120 matches found
GHSA-JJJR-3JCW-F8V6 Potential Observable Timing Discrepancy in Wagtail
Impact A potential timing attack exists on pages or documents that have been protected with a shared password through Wagtail's "Privacy" controls. This password check is performed through a character-by-character string comparison, and so an attacker who is able to measure the time taken by this...
PT-2020-12505 · Wagtail · Wagtail
Name of the Vulnerable Software and Affected Versions: Wagtail versions prior to 2.7.3 Wagtail versions prior to 2.8.2 Description: A potential timing attack exists on pages or documents that have been protected with a shared password through Wagtail's "Privacy" controls. This password check is...
UBUNTU-CVE-2013-7371
node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware vulnerability due to incomplete fix for CVE-2013-7370...
Icinga2 < 2.8.2 Multiple Vulnerabilities
Icinga2 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:icinga:icinga2"; if description...
CVE-2017-1000469
Cobbler version up to 2.8.2 is vulnerable to a command injection vulnerability in the "add repo" component resulting in arbitrary code execution as root user...
CVE-2017-1000469
Cobbler version up to 2.8.2 is vulnerable to a command injection vulnerability in the "add repo" component resulting in arbitrary code execution as root user...
Command injection
Cobbler version up to 2.8.2 is vulnerable to a command injection vulnerability in the "add repo" component resulting in arbitrary code execution as root user...
security/ossec-hids-* -- root escalation via syscheck feature
OSSEC reports: The CVE-2015-3222 vulnerability, which allows for root escalation via sys check has been fixed in OSSEC 2.8.2. This issue does not affect agents...
The vulnerability of the Gentoo Linux operating system allows a malicious intruder to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the nbd package up to version 2.8.2-r1 of the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...
WordPress Facebook Like Box 2.8.2 CSRF / XSS
Title: WordPress 'Facebook Like Box' plugin - CSRF/XSS Version: 2.8.2 Reported by: Morten Nørtoft, Kenneth Jepsen, Mikkel Vej Date: 2014/12/12 Download: https://wordpress.org/plugins/cardoza-facebook-like-box/ Notified WordPress: 2014/11/27...
OpenEMR 2.8.2 Import_XML.PHP Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22346/info OpenEMR is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the application and the underlyin...
OpenX Administrative Interface Authentication Bypass Vulnerability
OpenX is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openx:openx";...
Security fix for the ALT Linux 5 package fuse version 2.8.2-alt1
Jan. 27, 2010 Denis Smirnov 2.8.2-alt1 - 2.8.2 - CVE-2009-3297 ALT 22834...
Design/Logic Flaw
libgnutls in GnuTLS before 2.8.2 does not properly handle a '\0' character in a domain name in the subject's 1 Common Name CN or 2 Subject Alternative Name SAN field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued b...
Secunia Research: Orbit Downloader Long URL Parsing Buffer Overflow
====================================================================== Secunia Research 25/02/2009 - Orbit Downloader Long URL Parsing Buffer Overflow - ====================================================================== Table of Contents Affected...
PT-2009-3039 · Sobi · Com Sobi2
Name of the Vulnerable Software and Affected Versions: com sobi2 version 2.8.2 Description: A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the bid parameter in a "showbiz" action to index.php. Recommendations: For version 2.8.2, at...
HP Linux Imaging and Printing System Security Bypass Vulnerability
This host is installed with HP Linux Imaging and Printing System and is prone to Security Bypass vulnerability. OpenVAS Vulnerability Test $Id: secpodhplipsecbypassvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ HP Linux Imaging and Printing System Security Bypass Vulnerability Authors: Sujit Ghosal...
DSA-1136-1 gpdf - wrong input sanitising
Bulletin has no description...
DEBIAN-CVE-2005-3534
Buffer overflow in the Network Block Device nbd server 2.7.5 and earlier, and 2.8.0 through 2.8.2, allows remote attackers to execute arbitrary code via a large request, which is written past the end of the buffer because nbd does not account for memory taken by the reply header...
