Microsoft Browser Spoofing Vulnerability

A spoofing vulnerability exists when Microsoft browsers do not properly parse HTTP content. An attacker who successfully exploited this vulnerability could trick a user by redirecting the user to a specially crafted website. The specially crafted website could either spoof content or serve as a...

USN-3220-3 linux-aws vulnerability

USN-3220-1 fixed a vulnerability in the Linux kernel. This update provides the corresponding updates for the Linux kernel for Amazon Web Services AWS. Alexander Popov discovered that the NHDLC line discipline implementation in the Linux kernel contained a double-free vulnerability. A local attack...

Ubuntu: Security Advisory (USN-3220-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

UBUNTU-CVE-2017-6471

In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a WSP infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wsp.c by validating the capability length...

CVE-2016-8643

In Moodle 2.x and 3.x, non-admin site managers may accidentally edit admins via web services...

UBUNTU-CVE-2016-8643

In Moodle 2.x and 3.x, non-admin site managers may accidentally edit admins via web services...

Code injection

In Moodle 2.x and 3.x, non-admin site managers may accidentally edit admins via web services...

CVE-2016-8643

In Moodle 2.x and 3.x, non-admin site managers may accidentally edit admins via web services...

CVE-2016-8643

In Moodle 2.x and 3.x, non-admin site managers may accidentally edit admins via web services...

CVE-2016-8643

In Moodle 2.x and 3.x, non-admin site managers may accidentally edit admins via web services...

CVE-2016-8643

Technical details (affected product/version, root cause, impact, and fixes) are not publicly provided in the supplied documents. Please monitor for updates from vendors and security bodies.

CVE-2016-8643

In Moodle 2.x and 3.x, non-admin site managers may accidentally edit admins via web services...

PT-2017-1085

Name of the Vulnerable Software and Affected Versions Moodle versions 2.x through 3.x Description The issue is related to insufficient access control in the administration service of the Moodle learning management system. This can potentially allow a remote attacker to compromise the...

CVE-2016-8643: Improper Access Control

In Moodle 2.x and 3.x, non-admin site managers may accidentally edit admins via web services...

CVE-2016-10086

RESTful web services in CA Service Desk Manager 12.9 and CA Service Desk Management 14.1 might allow remote authenticated users to read or modify task information by leveraging incorrect permissions applied to a RESTful request...

Cross site request forgery (csrf)

RESTful web services in CA Service Desk Manager 12.9 and CA Service Desk Management 14.1 might allow remote authenticated users to read or modify task information by leveraging incorrect permissions applied to a RESTful request...

CVE-2016-10086

RESTful web services in CA Service Desk Manager 12.9 and CA Service Desk Management 14.1 might allow remote authenticated users to read or modify task information by leveraging incorrect permissions applied to a RESTful request...

CVE-2016-10086

CA Service Desk Manager 12.9 and CA Service Desk Management 14.1 contain a RESTful services vulnerability (CVE-2016-10086) where remote authenticated users could read or modify task information due to incorrect permissions on RESTful requests. The affected components are REST endpoints handling t...

CVE-2016-10086: Undefined Security Weakness

RESTful web services in CA Service Desk Manager 12.9 and CA Service Desk Management 14.1 might allow remote authenticated users to read or modify task information by leveraging incorrect permissions applied to a RESTful request...

HPE Helion Eucalyptus Security Bypass Vulnerability

HPE Helion Eucalyptus is an open source for building Amazon Web Services AWS compatible private cloud solutions. A security bypass vulnerability exists in HPE Helion Eucalyptus, which allows remote attackers to submit a special request to perform an unauthorized operation...