184 matches found
CVE-2015-0543
CVE-2015-0543 affects EMC Secure Remote Services Virtual Edition (ESRS VE) 3.x prior to 3.06. The issue is insufficient validation of X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and potentially access sensitive information. Affected versions include ESRS VE 3.02–...
ESA-2015-097: EMC Secure Remote Services (ESRS) Virtual Edition (VE) Multiple Security Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-097: EMC Secure Remote Services ESRS Virtual Edition VE Multiple Security Vulnerabilities CVE Identifier: CVE-2015-0543, CVE-2015-0544 Severity Rating: CVSS v2 Base Score: See below for individual scores for each CVE Affected products: • ESRS...
openSUSE Security Update : MozillaFirefox (openSUSE-2015-375)
The Mozilla Firefox web browser was updated to version 38.0.1 to fix several security and non-security issues. This update also includes a Mozilla Network Security Services NSS update to version 3.18.1. The following vulnerabilities and issues were fixed : Changes in Mozilla Firefox : - update to...
Sql injection
SQL injection vulnerability in the Gateway Provisioning service in EMC Secure Remote Services Virtual Edition ESRS VE 3.02 and 3.03 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2015-0525
The ESRS VE Gateway Provisioning service in EMC Secure Remote Services Virtual Edition (versions 3.02 and 3.03) contains a command injection flaw that could allow an unauthenticated remote attacker to execute arbitrary OS commands. The vulnerability is tied to the Gateway Provisioning component; ...
CVE-2015-0524
The ESRS VE Gateway Provisioning service (EMC Secure Remote Services Virtual Edition) versions 3.02 and 3.03 contain a SQL injection vulnerability (CVE-2015-0524). The vulnerability, described across multiple sources, allows a remote attacker to retrieve arbitrary data, interfere with application...
CVE-2014-7748
The Garip Ve Ilginc Olaylar aka com.wGaripveeIlgincOlay application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7748
The Garip Ve Ilginc Olaylar aka com.wGaripveeIlgincOlay application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7748
CVE-2014-7748 affects the Android app Garip Ve Ilginc Olaylar (0.1). The vulnerability is due to the app not verifying X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The available documents con...
AWBS <= 2.7.1 (news.php viewnews) Remote SQL Injection Vulnerability
No description provided by source. Viva IslaM Viva IslaM Remote SQL Injection Vulnerability AWBS Versions 2.3.3 - v2.5.0 - v2.6.3 - 2.7.0 - V2.7.1 news.php viewnews AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] !! SYRIAN HaCkErS !! Script : AWBS Versions : 2.3.3 - v2.5.0 - v2.6...
[oss-security] CVE request: Proxmox VE < 3.2 user enumeration vulnerability
Hi list, We recently found a vulnerability affecting Proxmox VE 3.2 that allows an unauthenticated user to perform user enumeration. Vendor was contacted and the vulnerability fixed in Proxmox VE 3.2, released on 2014-03-10. References: Proxmox related commits:...
sensiGal 2.0 SQL Injection
Application Name : sensiGal v2.0 Vulnerable Type : SqL Injection Infection : Kullanýcý ve Yönetici Bilgileri Çekilebilir. Bug Fix Advice : Zararlý karakterler filtrelenmelidir. Author : Lazmania61 Example : http://www.galerie.edor.org/index.php?id=album&aid=193...
AutoWeb 0.9b SQL Injection
Application Name : AutoWeb 0.9b Vulnerable Type : SqL Injection Infection : Kullanýcý ve Yönetici Bilgileri Çekilebilir. Bug Fix Advice : Zararlý karakterler filtrelenmelidir. Author : Lazmania61 Example : http://www.savinodelbene.hr/news.php?id=2&lang=IT&theme=savino&news=1...
Global Travel SQL Injection
======================================================= Global Travel Promodetail.asp SQL Injection Vulnerability ======================================================= + Author : josalijoe + Homepage : http://josalijoe.org/ & http://indonesiancoder.com/ + Mail : josalijoeatyahoodotcom + Date :...
WebSuite SQL Injection
============================================================== WebSuite contentid SQL Injection Vulnerability ============================================================== Exploit Title: WebSuite contentid SQL Injection Vulnerability Date: september 21, 2010 Author: josalijoe Category? : Web App...
Joomla Trabalhe Conosco Cross Site Scripting
Joomla Component comtrabalheconosco Cross Site Scripting Vulnerabilities Author : Pyske Name : comtrabalheconosco Home : www.cyber-warrior.org Greetz : Fl0riX , M-K-A , F0RTS3V3N , 3KB3R ,BARCOD3 and ALL Cyber-Warrior Bug Type : Cross Site Scripting Infection : Yönetici ve User cookiekleri...
Joomla QPersonel Cross Site Scripting
Joomla Component comqpersonel Cross Site Scripting Vulnerabilities Author : Pyske Greetz : Fl0riX , M-K-A , F0RTS3V3N , 3KB3R ,system-Hacker ,HeroTurK ,fireofdevil and ALL Cyber-Warrior Name : comqpersonel Bug Type : Cross Site Scripting Infection : Yönetici ve User cookiekleri calinabilir. Bug F...
Joomla! Component com_trabalhe_conosco - Cross-Site Scripting
Joomla Component comtrabalheconosco Cross Site Scripting Vulnerabilities Author : Pyske Name : comtrabalheconosco Home : www.cyber-warrior.org Greetz : Fl0riX , M-K-A , F0RTS3V3N , 3KB3R ,BARCOD3 and ALL Cyber-Warrior Bug Type : Cross Site Scripting Infection : Yönetici ve User cookiekleri...
CVE-2009-3064
Directory traversal vulnerability in debugger/debugphp.php in Ve-EDIT 0.1.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the GETfilename parameter...
Remote file inclusion
PHP remote file inclusion vulnerability in editor/edithtmlarea.php in Ve-EDIT 0.1.4 allows remote attackers to execute arbitrary PHP code via a URL in the highlighter parameter...