422 matches found
Design/Logic Flaw
The image creation configuration in aaabase before 16.26.1 for openSUSE 13.1 KDE adds the root user to the "users" group when installing from a live image, which allows local users to obtain sensitive information and possibly have other unspecified impacts, as demonstrated by reading /etc/shadow...
CVE-2013-7209
Cross-site request forgery CSRF vulnerability in admBase/login.page in the Admin module in JForum allows remote attackers to hijack the authentication of administrators for requests that change the user group permissions of arbitrary users via a groupsSave action...
CVE-2013-7209
The CVE-2013-7209 entry concerns JForum (Java-based forum) with a CSRF flaw in the Admin module, specifically admBase/login.page. The vulnerability affects the adminUsers/group permissions flow via the groupsSave action, enabling an attacker to hijack an administrator’s session and cause arbitrar...
Fedora 19 : boinc-client-7.2.33-2.git1994cc8.fc19 (2013-23720)
Updates Boinc to 7.2.33. Remove the 'Can't connect to boinc-client' notify at startup. Fix 'GPU not detected' problem. Fix security vulnerability 957811 Please note for 'GPU not detected' bug If you still have this problem after updating, you need to run boinc with your user, not with boinc user...
AZL-35352 CVE-2013-4342 affecting package xinetd for versions less than 2.3.15-14
xinetd does not enforce the user and group configuration directives for TCPMUX services, which causes these services to be run as root and makes it easier for remote attackers to gain privileges by leveraging another vulnerability in a service...
EUVD-2013-4228
xinetd does not enforce the user and group configuration directives for TCPMUX services, which causes these services to be run as root and makes it easier for remote attackers to gain privileges by leveraging another vulnerability in a service...
Restrict access to personal pages and directory
panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Server. Using Confluence Cloud? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFCLOUD-28592. panel We need to restrict access to personal pages and the directory. At present, there doesn't seem to be any way to do...
Restrict access to personal pages and directory
panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Cloud. Using Confluence Server? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFSERVER-28592. panel We need to restrict access to personal pages and the directory. At present, there doesn't seem to be any way to do...
Restrict access to personal pages and directory
We need to restrict access to personal pages and the directory. At present, there doesn't seem to be any way to do this. We have some guest accounts that we want to share a particular space with but unfortunately, we can not do that as all of the content in personal spaces and our directory are...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in X7 Chat 2.0.5.1 and earlier allows remote attackers to hijack the authentication of administrators for requests that add a user to an arbitrary group via the users page in an adminpanel action to index.php...
CVE-2012-5094
Unspecified vulnerability in the Oracle Agile PLM for Process component in Oracle Supply Chain Products Suite 5.2.2 and 6.1.0.0 allows remote attackers to affect confidentiality via unknown vectors related to User Group Management...
Design/Logic Flaw
Unspecified vulnerability in the Oracle Agile PLM for Process component in Oracle Supply Chain Products Suite 5.2.2 and 6.1.0.0 allows remote attackers to affect confidentiality via unknown vectors related to User Group Management...
CVE-2012-5094
Technical details about CVE-2012-5094 are not provided in the connected documents. The records describe an unspecified vulnerability in Oracle Agile PLM for Process with unknown vectors. Monitor for updates from Oracle, SUSE, NVD for specifics.
CVE-2012-5094
Unspecified vulnerability in the Oracle Agile PLM for Process component in Oracle Supply Chain Products Suite 5.2.2 and 6.1.0.0 allows remote attackers to affect confidentiality via unknown vectors related to User Group Management...
Sql injection
Multiple SQL injection vulnerabilities in Dolibarr 3.1.0 RC and probably earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 sortfield, 2 sortorder, and 3 sall parameters to user/index.php and b user/group/index.php; the id parameter to 4 info.php, 5 perms.php, 6...
JVN#16617002: BaserCMS vulnerable to access restriction
BaserCMS is an open-source Contents Management System CMS. BaserCMS contains a vulnerability in access restriction where adding a user in the user group "operators" which is created by default when BaserCMS is installed. Impact Users without administrative privileges may obtain administrative...
CentOS Update for systemtap CESA-2010:0894 centos5 i386
Check for the Version of systemtap OpenVAS Vulnerability Test CentOS Update for systemtap CESA-2010:0894 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...
DEBIAN-CVE-2011-2166
script-login in Dovecot 2.0.x before 2.0.13 does not follow the user and group configuration settings, which might allow remote authenticated users to bypass intended access restrictions by leveraging a script...
MumbaiITPro User Group Hacked by TriCk [TeaMp0isoN]
MumbaiITPro User Group Hacked by TriCk TeaMp0isoN MumbaiITPro User Group is an online technical community initiative for the IT Professionals. They are supported by Global IT Community Association GITCA and Microsoft Corporation. Hacked site : Mirror :...
DirectAdmin 0day-vulnerability warning-the black bar safety net
Generally LINUX is a virtual host, it is difficult to mention the right, it is difficult to rebound. MSF and PHP that vulnerability is the exception. It may not be. If there is a management platform DirectAdmin Then you can be successful The default login address http://ip:2222/ In LINUX under...