Archive
3 November 2014
Vulnerabilities first published on this day (UTC), newest first.
18 results · Feed
-
Unscored —
The ipapwd_chpwop function in daemons/ipa-slapi-plugins/ipa-pwd-extop/ipa_pwd_extop.c in the directory server (dirsrv) …
-
Medium —
OpenStack Identity Keystone Improper Privilege Management
OpenStack Identity (Keystone) before 2014.1.1 does not properly handle when a role is assigned to a group that has the same ID as a user, which allows remote authenticated users to gain privileges that are assigned to a group with the same ID.
-
High 7.5
Plone and Zope2 do not reseed pseudo-random number generator
Zope before 2.13.19, as used in Plone before 4.2.3 and 4.3 before beta 1, does not reseed the pseudo-random number generator (PRNG), which makes it easier for remote attackers to guess the value via unspecified vectors. NOTE: this issue was SPLIT from CVE-201…
-
Medium 5.3
Plone contains Cross-site Request Forgery
The batch id change script (renameObjectsByPaths.py) in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to change the titles of content items by leveraging a valid CSRF token in a crafted request.
-
Medium 5.3
Exposure of Sensitive Information in Plone
The error pages in Plone before 4.2.3 and 4.3 before beta 1 allow remote attackers to obtain random numbers and derive the PRNG state for password resets via unspecified vectors. NOTE: this identifier was SPLIT per ADT2 due to different vulnerability types. C…
-
Unscored —
APT before 1.0.9 does not "invalidate repository data" when moving from an unauthenticated to authenticated state, whic…
-
Unscored —
APT before 1.0.9, when the Acquire::GzipIndexes option is enabled, does not validate checksums, which allows remote att…
-
Unscored —
APT before 1.0.9 does not verify downloaded files if they have been modified as indicated using the If-Modified-Since h…
-
Unscored —
The apt-get download command in APT before 1.0.9 does not properly validate signatures for packages, which allows remot…
-
Unscored —
Akeeba Restore (restore.php), as used in Joomla! 2.5.4 through 2.5.25, 3.x through 3.2.5, and 3.3.0 through 3.3.4; Akee…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in spacewalk-java 2.0.2 in Spacewalk and Red Hat Network (RHN) Sate…
-
Unscored —
Katello allows remote attackers to cause a denial of service (memory consumption) via the (1) mode parameter in the set…
-
High —
Smarty arbitrary PHP code execution
Smarty before 3.1.21 allows remote attackers to bypass the secure mode restrictions and execute arbitrary PHP code as demonstrated by "{literal}<{/literal}script language=php>" in a template.
-
Unscored —
ESTsoft ALUpdate 8.5.1.0.0 uses weak permissions (Users: Full Control) for the (1) AlUpdate folder and (2) AlUpdate.exe…
-
Unscored —
The REXML parser in Ruby 1.9.x before 1.9.3-p550, 2.0.x before 2.0.0-p594, and 2.1.x before 2.1.4 allows remote attacke…
-
Unscored —CVE-2014-5507 Public exploit
iBackup 10.0.0.32 and earlier uses weak permissions (Everyone: Full Control) for ib_service.exe, which allows local use…
-
Unscored —
Heap-based buffer overflow in the encode_slice function in libavcodec/proresenc_kostya.c in FFMpeg before 1.1.14, 1.2.x…
-
Unscored —
libavcodec/iff.c in FFMpeg before 1.1.14, 1.2.x before 1.2.8, 2.2.x before 2.2.7, and 2.3.x before 2.3.2 allows remote …