4879 matches found
Stack overflow
simple-gmail-login.php in the Simple Gmail Login plugin before 1.1.4 for WordPress allows remote attackers to obtain sensitive information via a request that lacks a timezone, leading to disclosure of the installation path in a stack trace...
CVE-2012-6313: Exposure of Sensitive Information to an Unauthorized Actor
simple-gmail-login.php in the Simple Gmail Login plugin before 1.1.4 for WordPress allows remote attackers to obtain sensitive information via a request that lacks a timezone, leading to disclosure of the installation path in a stack trace...
PT-2012-6262
Name of the Vulnerable Software and Affected Versions Simple Gmail Login plugin versions prior to 1.1.4 Description The issue allows remote attackers to obtain sensitive information via a request that lacks a timezone, leading to disclosure of the installation path in a stack trace. Recommendatio...
Update on CVE assigned for Wordpress Plugin Simple Gmail Login
Application- Wordpress Plugin Simple Gmail Login Exploit - Stack Trace Error URL- http://wordpress.org/extend/plugins/simple-gmail-login/ Author- Aditya Balapure Link - http://adityabalapure.blogspot.in/ CVE Assigned- CVE-2012-6313. Description Once you have installed this plugin you can login to...
Wordpress Plugin Simple Gmail Login Stack Trace Vulnerability
Application- Wordpress Plugin Simple Gmail Login Exploit - Stack Trace Error URL- http://wordpress.org/extend/plugins/simple-gmail-login/ Author- Aditya Balapure Link - http://adityabalapure.blogspot.in/ Description Once you have installed this plugin you can login to wp-admin using your ordinary...
WordPress Plugin Simple Gmail Login - Stack Trace Information Disclosure
WordPress Plugin Simple Gmail Login - Stack Trace Information Disclosure source: https://www.securityfocus.com/bid/56860/info The Simple Gmail Login plugin for Wordpress is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may...
WordPress Plugin Simple Gmail Login - Stack Trace Information Disclosure
source: https://www.securityfocus.com/bid/56860/info The Simple Gmail Login plugin for Wordpress is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Simple Gmail Login 1.1.3 and prior are vulnerabl...
VSS Errors Related to the 'NTDS' VSS Writer
Challenge This article discusses an error that occurs due to VSS and Veeam's Guest Processing technique for Domain Controllers. It is relevant to all backup jobs for both virtual and physical Domain Controllers. A job processing a Domain Controller with Application-Aware Processing fails with one...
NASA Tri-Agency Climate Education (TrACE) 1.0 XSS
NASA Tri-Agency Climate Education TrACE v1.0 Multiple XSS Vulnerabilities Vendor: NASA Product web page: http://www.nasa.gov Affected version: 1.0 Summary: The Tri-Agency Climate Education TrACE Catalog provides search and browse access to a catalog of educational products and resources. TrACE...
NASA Tri-Agency Climate Education (TrACE) v1.0 SQL Injection Vulnerability
Summary The Tri-Agency Climate Education TrACE Catalog provides search and browse access to a catalog of educational products and resources. TrACE focuses on climate education resources that have been developed by initiatives funded through NASA, NOAA, and NSF, comprising a tri-agency collaborati...
NASA Tri-Agency Climate Education (TrACE) v1.0 Multiple XSS Vulnerabilities
Summary The Tri-Agency Climate Education TrACE Catalog provides search and browse access to a catalog of educational products and resources. TrACE focuses on climate education resources that have been developed by initiatives funded through NASA, NOAA, and NSF, comprising a tri-agency collaborati...
CVE-2012-5316
Multiple cross-site scripting XSS vulnerabilities in Barracuda Spam & Virus Firewall 600 Firmware 4.0.1.009 and earlier allow remote authenticated users to inject arbitrary web script or HTML via 1 Troubleshooting in the Trace route Device module or 2 LDAP Username in the LDAP Configuration modul...
CVE-2012-5316: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Barracuda Spam & Virus Firewall 600 Firmware 4.0.1.009 and earlier allow remote authenticated users to inject arbitrary web script or HTML via 1 Troubleshooting in the Trace route Device module or 2 LDAP Username in the LDAP Configuration modul...
PT-2012-5915
Name of the Vulnerable Software and Affected Versions Barracuda Spam & Virus Firewall 600 Firmware versions 4.0.1.009 and earlier Description The issue allows remote authenticated users to inject arbitrary web script or HTML via the Troubleshooting in the Trace route Device module or the LDAP...
Slackware: Security Advisory (SSA:2005-310-04)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mandriva Linux Security Advisory : wireshark (MDVSA-2012:080)
Multiple vulnerabilities was found and corrected in Wireshark : It may be possible to make Wireshark hang for long or indefinite periods by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file. It may be possible to make Wireshark crash by...
Mandriva Linux Security Advisory : wireshark (MDVSA-2012:125)
Multiple vulnerabilities was found and corrected in Wireshark : It may be possible to make Wireshark crash by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file CVE-2012-4048. It may be possible to make Wireshark consume excessive CPU resourc...
Mozilla: Multiple Use-after-free issues (MFSA 2012-58)
Use-after-free vulnerability in the js::gc::MapAllocToTraceKind function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code via unspecified vectors...
