for perl-Capture-Tiny FEDORA-2014-2261
Check for the Version of perl-Capture-Tiny OpenVAS Vulnerability Test Fedora Update for perl-Capture-Tiny FEDORA-2014-2261 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
Fedora Update for perl-Capture-Tiny FEDORA-2014-2261
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for perl-Capture-Tiny FEDORA-2014-2321
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 20 : perl-Capture-Tiny-0.24-1.fc20 (2014-2321)
This release fixes CVE-2014-1875 -- insecure temporary file usage. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
Fedora 19 : perl-Capture-Tiny-0.24-1.fc19 (2014-2261)
This release fixes CVE-2014-1875 -- insecure temporary file usage. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
[SECURITY] Fedora 20 Update: perl-Capture-Tiny-0.24-1.fc20
Capture::Tiny provides a simple, portable way to capture anything sent to STDOUT or STDERR, regardless of whether it comes from Perl, from XS code or from an external program. Optionally, output can be teed so that it is captured while being passed through to the original handles. Yes, it even...
[SECURITY] Fedora 19 Update: perl-Capture-Tiny-0.24-1.fc19
Capture::Tiny provides a simple, portable way to capture anything sent to STDOUT or STDERR, regardless of whether it comes from Perl, from XS code or from an external program. Optionally, output can be teed so that it is captured while being passed through to the original handles. Yes, it even...